0)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:03:30 executing program 5: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:03:31 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) [ 875.515051][T23471] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 875.528356][T23471] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 875.963344][T23471] bridge0: port 6(veth13) entered blocking state [ 875.973100][T23471] bridge0: port 6(veth13) entered disabled state [ 876.085673][T23471] device veth13 entered promiscuous mode 01:03:32 executing program 5: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 01:03:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 01:03:32 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:03:32 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) [ 876.832713][T23495] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 876.843715][T23495] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:32 executing program 5: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) [ 877.320257][T23495] bridge0: port 7(veth15) entered blocking state [ 877.330174][T23495] bridge0: port 7(veth15) entered disabled state 01:03:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 877.430405][T23495] device veth15 entered promiscuous mode 01:03:33 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 01:03:33 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) 01:03:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 01:03:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:34 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') 01:03:34 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 01:03:34 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) [ 878.618834][T23528] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 878.629871][T23528] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:34 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 879.091185][T23528] bridge0: port 8(veth17) entered blocking state [ 879.100840][T23528] bridge0: port 8(veth17) entered disabled state [ 879.186738][T23528] device veth17 entered promiscuous mode 01:03:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) 01:03:35 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, r1, 0x0, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 01:03:35 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) 01:03:35 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') 01:03:35 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:35 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) [ 879.885370][T23554] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 879.895956][T23554] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, r1, 0x0, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 01:03:36 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) [ 880.542900][T23554] bridge0: port 9(veth19) entered blocking state [ 880.552168][T23554] bridge0: port 9(veth19) entered disabled state [ 880.685806][T23554] device veth19 entered promiscuous mode 01:03:36 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, r1, 0x0, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 01:03:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) 01:03:36 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') 01:03:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 01:03:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 881.336532][T23581] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 881.349017][T23581] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:37 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) [ 881.859408][T23581] bridge0: port 10(veth21) entered blocking state [ 881.869538][T23581] bridge0: port 10(veth21) entered disabled state 01:03:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) [ 881.973051][T23581] device veth21 entered promiscuous mode 01:03:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) 01:03:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) 01:03:38 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB="000000000400"/28]) 01:03:38 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:38 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 01:03:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) [ 882.858637][T23608] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 882.868713][T23608] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 883.284662][T23608] bridge0: port 11(veth23) entered blocking state [ 883.305980][T23608] bridge0: port 11(veth23) entered disabled state [ 883.417372][T23608] device veth23 entered promiscuous mode 01:03:39 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB="000000000400"/28]) 01:03:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:39 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 01:03:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 01:03:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) [ 883.985751][T23627] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 883.997883][T23627] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 884.478243][T23627] bridge0: port 12(veth25) entered blocking state [ 884.487895][T23627] bridge0: port 12(veth25) entered disabled state [ 884.576117][T23627] device veth25 entered promiscuous mode 01:03:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) 01:03:40 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:40 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB="000000000400"/28]) 01:03:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, 0x0, 0xdf}}], 0x800004d, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 885.284476][T23657] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 885.303242][T23657] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) 01:03:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:41 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 01:03:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) [ 886.207717][T23657] bridge0: port 13(veth27) entered blocking state [ 886.214512][T23657] bridge0: port 13(veth27) entered disabled state [ 886.224726][T23657] device veth27 entered promiscuous mode 01:03:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1c}}, 0x0) 01:03:42 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 886.946498][T23680] new mount options do not match the existing superblock, will be ignored [ 887.069036][T23687] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 887.079737][T23687] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:43 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1c}}, 0x0) [ 887.592011][T23687] bridge0: port 14(veth29) entered blocking state [ 887.602130][T23687] bridge0: port 14(veth29) entered disabled state 01:03:43 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 887.721393][T23687] device veth29 entered promiscuous mode 01:03:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 01:03:43 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:03:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 888.195458][T23703] new mount options do not match the existing superblock, will be ignored 01:03:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1c}}, 0x0) [ 888.312144][T23708] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 888.324404][T23708] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 888.754664][T23708] bridge0: port 15(veth31) entered blocking state [ 888.762424][T23708] bridge0: port 15(veth31) entered disabled state 01:03:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 888.854844][T23708] device veth31 entered promiscuous mode 01:03:44 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}}, 0x0) 01:03:45 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:03:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x0) [ 889.338361][T23724] new mount options do not match the existing superblock, will be ignored 01:03:45 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x8) 01:03:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}}, 0x0) 01:03:45 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 889.665748][T23731] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 889.675927][T23731] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 890.073570][T23743] new mount options do not match the existing superblock, will be ignored 01:03:46 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x8) 01:03:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}}, 0x0) [ 890.426727][T23731] bridge0: port 16(veth33) entered blocking state [ 890.433647][T23731] bridge0: port 16(veth33) entered disabled state [ 890.444092][T23731] device veth33 entered promiscuous mode 01:03:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 01:03:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 890.753581][T23755] new mount options do not match the existing superblock, will be ignored 01:03:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x0) 01:03:46 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:03:46 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x8) 01:03:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r1, 0x0, r2, 0x0, 0x8100004, 0xe) 01:03:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) [ 891.402869][T23768] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 891.413430][T23768] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 891.560419][T23772] new mount options do not match the existing superblock, will be ignored [ 891.846713][T23768] bridge0: port 17(veth35) entered blocking state [ 891.855582][T23768] bridge0: port 17(veth35) entered disabled state [ 891.963154][T23768] device veth35 entered promiscuous mode 01:03:48 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x0) 01:03:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:48 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:03:48 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:03:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) [ 892.685835][T23792] new mount options do not match the existing superblock, will be ignored 01:03:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 892.801649][T23797] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 892.812607][T23797] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:48 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) [ 893.360337][T23810] new mount options do not match the existing superblock, will be ignored 01:03:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x0, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 893.532574][T23797] bridge0: port 18(veth37) entered blocking state [ 893.539241][T23797] bridge0: port 18(veth37) entered disabled state [ 893.549527][T23797] device veth37 entered promiscuous mode 01:03:49 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x8) 01:03:49 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:03:49 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:03:49 executing program 1: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff02000000000000000000000000002100000000000000", 0x30}], 0x1}, 0x0) [ 893.956726][T23818] new mount options do not match the existing superblock, will be ignored 01:03:50 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) [ 894.219034][T23823] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 894.230220][T23823] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x0, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 894.735841][T23823] bridge0: port 19(veth39) entered blocking state [ 894.745878][T23823] bridge0: port 19(veth39) entered disabled state [ 894.848461][T23823] device veth39 entered promiscuous mode [ 894.954204][T23840] new mount options do not match the existing superblock, will be ignored 01:03:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:51 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) 01:03:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x0, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 01:03:51 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:03:51 executing program 1: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x9c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3055}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffe77, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x9c}}, 0x0) [ 895.476464][T23844] new mount options do not match the existing superblock, will be ignored 01:03:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd8102", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:51 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r2, @ANYBLOB="000000000400"/28]) 01:03:51 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) 01:03:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 01:03:51 executing program 1: 01:03:51 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 896.170655][T23860] new mount options do not match the existing superblock, will be ignored [ 896.328708][T23865] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 896.351628][T23865] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd8102", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:52 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) [ 896.851722][T23865] bridge0: port 20(veth41) entered blocking state [ 896.861454][T23865] bridge0: port 20(veth41) entered disabled state 01:03:52 executing program 1: [ 896.963011][T23865] device veth41 entered promiscuous mode 01:03:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 01:03:53 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r2, @ANYBLOB="000000000400"/28]) 01:03:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd8102", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:53 executing program 1: [ 897.407629][T23879] new mount options do not match the existing superblock, will be ignored 01:03:53 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 897.699889][T23885] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 897.711250][T23885] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 01:03:53 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) [ 898.140573][T23885] bridge0: port 21(veth43) entered blocking state [ 898.150483][T23885] bridge0: port 21(veth43) entered disabled state [ 898.240304][T23885] device veth43 entered promiscuous mode 01:03:54 executing program 1: 01:03:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd810200", 0x7) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:54 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r2, @ANYBLOB="000000000400"/28]) 01:03:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 898.805021][T23901] new mount options do not match the existing superblock, will be ignored 01:03:54 executing program 1: [ 899.105452][T23906] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 899.116259][T23906] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:03:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd810200", 0x7) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:55 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) [ 899.597666][T23906] bridge0: port 22(veth45) entered blocking state [ 899.608172][T23906] bridge0: port 22(veth45) entered disabled state [ 899.707353][T23906] device veth45 entered promiscuous mode 01:03:55 executing program 1: 01:03:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd810200", 0x7) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 900.376668][T23923] new mount options do not match the existing superblock, will be ignored 01:03:57 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:03:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 01:03:57 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:03:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:03:57 executing program 1: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 01:03:57 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x0) [ 901.933690][T23939] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 901.945095][T23939] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 902.483456][T23939] bridge0: port 23(veth47) entered blocking state [ 902.492884][T23939] bridge0: port 23(veth47) entered disabled state 01:03:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 902.597646][T23939] device veth47 entered promiscuous mode 01:03:58 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x0) 01:03:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 01:03:58 executing program 1: getpid() mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000f000000014001a80100002800c000180080013000000000008001b00000000005e54cdd3e1d6551f6b6fe93ac1bb3d8eda1d8d9ad47065c08c7ebac06ee3ca25248f7b29141f5314fbb321dc80692c0ec802ed6667bbed213123349a063aa65ab282c6e3a904020064079ffbf6a00ff0679d915cce173c5dce2328f7c2b8f2de93c29a09432c3f8ef294b9a39853afba279e628a52c2e9f84d897830ae37973be749b243df0aacff858b579db0e1e68eed3afe0924427fe692fe326840470bb46b292b64eca97a1b5c94ad8bf9113247aefa119bca79f2ccec2f5a"], 0x3c}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 903.149353][T23957] new mount options do not match the existing superblock, will be ignored [ 903.205963][T23955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 903.219417][T23955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:03:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 903.297541][T23955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 903.307933][T23955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 903.319143][T23955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.329808][T23955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:03:59 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) [ 903.962548][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 904.029540][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 904.037749][T23960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 904.367317][T23968] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 904.378724][T23968] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 904.956020][T23968] bridge0: port 24(veth49) entered blocking state [ 904.965755][T23968] bridge0: port 24(veth49) entered disabled state [ 905.067020][T23968] device veth49 entered promiscuous mode [ 905.577538][T23949] not chained 60000 origins [ 905.582089][T23949] CPU: 1 PID: 23949 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 905.590757][T23949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.600812][T23949] Call Trace: [ 905.604127][T23949] dump_stack+0x21c/0x280 [ 905.608471][T23949] kmsan_internal_chain_origin+0x6f/0x130 [ 905.614195][T23949] ? kmsan_set_origin_checked+0x95/0xf0 [ 905.619751][T23949] ? kmsan_get_metadata+0x116/0x180 [ 905.624957][T23949] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 905.630774][T23949] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 905.636998][T23949] ? l2tp_xmit_skb+0x1ad3/0x1c70 [ 905.641946][T23949] ? kmsan_get_metadata+0x116/0x180 [ 905.647155][T23949] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 905.652972][T23949] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 905.659039][T23949] ? kmsan_get_metadata+0x116/0x180 [ 905.664241][T23949] ? kmsan_set_origin_checked+0x95/0xf0 [ 905.669879][T23949] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 905.675955][T23949] ? _copy_from_user+0x221/0x330 [ 905.680898][T23949] ? kmsan_get_metadata+0x116/0x180 [ 905.686101][T23949] __msan_chain_origin+0x50/0x90 [ 905.691046][T23949] __get_compat_msghdr+0x6db/0x9d0 [ 905.696263][T23949] get_compat_msghdr+0x108/0x2b0 [ 905.701211][T23949] __sys_sendmmsg+0x768/0xfd0 [ 905.705926][T23949] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 905.711826][T23949] ? should_fail+0x72/0x9e0 [ 905.716330][T23949] ? __msan_poison_alloca+0xf0/0x120 [ 905.721628][T23949] ? kmsan_copy_to_user+0x81/0x90 [ 905.726657][T23949] ? _copy_to_user+0x203/0x2b0 [ 905.731434][T23949] ? put_old_timespec32+0x231/0x2d0 [ 905.736636][T23949] ? kmsan_get_metadata+0x116/0x180 [ 905.741841][T23949] ? kmsan_get_metadata+0x116/0x180 [ 905.747046][T23949] ? kmsan_get_metadata+0x116/0x180 [ 905.752252][T23949] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 905.757634][T23949] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 905.763189][T23949] __do_fast_syscall_32+0x2af/0x480 [ 905.768401][T23949] do_fast_syscall_32+0x6b/0xd0 [ 905.774743][T23949] do_SYSENTER_32+0x73/0x90 [ 905.779255][T23949] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 905.785583][T23949] RIP: 0023:0xf7fb9549 [ 905.789638][T23949] Code: Bad RIP value. [ 905.793701][T23949] RSP: 002b:00000000f55b30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 905.802117][T23949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 905.810174][T23949] RDX: 00000000c594bfb2 RSI: 0000000000000000 RDI: 0000000000000000 [ 905.818156][T23949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 905.826127][T23949] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 905.834097][T23949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 905.842074][T23949] Uninit was stored to memory at: [ 905.847106][T23949] kmsan_internal_chain_origin+0xad/0x130 [ 905.852831][T23949] __msan_chain_origin+0x50/0x90 [ 905.857775][T23949] __get_compat_msghdr+0x6db/0x9d0 [ 905.862886][T23949] get_compat_msghdr+0x108/0x2b0 [ 905.867827][T23949] __sys_sendmmsg+0x768/0xfd0 [ 905.872506][T23949] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 905.877880][T23949] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 905.883439][T23949] __do_fast_syscall_32+0x2af/0x480 [ 905.888657][T23949] do_fast_syscall_32+0x6b/0xd0 [ 905.893509][T23949] do_SYSENTER_32+0x73/0x90 [ 905.898145][T23949] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 905.904462][T23949] [ 905.906788][T23949] Uninit was stored to memory at: [ 905.911818][T23949] kmsan_internal_chain_origin+0xad/0x130 [ 905.917538][T23949] __msan_chain_origin+0x50/0x90 [ 905.922477][T23949] __get_compat_msghdr+0x6db/0x9d0 [ 905.927608][T23949] get_compat_msghdr+0x108/0x2b0 [ 905.932548][T23949] __sys_sendmmsg+0x768/0xfd0 [ 905.937226][T23949] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 905.942598][T23949] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 905.948151][T23949] __do_fast_syscall_32+0x2af/0x480 [ 905.953352][T23949] do_fast_syscall_32+0x6b/0xd0 [ 905.958211][T23949] do_SYSENTER_32+0x73/0x90 [ 905.962718][T23949] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 905.969044][T23949] [ 905.971365][T23949] Uninit was stored to memory at: [ 905.976401][T23949] kmsan_internal_chain_origin+0xad/0x130 [ 905.982123][T23949] __msan_chain_origin+0x50/0x90 [ 905.987065][T23949] __get_compat_msghdr+0x6db/0x9d0 [ 905.992181][T23949] get_compat_msghdr+0x108/0x2b0 [ 905.997123][T23949] __sys_sendmmsg+0x768/0xfd0 [ 906.002155][T23949] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 906.007538][T23949] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 906.013091][T23949] __do_fast_syscall_32+0x2af/0x480 [ 906.018293][T23949] do_fast_syscall_32+0x6b/0xd0 [ 906.023148][T23949] do_SYSENTER_32+0x73/0x90 [ 906.027658][T23949] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.033975][T23949] [ 906.036299][T23949] Uninit was stored to memory at: [ 906.041329][T23949] kmsan_internal_chain_origin+0xad/0x130 [ 906.047051][T23949] __msan_chain_origin+0x50/0x90 [ 906.051993][T23949] __get_compat_msghdr+0x6db/0x9d0 [ 906.057108][T23949] get_compat_msghdr+0x108/0x2b0 [ 906.062047][T23949] __sys_sendmmsg+0x768/0xfd0 [ 906.066728][T23949] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 906.072216][T23949] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 906.077764][T23949] __do_fast_syscall_32+0x2af/0x480 [ 906.082965][T23949] do_fast_syscall_32+0x6b/0xd0 [ 906.087817][T23949] do_SYSENTER_32+0x73/0x90 [ 906.092327][T23949] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.098641][T23949] [ 906.100969][T23949] Uninit was stored to memory at: [ 906.105999][T23949] kmsan_internal_chain_origin+0xad/0x130 [ 906.111720][T23949] __msan_chain_origin+0x50/0x90 [ 906.116663][T23949] __get_compat_msghdr+0x6db/0x9d0 [ 906.121775][T23949] get_compat_msghdr+0x108/0x2b0 [ 906.126718][T23949] __sys_sendmmsg+0x768/0xfd0 [ 906.131400][T23949] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 906.136777][T23949] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 906.142328][T23949] __do_fast_syscall_32+0x2af/0x480 [ 906.147532][T23949] do_fast_syscall_32+0x6b/0xd0 [ 906.152385][T23949] do_SYSENTER_32+0x73/0x90 [ 906.156898][T23949] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.163214][T23949] [ 906.165537][T23949] Uninit was stored to memory at: [ 906.170570][T23949] kmsan_internal_chain_origin+0xad/0x130 [ 906.176296][T23949] __msan_chain_origin+0x50/0x90 [ 906.181238][T23949] __get_compat_msghdr+0x6db/0x9d0 [ 906.186353][T23949] get_compat_msghdr+0x108/0x2b0 [ 906.191293][T23949] __sys_sendmmsg+0x768/0xfd0 [ 906.195974][T23949] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 906.201352][T23949] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 906.206907][T23949] __do_fast_syscall_32+0x2af/0x480 [ 906.212113][T23949] do_fast_syscall_32+0x6b/0xd0 [ 906.216965][T23949] do_SYSENTER_32+0x73/0x90 [ 906.221472][T23949] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.227787][T23949] [ 906.230118][T23949] Uninit was stored to memory at: [ 906.235147][T23949] kmsan_internal_chain_origin+0xad/0x130 [ 906.240889][T23949] __msan_chain_origin+0x50/0x90 [ 906.245838][T23949] __get_compat_msghdr+0x6db/0x9d0 [ 906.250950][T23949] get_compat_msghdr+0x108/0x2b0 [ 906.255891][T23949] __sys_sendmmsg+0x768/0xfd0 [ 906.260576][T23949] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 906.265951][T23949] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 906.271501][T23949] __do_fast_syscall_32+0x2af/0x480 [ 906.276704][T23949] do_fast_syscall_32+0x6b/0xd0 [ 906.281558][T23949] do_SYSENTER_32+0x73/0x90 [ 906.286067][T23949] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 906.292379][T23949] [ 906.294708][T23949] Local variable ----msg_sys@__sys_sendmmsg created at: [ 906.301748][T23949] __sys_sendmmsg+0xbb/0xfd0 [ 906.306339][T23949] __sys_sendmmsg+0xbb/0xfd0 01:04:02 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:02 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x0) 01:04:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x0, 0x0) 01:04:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) 01:04:02 executing program 1: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000f000000014001a80100002800c000180080013000000000008001b00000000005e54cdd3e1d6551f6b6fe93ac1bb3d8eda1d8d9ad47065c08c7ebac06ee3ca25248f7b29141f5314fbb321dc80692c0ec802ed6667bbed213123349a063aa65ab282c6e3a904020064079ffbf6a00ff0679d915cce173c"], 0x3c}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 01:04:02 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) [ 906.877789][T23993] new mount options do not match the existing superblock, will be ignored [ 906.912706][T23991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 906.972536][T23991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 906.982912][T23991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 907.313992][T23990] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 907.325030][T23990] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 907.544717][T23990] bridge0: port 25(veth51) entered blocking state [ 907.551453][T23990] bridge0: port 25(veth51) entered disabled state [ 907.561539][T23990] device veth51 entered promiscuous mode 01:04:03 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 907.661634][T23999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:04:03 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x3, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}}, 0x0) [ 907.714171][T23999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 907.724427][T23999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:04:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 908.278783][T24008] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 908.288769][T24008] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x0, 0x0) 01:04:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}, {&(0x7f0000000380)="059519b513e6c61226fcf3faf7e72eff35443b8c339508ad73492b819af03f485c384fc0d31516c1961070724b7695ff8e3ee251fab704920a49c4be94ac8fe8de5316bf502240d77082d58becf349b628663d9724b4bc9067068edb992f8f17234ded76b0ec399a9854848a6e6e4c", 0x6f}], 0x4}}], 0x1, 0x0) [ 909.047200][T24008] bridge0: port 26(veth53) entered blocking state [ 909.053930][T24008] bridge0: port 26(veth53) entered disabled state [ 909.064221][T24008] device veth53 entered promiscuous mode 01:04:05 executing program 1: 01:04:06 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x0, 0x0) 01:04:06 executing program 5: 01:04:06 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 01:04:06 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x0, 0x8100) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x30, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x1401, 0x0, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}}, 0x0) pidfd_open(0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) lstat(0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) [ 910.527033][T24035] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 910.537718][T24035] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:06 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x30, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x4004001) pidfd_open(0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) lstat(0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) [ 911.103149][T24035] bridge0: port 27(veth55) entered blocking state [ 911.112756][T24035] bridge0: port 27(veth55) entered disabled state [ 911.220870][T24035] device veth55 entered promiscuous mode 01:04:07 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:07 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) 01:04:07 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(0x0, 0x6, 0x8100) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x30, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x1401, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}}, 0x4004001) pidfd_open(0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) lstat(0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) 01:04:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x0, &(0x7f0000000040)) [ 911.808850][T24057] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 911.819286][T24057] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:07 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) [ 912.242255][T24057] bridge0: port 28(veth57) entered blocking state [ 912.250843][T24057] bridge0: port 28(veth57) entered disabled state [ 912.349498][T24057] device veth57 entered promiscuous mode 01:04:08 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0) close(r0) 01:04:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x0, &(0x7f0000000040)) 01:04:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400), 0x0, 0x0) 01:04:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:08 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:09 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:04:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x81785501, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) 01:04:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x0, &(0x7f0000000040)) 01:04:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400), 0x0, 0x0) [ 913.626895][T24082] ISOFS: Unable to identify CD-ROM format. 01:04:09 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) 01:04:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:09 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:04:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[0x0]) 01:04:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400), 0x0, 0x0) [ 914.700319][T24103] ISOFS: Unable to identify CD-ROM format. 01:04:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[0x0]) 01:04:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:04:11 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:04:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:11 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:04:11 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e, 0xc2, 0x0, 0x0, 0x8}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:04:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[0x0]) [ 916.176075][T24124] ISOFS: Unable to identify CD-ROM format. 01:04:12 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:12 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:04:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 01:04:12 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 917.587545][T24150] ISOFS: Unable to identify CD-ROM format. 01:04:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:13 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:13 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf251b000000070021006262"], 0x48}}, 0x0) 01:04:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 01:04:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}], 0x2}}], 0x1, 0x0) 01:04:14 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 918.693690][T24172] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 918.735318][T24165] ISOFS: Unable to identify CD-ROM format. 01:04:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}], 0x2}}], 0x1, 0x0) [ 918.826551][T24176] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 01:04:14 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:04:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf251b000000070021006262"], 0x48}}, 0x0) 01:04:14 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) [ 919.329112][T24185] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 919.338996][T24185] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 919.368871][T24185] bridge0: port 29(veth59) entered blocking state 01:04:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}], 0x2}}], 0x1, 0x0) 01:04:15 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 919.375804][T24185] bridge0: port 29(veth59) entered disabled state [ 919.385943][T24185] device veth59 entered promiscuous mode [ 919.442790][T24187] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 919.611820][T24195] ISOFS: Unable to identify CD-ROM format. 01:04:15 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:04:15 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:04:15 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) [ 919.995924][T24203] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 920.005705][T24203] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 920.036157][T24203] bridge0: port 30(veth61) entered blocking state [ 920.042948][T24203] bridge0: port 30(veth61) entered disabled state [ 920.053329][T24203] device veth61 entered promiscuous mode 01:04:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {0x0}], 0x3}}], 0x1, 0x0) 01:04:16 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 920.466715][T24213] ISOFS: Unable to identify CD-ROM format. 01:04:16 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:16 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:04:16 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {0x0}], 0x3}}], 0x1, 0x0) 01:04:17 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 921.360580][T24227] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 921.370259][T24227] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) [ 921.434568][T24227] bridge0: port 31(veth63) entered blocking state [ 921.441371][T24227] bridge0: port 31(veth63) entered disabled state [ 921.451678][T24227] device veth63 entered promiscuous mode 01:04:17 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 922.000922][T24240] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 922.468430][T24240] bridge0: port 32(veth65) entered blocking state [ 922.478493][T24240] bridge0: port 32(veth65) entered disabled state [ 922.589635][T24240] device veth65 entered promiscuous mode 01:04:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {0x0}], 0x3}}], 0x1, 0x0) 01:04:18 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:18 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:18 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 01:04:19 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:04:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)}], 0x3}}], 0x1, 0x0) 01:04:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 924.006617][T24265] bridge0: port 33(veth67) entered blocking state [ 924.016707][T24265] bridge0: port 33(veth67) entered disabled state [ 924.114809][T24265] device veth67 entered promiscuous mode 01:04:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x4, &(0x7f0000000500)=0x0) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 01:04:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:20 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)}], 0x3}}], 0x1, 0x0) 01:04:20 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) dup(r0) 01:04:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 925.023925][T24294] __nla_validate_parse: 3 callbacks suppressed [ 925.024004][T24294] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 925.041780][T24294] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)}], 0x3}}], 0x1, 0x0) [ 925.564335][T24294] bridge0: port 34(veth69) entered blocking state [ 925.573766][T24294] bridge0: port 34(veth69) entered disabled state 01:04:21 executing program 5: pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x800) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/153, 0x99}], 0x1) 01:04:21 executing program 2: [ 925.677027][T24294] device veth69 entered promiscuous mode 01:04:21 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:21 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:21 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:21 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000440)='/dev/snd/midiC#D#\x00', 0x12) syz_open_dev$sndmidi(0x0, 0x6, 0x8100) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x30, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x4004001) pidfd_open(0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) lstat(0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) 01:04:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92", 0x1}], 0x3}}], 0x1, 0x0) 01:04:22 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x3, 0x7e}}) [ 926.431992][T24322] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 926.442650][T24322] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:22 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 926.896964][T24322] bridge0: port 35(veth71) entered blocking state [ 926.907387][T24322] bridge0: port 35(veth71) entered disabled state [ 926.990402][T24322] device veth71 entered promiscuous mode 01:04:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92", 0x1}], 0x3}}], 0x1, 0x0) 01:04:23 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="675f07000005eb", 0x7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 01:04:23 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92", 0x1}], 0x3}}], 0x1, 0x0) 01:04:23 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:23 executing program 5: socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)}, 0x0) openat$full(0xffffff9c, 0x0, 0x402800, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 01:04:23 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:24 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r1, r0, 0x0) [ 928.427197][T24366] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 928.438061][T24366] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f00000002c0)="92ef", 0x2}], 0x2}}], 0x1, 0x0) [ 928.888234][T24366] bridge0: port 36(veth73) entered blocking state [ 928.899023][T24366] bridge0: port 36(veth73) entered disabled state [ 928.989267][T24366] device veth73 entered promiscuous mode 01:04:24 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x3, 0x7e}}) 01:04:25 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:25 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:25 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:25 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e, 0xc2, 0x0, 0xfc}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:04:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f00000002c0)="92ef", 0x2}], 0x2}}], 0x1, 0x0) [ 929.940540][T24393] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 929.951009][T24393] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:26 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) [ 930.438497][T24393] bridge0: port 37(veth75) entered blocking state [ 930.445217][T24393] bridge0: port 37(veth75) entered disabled state [ 930.455560][T24393] device veth75 entered promiscuous mode 01:04:26 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f00000002c0)="92ef", 0x2}], 0x2}}], 0x1, 0x0) 01:04:26 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:26 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}) 01:04:27 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="675f07000005eb30", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 01:04:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {0x0}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 931.766989][T24422] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 931.777622][T24422] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 931.909570][T24422] bridge0: port 38(veth77) entered blocking state [ 931.916255][T24422] bridge0: port 38(veth77) entered disabled state [ 931.926365][T24422] device veth77 entered promiscuous mode 01:04:27 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 01:04:28 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:28 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e, 0xc2, 0x0, 0xfc}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:04:28 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {0x0}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 932.528249][T24446] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 932.539276][T24446] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 933.033336][T24446] bridge0: port 39(veth79) entered blocking state [ 933.041293][T24446] bridge0: port 39(veth79) entered disabled state 01:04:29 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) [ 933.132144][T24446] device veth79 entered promiscuous mode 01:04:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {0x0}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:29 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x3}) 01:04:29 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 934.029379][T24480] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 934.039798][T24480] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 934.658753][T24480] bridge0: port 40(veth81) entered blocking state [ 934.668560][T24480] bridge0: port 40(veth81) entered disabled state [ 934.773194][T24480] device veth81 entered promiscuous mode 01:04:31 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$l2tp(0xffffffffffffffff, 0x0, 0x0) clone(0x2120100ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x2, 0x3, 0x330, 0x1c8, 0x0, 0x1c8, 0x1c8, 0x1c8, 0x298, 0x298, 0x298, 0x298, 0x298, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a8, 0x1c8, 0x0, {0x4a03}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x800000, 0x0, 0x21, 0x0, 'syz1\x00'}}, @common=@unspec=@connlimit={{0x40, 'connlimit\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 01:04:31 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 01:04:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:31 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:31 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x54, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) [ 935.508696][T24505] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 935.520356][T24505] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:31 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d40000001000390e8300000000dfff0000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000030000060003003f000000060011004e2c690005001600020000000500170000000000050008000000000008000600ac"], 0xd4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:04:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:31 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 936.079302][T24505] bridge0: port 41(veth83) entered blocking state [ 936.090415][T24505] bridge0: port 41(veth83) entered disabled state [ 936.136108][T24505] device veth83 entered promiscuous mode 01:04:32 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:04:32 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}, {@check_relaxed='check=relaxed'}]}) 01:04:32 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 936.520940][T24527] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.5'. 01:04:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:32 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:32 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e, 0xc2, 0x0, 0xfc}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 937.200565][T24540] ISOFS: Unable to identify CD-ROM format. 01:04:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3", 0x1d}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:33 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}]}) 01:04:33 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 937.753207][T24544] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 937.763841][T24544] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 937.971416][T24544] bridge0: port 42(veth85) entered blocking state [ 937.978092][T24544] bridge0: port 42(veth85) entered disabled state [ 937.988263][T24544] device veth85 entered promiscuous mode [ 938.297138][T24564] ISOFS: Unable to identify CD-ROM format. 01:04:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3", 0x1d}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:34 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e, 0xc2, 0x0, 0xfc}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:04:34 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}]}) 01:04:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)}, 0x0) openat$full(0xffffff9c, 0x0, 0x402800, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 01:04:34 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:34 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3", 0x1d}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 939.324079][T24580] ISOFS: Unable to identify CD-ROM format. [ 939.660122][T24584] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 939.670175][T24584] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 940.040871][T24584] bridge0: port 43(veth87) entered blocking state [ 940.047539][T24584] bridge0: port 43(veth87) entered disabled state [ 940.058275][T24584] device veth87 entered promiscuous mode 01:04:36 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:36 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@map_off='map=off'}]}) 01:04:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 01:04:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4", 0x2b}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:36 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wg1\x00', @remote}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'wg1\x00', @link_local={0x1, 0x7e, 0xc2, 0x0, 0xfc}}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:04:36 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, 0x0, 0x0) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:36 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002b00)=[{{0x0, 0x3, &(0x7f0000001540)=[{&(0x7f0000001180)='B', 0xfffffdef}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x1000000}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 941.317147][T24606] ISOFS: Unable to identify CD-ROM format. 01:04:37 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601bfc97004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20004d90"], 0x0) 01:04:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4", 0x2b}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 941.608643][T24621] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 941.619652][T24621] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:37 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000100)={[{@check_relaxed='check=relaxed'}]}) 01:04:37 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, 0x0, 0x0) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4", 0x2b}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x88, 0x24, 0xf0b, 0x1300, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) [ 942.557033][T24621] bridge0: port 44(veth89) entered blocking state [ 942.563804][T24621] bridge0: port 44(veth89) entered disabled state [ 942.574084][T24621] device veth89 entered promiscuous mode [ 942.618934][T24633] ISOFS: Unable to identify CD-ROM format. 01:04:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0", 0x32}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:38 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, 0x0, 0x0) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:39 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x88, 0x24, 0xf0b, 0x1300, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 01:04:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0", 0x32}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 943.682054][T24653] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 943.693036][T24653] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 944.321554][T24653] bridge0: port 45(veth91) entered blocking state [ 944.328907][T24653] bridge0: port 45(veth91) entered disabled state [ 944.435526][T24653] device veth91 entered promiscuous mode 01:04:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x6008, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 01:04:40 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}}, 0x0) 01:04:40 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:40 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0", 0x32}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:40 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) [ 944.996899][T24670] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 945.007708][T24670] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36b", 0x36}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:41 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 945.494059][T24670] bridge0: port 46(veth93) entered blocking state [ 945.502973][T24670] bridge0: port 46(veth93) entered disabled state [ 945.581461][T24670] device veth93 entered promiscuous mode [ 945.616952][T24673] batman_adv: Cannot find parent device [ 945.753436][T24675] bridge1: port 2(gretap1) entered blocking state [ 945.760317][T24675] bridge1: port 2(gretap1) entered disabled state [ 945.773125][T24675] device gretap1 entered promiscuous mode [ 945.779776][T24675] device macvlan1 entered promiscuous mode [ 945.851860][T24693] batman_adv: Cannot find parent device 01:04:41 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x6005, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0x1, [], 0x0, [0x10]}}}}]}, 0x88}}, 0x0) 01:04:42 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 01:04:42 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36b", 0x36}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 946.382154][T24706] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 946.392034][T24706] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:42 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}}, 0x0) [ 946.936059][T24706] bridge0: port 47(veth95) entered blocking state [ 946.945136][T24706] bridge0: port 47(veth95) entered disabled state [ 947.019220][T24706] device veth95 entered promiscuous mode [ 947.073050][T24712] batman_adv: Cannot find parent device [ 947.084555][T24712] batman_adv: batadv0: Adding interface: gretap1 [ 947.091232][T24712] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.116796][T24712] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active 01:04:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36b", 0x36}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:43 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:43 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 01:04:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYRES32], 0x92) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0xee01, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1000}) 01:04:43 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:43 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x24000, 0x0) [ 948.076564][T24735] batman_adv: Cannot find parent device 01:04:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc961", 0x38}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 948.270605][T24737] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 948.282897][T24737] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa947}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$setpipe(r0, 0x407, 0x20) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000d5010400000000ff0000deffde0068a94a86be908a0000000000000049599761137206c77938761ada56a89a234e8e13c7fe6d4387e27ce03ff34d1884a51986474ede7bad1e933dc235740172d10992060076e8e3d174e85fd1207f0700", @ANYRES16=r1, @ANYRES32], 0x92) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0xee01, 0x0, 0x60, 0xfffe}, 0x0, 0x0, 0x0, 0x5, 0x1, 0x800, 0x1000}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0xffffffffffffffff) [ 948.833813][T24737] bridge0: port 48(veth97) entered blocking state [ 948.843199][T24737] bridge0: port 48(veth97) entered disabled state 01:04:44 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 948.876330][T24737] device veth97 entered promiscuous mode 01:04:44 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000180)="cd0d0e7ec297a8bca61bb342c3a95b2f4906e3d0131bc86c059b76504e55d20b1399c483ebe0ac2c1b8441e9a8725f06f8ea6e271d7486e0634364c3ec3299a57d96b476", 0x44, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000d5010400000000ff0000deffde0068a94a86be908a0000000000000049599761137206c77938761ada56a89a234e8e13c7fe6d4387e27ce03ff34d1884a51986474ede7bad1e933dc235740172d10992060076e8", @ANYRES32], 0x92) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0xee01, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0x0, 0x5, 0x1, 0x800, 0x1000}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, 0xffffffffffffffff) [ 948.939521][T24752] batman_adv: Cannot find parent device [ 949.084523][T24759] sg_write: data in/out 262577/104 bytes for SCSI command 0x13-- guessing data in; [ 949.084523][T24759] program syz-executor.1 not setting count and/or reply_len properly 01:04:45 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc961", 0x38}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:45 executing program 2: 01:04:45 executing program 1: 01:04:45 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 949.591378][T24768] sg_write: data in/out 262577/104 bytes for SCSI command 0x13-- guessing data in; [ 949.591378][T24768] program syz-executor.5 not setting count and/or reply_len properly 01:04:45 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:45 executing program 5: [ 950.053780][T24777] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 950.065537][T24777] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:46 executing program 1: 01:04:46 executing program 2: 01:04:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d974", 0x7}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc961", 0x38}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 950.506296][T24777] bridge0: port 49(veth99) entered blocking state [ 950.515161][T24777] bridge0: port 49(veth99) entered disabled state [ 950.594896][T24777] device veth99 entered promiscuous mode 01:04:46 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000180)="cd0d0e7ec297a8bca61bb342c3a95b2f4906e3d0131bc86c059b76504e55d20b1399c483ebe0ac2c1b8441e9a8725f06f8ea6e271d7486e0634364c3ec3299a57d96b476211e60bd4028d3ce5c", 0x4d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000d5010400000000ff0000deffde0068a94a86be908a0000000000000049599761137206c77938761ada56a89a234e8e13c7fe6d4387e27ce03ff34d1884a51986474ede7bad1e933dc235740172d10992060076e8e3d174e8", @ANYRES32], 0x92) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0xee01, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0x0, 0x5, 0x1, 0x800, 0x1000}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0xffffffffffffffff) 01:04:46 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:46 executing program 1: 01:04:46 executing program 2: 01:04:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x2}}], 0x1, 0x0) [ 951.420176][T24795] sg_write: data in/out 262577/104 bytes for SCSI command 0x13-- guessing data in; [ 951.420176][T24795] program syz-executor.5 not setting count and/or reply_len properly 01:04:47 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:47 executing program 2: 01:04:47 executing program 1: 01:04:47 executing program 5: 01:04:47 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x2}}], 0x1, 0x0) 01:04:47 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 951.979870][T24805] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 951.990124][T24805] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:48 executing program 2: [ 952.548935][T24805] bridge0: port 50(veth101) entered blocking state [ 952.558291][T24805] bridge0: port 50(veth101) entered disabled state [ 952.656174][T24805] device veth101 entered promiscuous mode 01:04:48 executing program 1: 01:04:48 executing program 5: 01:04:48 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x2}}], 0x1, 0x0) 01:04:49 executing program 2: [ 953.368989][T24824] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 953.379514][T24824] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:49 executing program 5: 01:04:49 executing program 1: 01:04:49 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 953.861564][T24824] bridge0: port 51(veth103) entered blocking state [ 953.870515][T24824] bridge0: port 51(veth103) entered disabled state [ 953.963871][T24824] device veth103 entered promiscuous mode 01:04:50 executing program 5: 01:04:50 executing program 2: 01:04:50 executing program 1: 01:04:50 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:50 executing program 5: 01:04:50 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:50 executing program 2: 01:04:50 executing program 1: [ 955.480635][T24847] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 955.491642][T24847] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 956.006872][T24847] bridge0: port 52(veth105) entered blocking state [ 956.016962][T24847] bridge0: port 52(veth105) entered disabled state 01:04:51 executing program 2: [ 956.117292][T24847] device veth105 entered promiscuous mode 01:04:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:52 executing program 5: 01:04:52 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x0, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:52 executing program 1: 01:04:52 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 956.544615][T24868] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 956.555399][T24868] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:52 executing program 2: 01:04:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 956.989966][T24868] bridge0: port 53(veth107) entered blocking state [ 956.998962][T24868] bridge0: port 53(veth107) entered disabled state [ 957.085714][T24868] device veth107 entered promiscuous mode 01:04:53 executing program 5: 01:04:53 executing program 1: 01:04:53 executing program 2: 01:04:53 executing program 5: 01:04:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:54 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x0, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:54 executing program 1: 01:04:54 executing program 2: 01:04:54 executing program 5: [ 958.687689][T24894] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 958.698198][T24894] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 959.356290][T24894] bridge0: port 54(veth109) entered blocking state [ 959.365785][T24894] bridge0: port 54(veth109) entered disabled state [ 959.431498][T24894] device veth109 entered promiscuous mode 01:04:55 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:55 executing program 2: 01:04:55 executing program 1: 01:04:55 executing program 5: 01:04:55 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x0, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 960.301223][T24911] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 960.311458][T24911] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 960.784358][T24911] bridge0: port 55(veth111) entered blocking state [ 960.794092][T24911] bridge0: port 55(veth111) entered disabled state [ 960.888819][T24911] device veth111 entered promiscuous mode 01:04:56 executing program 5: 01:04:56 executing program 1: 01:04:56 executing program 2: 01:04:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc5", 0x4}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc5", 0x4}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:57 executing program 5: 01:04:58 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:04:58 executing program 2: 01:04:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r1, 0x29, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 01:04:58 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x0, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:04:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc5", 0x4}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:58 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='h'], 0x58}}, 0x0) [ 963.306230][T24945] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 963.315964][T24945] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:04:59 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/mdstat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) 01:04:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d9", 0x6}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:04:59 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 01:04:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 'syz0\x00'}) [ 963.856471][T24945] bridge0: port 56(veth113) entered blocking state [ 963.865776][T24945] bridge0: port 56(veth113) entered disabled state [ 963.967515][T24945] device veth113 entered promiscuous mode 01:05:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r2, @ANYBLOB="0000c985fc3d0000280012800c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0b00000000000000280012800c0001006d6163766c616e0018000280080001000800000004000580260002000100000008000500", @ANYRES32=r5], 0x50}}, 0x0) 01:05:00 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x0, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:00 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:05:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0xffffffffffffff54) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 01:05:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d9", 0x6}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) 01:05:00 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffffffff0000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@fat=@fmask={'fmask'}}]}) [ 965.075719][T24965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 965.127688][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 965.148090][T24974] device veth5 entered promiscuous mode [ 965.239671][T24979] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 965.249828][T24979] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="000000fd81020000", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="58f89fc502d9", 0x6}, {&(0x7f0000000040)="def8f2a99a513803cc68535a67ab1a0e4b54b136278c91a077774571f3e1616ef509c712a815b4e0efe6b4e663b51d90e7d0c9f8d36bc96187", 0x39}, {&(0x7f00000002c0)="92ef", 0x2}], 0x3}}], 0x1, 0x0) [ 965.544599][T24983] FAT-fs (loop5): bogus number of reserved sectors [ 965.551830][T24983] FAT-fs (loop5): Can't find a valid FAT filesystem [ 965.851307][T24979] bridge0: port 57(veth115) entered blocking state [ 965.862238][T24979] bridge0: port 57(veth115) entered disabled state 01:05:01 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x0, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 965.963147][T24979] device veth115 entered promiscuous mode [ 965.972241][T24974] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 965.982924][T24981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:05:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 01:05:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000000)="01bf13cb5c"}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xd) [ 966.531334][T24999] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 966.541790][T24999] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:02 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001fb2b9409ac00ac9a37b80", 0x11, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 01:05:02 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 967.256252][T24999] bridge0: port 58(veth117) entered blocking state [ 967.266514][T24999] bridge0: port 58(veth117) entered disabled state 01:05:03 executing program 4: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40044) ioprio_set$uid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) [ 967.312759][T24999] device veth117 entered promiscuous mode 01:05:03 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x144}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8}) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) 01:05:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) 01:05:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000000)="01bf13cb5c"}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xd) 01:05:03 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) 01:05:03 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp\x00') statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) 01:05:04 executing program 5: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000580)='\x00') 01:05:04 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000064, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x687e93c594bfb2, 0x0) [ 968.726005][T25033] __nla_validate_parse: 1 callbacks suppressed [ 968.726069][T25033] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 968.743672][T25033] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 969.323147][T25033] bridge0: port 59(veth119) entered blocking state [ 969.332479][T25033] bridge0: port 59(veth119) entered disabled state [ 969.433378][T25033] device veth119 entered promiscuous mode 01:05:05 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:05 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(r0, 0x0, 0x0, 0x0) [ 969.629900][T25046] (syz-executor.5,25046,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 969.640162][T25046] (syz-executor.5,25046,1):ocfs2_fill_super:1190 ERROR: status = -22 01:05:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff0f00600d698cb89e14f088a8", 0x0, 0x119, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 969.762847][T25046] (syz-executor.5,25046,1):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 969.773061][T25046] (syz-executor.5,25046,1):ocfs2_fill_super:1190 ERROR: status = -22 [ 969.946242][T25059] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 969.956628][T25059] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:05 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x3309) 01:05:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) shutdown(r2, 0x2) 01:05:06 executing program 5: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@ikeep='ikeep', 0x3d}]}) [ 970.403179][T25059] bridge0: port 60(veth121) entered blocking state [ 970.412354][T25059] bridge0: port 60(veth121) entered disabled state [ 970.494871][T25059] device veth121 entered promiscuous mode 01:05:06 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x400c330d) [ 970.822200][T25073] xfs: Unexpected value for 'ikeep' 01:05:06 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(r0, 0x0, 0x0, 0x0) 01:05:06 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 970.912656][T25073] xfs: Unexpected value for 'ikeep' 01:05:06 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000000)="01bf13cb5c83"}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xd) 01:05:07 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000c985fc3d0000280012800c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0b00000000000000280012800c0001006d6163766c616e0018000280080001000800000004000580260002000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x4000, r4}}, 0x24}}, 0x0) [ 971.359018][T25087] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 971.368647][T25087] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 971.400749][T25087] bridge0: port 61(veth123) entered blocking state [ 971.407603][T25087] bridge0: port 61(veth123) entered disabled state [ 971.417866][T25087] device veth123 entered promiscuous mode 01:05:07 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(r0, 0x0, 0x0, 0x0) 01:05:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x4, 0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 971.915917][T25099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 971.971319][T25105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 971.992422][T25105] device veth5 entered promiscuous mode [ 972.187990][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 972.224233][T25108] device veth5 left promiscuous mode 01:05:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) shutdown(r2, 0x2) 01:05:08 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:08 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000280), 0x0, 0x0) 01:05:08 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000000)="01bf13cb5c83"}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xd) [ 972.634650][T25114] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 972.655144][T25099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 972.747780][T25108] device veth5 entered promiscuous mode [ 973.254165][T25129] bridge0: port 62(veth125) entered blocking state [ 973.263092][T25129] bridge0: port 62(veth125) entered disabled state [ 973.360276][T25129] device veth125 entered promiscuous mode 01:05:09 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000180), 0x4) 01:05:09 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330d) 01:05:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000280), 0x0, 0x0) 01:05:09 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000000)="01bf13cb5c83"}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xd) 01:05:09 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffffffff0000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000280)) 01:05:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f9becdb4cb92e0a48b1371400000068bd6efb2503eaff0d000100020200ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000001000810804119becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000011000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) 01:05:10 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) read(r0, &(0x7f00000000c0)=""/200, 0xc8) 01:05:10 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:10 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) connect(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', 0x0}) sendmmsg(r0, &(0x7f0000000280), 0x0, 0x0) 01:05:10 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000000)="01bf13cb5c83"}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xd) [ 974.788568][T25160] device batadv0 entered promiscuous mode 01:05:11 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) mlock2(&(0x7f0000001000/0x400000)=nil, 0x400008, 0x0) 01:05:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000900)={{0x2, 0x0, 0x80}, "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", "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"}) 01:05:11 executing program 3: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) [ 975.567791][T25161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.576141][T25165] __nla_validate_parse: 3 callbacks suppressed [ 975.576256][T25165] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 975.593697][T25165] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 975.759352][T25165] bridge0: port 63(veth127) entered blocking state [ 975.766098][T25165] bridge0: port 63(veth127) entered disabled state [ 975.776493][T25165] device veth127 entered promiscuous mode 01:05:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400}, 0x40) socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x94, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 976.085790][T25171] 8021q: adding VLAN 0 to HW filter on device batadv0 01:05:12 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x2}}) 01:05:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 01:05:12 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:12 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 01:05:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 976.867296][T25201] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 976.930260][T25202] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 976.940761][T25202] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 977.403921][T25202] bridge0: port 64(veth129) entered blocking state [ 977.412708][T25202] bridge0: port 64(veth129) entered disabled state 01:05:13 executing program 4: r0 = syz_io_uring_setup(0x8b, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 977.496248][T25202] device veth129 entered promiscuous mode 01:05:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 01:05:13 executing program 1: creat(&(0x7f0000000000)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) 01:05:13 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) 01:05:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e000100776972656775617264"], 0x40}}, 0x0) 01:05:13 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020e0000100000000003feffffff10000800120000000100000000000000400000001ea0abff7f00000008000000d41f9ab9000100700000eb0000a0db1e0007000098000000f740008000000000004f030006000020080002000080f5008e24ce6e4ae000a50000030025"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 01:05:14 executing program 5: execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=[0xffffffffffffffff], 0x0) 01:05:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 01:05:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) write$char_usb(r0, 0x0, 0x0) [ 978.406423][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 978.416532][T25238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 01:05:14 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 978.631750][T25247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 978.641379][T25247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 01:05:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) 01:05:14 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000003c0)={[], [{@smackfsdef={'smackfsdef', 0x25}, 0x8}]}) 01:05:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x12a, &(0x7f0000000240)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 01:05:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8912, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) [ 979.042286][T25258] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 979.054739][T25258] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0x5, 0x22}) [ 979.086960][T25258] bridge0: port 65(veth131) entered blocking state [ 979.093712][T25258] bridge0: port 65(veth131) entered disabled state [ 979.103918][T25258] device veth131 entered promiscuous mode 01:05:15 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 979.386235][T25277] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "smackfsdef%" [ 979.536243][T25277] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "smackfsdef%" 01:05:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) 01:05:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x108, &(0x7f0000000240)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 01:05:15 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000019440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x122, &(0x7f0000000240)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 980.026230][T25299] bridge0: port 66(veth133) entered blocking state [ 980.033163][T25299] bridge0: port 66(veth133) entered disabled state [ 980.043617][T25299] device veth133 entered promiscuous mode 01:05:16 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$kcm(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830af0671cca31eff4", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 01:05:16 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0xef]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 980.725514][T25321] __nla_validate_parse: 2 callbacks suppressed [ 980.725553][T25321] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 980.742419][T25321] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 980.775361][T25321] bridge0: port 67(veth135) entered blocking state [ 980.782165][T25321] bridge0: port 67(veth135) entered disabled state [ 980.792780][T25321] device veth135 entered promiscuous mode [ 980.806645][ T29] audit: type=1804 audit(1599959116.618:15): pid=25320 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir823610840/syzkaller.zfEwjr/457/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 980.868501][ T29] audit: type=1804 audit(1599959116.678:16): pid=25329 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir823610840/syzkaller.zfEwjr/457/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 980.895170][ T29] audit: type=1804 audit(1599959116.678:17): pid=25320 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir823610840/syzkaller.zfEwjr/457/cgroup.controllers" dev="sda1" ino=16372 res=1 01:05:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x2]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 01:05:17 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 981.460375][T25339] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 981.470000][T25339] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 981.500484][T25339] bridge0: port 68(veth137) entered blocking state [ 981.507340][T25339] bridge0: port 68(veth137) entered disabled state [ 981.517308][T25339] device veth137 entered promiscuous mode 01:05:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x60}}}, 0xb8}}, 0x0) 01:05:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:05:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 01:05:18 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 982.720584][T25353] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 982.730355][T25353] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 982.762696][T25353] bridge0: port 69(veth139) entered blocking state [ 982.769513][T25353] bridge0: port 69(veth139) entered disabled state [ 982.779733][T25353] device veth139 entered promiscuous mode [ 982.788073][T25354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 983.032901][T25367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:05:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000e0000001000000f6ffffff0000000000000000000000000002"], 0xb8}}, 0x0) 01:05:19 executing program 5: r0 = syz_io_uring_setup(0x8b, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r0], 0x2) 01:05:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x15, 0xff01, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1}}}, 0xb8}}, 0x0) 01:05:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:05:19 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 01:05:19 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 984.213767][T25377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 01:05:20 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(r1) socket$kcm(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830af0671cca31eff4", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 01:05:20 executing program 1: r0 = syz_io_uring_setup(0x8b, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_setup(0x7e0f, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f00006d7000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 01:05:20 executing program 5: r0 = syz_io_uring_setup(0x8b, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r0], 0x2) 01:05:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000100)={{0x0, 0x0, 0x6, 0x0, 0x93}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe15, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xf1b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x47, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x100, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x45986951, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0xffff, 0x3, 0x0, 0x0, 0xb005, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0xffffaca3, 0x0, 0x80, 0x0, 0x0, 0x8, 0x4, 0x0, 0x400, 0x8553, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6d6, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95c, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xffff5fed, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x12e2f5ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1d0e96ab, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x81, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1f, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3790, 0x0, 0x8502, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3f, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x927, 0x9, 0x5cc, 0xd6, 0x0, 0x0, 0x0, 0xbd54, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0xffffffe1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff25b6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x20, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x5adbad7d, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x80000001, 0x0, 0x0, 0x8, 0x1d, 0x0, 0xee87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8f, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x7, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x4, 0x0, 0x48, 0x5, 0x0, 0x0, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x8020001, 0x0, 0xc027, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xe4426600, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0xbd1, 0xa1, 0x0, 0x0, 0x0, 0xffff, 0x9, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x88, 0x0, 0xfffffffa, 0xd286, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff9, 0x9, 0x0, 0x0, 0x1f, 0x0, 0x6206, 0x0, 0x0, 0x9, 0x0, 0x1ff, 0x5, 0xc19f5fd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x7, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x4c, 0x0, 0x4, 0x0, 0xe197, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x671cb551, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe1d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xdb, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0xda9, 0x10001, 0x0, 0x0, 0x0, 0x7ff, 0x7, 0x0, 0x5, 0x0, 0x3, 0x3, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x5, 0x1000, 0x6, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x6, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x5, 0x0, 0xffffff60, 0x81, 0x0, 0x0, 0x0, 0x0, 0x58]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 984.541901][T25392] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x0, 0x5, 0x22}) [ 984.668632][T25392] bridge0: port 70(veth141) entered blocking state [ 984.675373][T25392] bridge0: port 70(veth141) entered disabled state [ 984.685964][T25392] device veth141 entered promiscuous mode [ 984.814266][ T29] audit: type=1804 audit(1599959120.628:18): pid=25402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir823610840/syzkaller.zfEwjr/461/cgroup.controllers" dev="sda1" ino=16372 res=1 [ 985.114723][ T29] audit: type=1804 audit(1599959120.748:19): pid=25407 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir823610840/syzkaller.zfEwjr/461/cgroup.controllers" dev="sda1" ino=16372 res=1 01:05:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000010001307f3ffffff00000000fe8000000000000000000000000000bb0000004400000000000000000000b0000000f40000050000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x13c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) 01:05:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, 0x0, 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="02847f8a1b90c9206d01b2c39a167896d199bfefe73b994cd527ab45b500e9b90200004cd21fbf5de15c4d000000000000e2009069bfdc7f13f842231b0250799e7538ea4fe2f0500186084d55f187375d6c1ecefc34430d24967c191361e4b958a5ce9f4cac764ae19e20ac456145c69c77869851e6e9b62d5113e3849221ee58860b49a791f1088a4a6325ab1a092683b3c97ddf0abbec6990b2"], 0x38}}, 0x0) 01:05:21 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000000)="01bf13cb5c"}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="02847f8a1b90c9206d01b2c39a167896d199bfefe73b994cd527ab45b500e9b90200004cd21fbf5de15c4d000000000000e2009069bfdc7f13f842231b0250799e7538ea4fe2f0500186084d55f187375d6c1ecefc34430d24967c191361e4b958a5ce9f4cac764ae19e20ac456145c69c77869851e6e9b62d5113e3849221ee58860b49a791f1088a4a6325ab1a092683b3c97ddf0abbec6990b2"], 0x38}}, 0x0) 01:05:21 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0x5, 0x22}) [ 985.729828][T25427] __nla_validate_parse: 1 callbacks suppressed [ 985.729866][T25427] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 985.746433][T25427] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 985.768985][T25427] bridge0: port 71(veth143) entered blocking state [ 985.769145][T25427] bridge0: port 71(veth143) entered disabled state [ 985.772670][T25427] device veth143 entered promiscuous mode 01:05:22 executing program 1: r0 = syz_io_uring_setup(0x8b, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, r0], 0x2) 01:05:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, 0x0, 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="02847f8a1b90c9206d01b2c39a167896d199bfefe73b994cd527ab45b500e9b90200004cd21fbf5de15c4d000000000000e2009069bfdc7f13f842231b0250799e7538ea4fe2f0500186084d55f187375d6c1ecefc34430d24967c191361e4b958a5ce9f4cac764ae19e20ac456145c69c77869851e6e9b62d5113e3849221ee58860b49a791f1088a4a6325ab1a092683b3c97ddf0abbec6990b2"], 0x38}}, 0x0) 01:05:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000100)={{}, 0x0, [0x0, 0x5, 0x401, 0x0, 0x4, 0x7d9, 0x0, 0x0, 0xda5, 0x0, 0x0, 0x2, 0x2, 0x0, 0xfe15, 0x7, 0x3, 0x1ff, 0xe1, 0x3, 0x0, 0x8, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3ff, 0x0, 0x3, 0x0, 0xdb2, 0x0, 0x1000, 0x0, 0x7, 0x2, 0x0, 0x3f, 0x1f, 0x40, 0x40, 0x7fff, 0x0, 0x0, 0xb06, 0x9, 0x9, 0x0, 0x0, 0x400, 0x0, 0x2c4, 0x0, 0x7, 0x1, 0x4, 0x0, 0x40, 0x0, 0x5, 0x0, 0x1, 0x1, 0x4b2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xf1b3, 0xc0000, 0x20, 0x0, 0x4, 0x4, 0x929, 0x8, 0x7, 0x0, 0x0, 0x7, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xff, 0x0, 0x1a4, 0x0, 0x6, 0x0, 0x2, 0xffff, 0x7f, 0x166d, 0x6, 0x0, 0x4, 0x1, 0x84, 0x0, 0x0, 0x400, 0x100, 0x1, 0xc2, 0x1, 0x0, 0x6, 0xdd, 0x0, 0x4, 0x100, 0x0, 0x10000, 0x1ff, 0x7f, 0x0, 0x1, 0xfffffff8, 0x401, 0x2, 0x1, 0xeddd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x2, 0x2, 0x8, 0x7, 0x1, 0x0, 0x10001, 0xbf9e, 0x4, 0x0, 0x9, 0x1, 0x101, 0x81, 0x0, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x8001, 0x0, 0x8001, 0x0, 0x0, 0x8, 0x9, 0x0, 0x4, 0xfffff28c, 0x0, 0x4, 0x101, 0x3f, 0x0, 0x0, 0x0, 0x7fff, 0x6, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x8, 0xad8e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xec, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x52f2f755, 0x0, 0x0, 0x0, 0x0, 0x8553, 0x80000000, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6d6, 0x0, 0x0, 0xff, 0x0, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x80000001, 0xb53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfff, 0xf3c, 0x0, 0xfff, 0x0, 0x0, 0xffff11de, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12e2f5ef, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x6e4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x401, 0xffff, 0x0, 0x0, 0x0, 0x25cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x2, 0x0, 0xfffffffa, 0xc2, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa44e, 0x9, 0x1ff, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28a25a46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x5cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5b5, 0x0, 0x7, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xfffffff7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1f, 0x1000, 0x80000001, 0x0, 0x0, 0x8, 0x0, 0x0, 0xee87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x401, 0xffff7fff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x101, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4ffa, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x7, 0x960, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5b39, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8001, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd286, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xf0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3d5, 0x40, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xff, 0x1, 0xff, 0x8, 0x7, 0x4, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xff9, 0x0, 0x1, 0x20, 0x1f, 0x0, 0x6206, 0x10001, 0x0, 0x9, 0x7, 0x0, 0x5, 0xc19f5fd, 0x9, 0x0, 0x0, 0x0, 0x0, 0xab89, 0x4, 0x0, 0x9, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x6, 0x0, 0x1, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xe197, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x671cb551, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffb, 0x96e0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x83, 0x0, 0x7ff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9, 0xae888de5, 0x7ff, 0x0, 0x20, 0x6, 0x2, 0xa0, 0x8, 0x1c08, 0x4000, 0x2a5, 0x8, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x4, 0x1, 0x3, 0x8001, 0x5, 0x0, 0xffffff60, 0x81, 0x100, 0x0, 0x0, 0x0, 0x58, 0x10000, 0x4, 0x0, 0x8, 0x54, 0x5]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 01:05:22 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x8}}, 0xb8}}, 0x0) 01:05:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000000)="01bf13cb5c"}, 0x1c) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) [ 987.203698][T25458] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 987.213923][T25458] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x35000) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12e2f5ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, 0xffff25b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe197, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x671cb551, 0x3, 0x1d7e, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10001, 0x9ff, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x58]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 987.421861][T25458] bridge0: port 72(veth145) entered blocking state [ 987.429159][T25458] bridge0: port 72(veth145) entered disabled state [ 987.439731][T25458] device veth145 entered promiscuous mode 01:05:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x20000000, 0x0, 0x0, 0xfa04, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="02847f8a1b90c9206d01b2c39a167896d199bfefe73b994cd527ab45b500e9b90200004cd21fbf5de15c4d000000000000e2009069bfdc7f13f842231b0250799e7538ea4fe2f0500186084d55f187375d6c1ecefc34430d24967c191361e4b958a5ce9f4cac764ae19e20ac456145c69c77869851e6e9b62d5113e3849221ee58860b49a791f1088a4a6325ab1a092683b3c97ddf0abbec6990b2"], 0x38}}, 0x0) 01:05:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) syz_genetlink_get_family_id$l2tp(0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) socket(0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x110) 01:05:23 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x48]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 988.587943][T25485] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 988.597781][T25485] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x8300, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000200), 0x0) [ 988.630956][T25485] bridge0: port 73(veth147) entered blocking state [ 988.637871][T25485] bridge0: port 73(veth147) entered disabled state [ 988.918534][T25485] device veth147 entered promiscuous mode 01:05:24 executing program 4: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x0, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x0, 0x34325842}}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x8300, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000440)=""/190, &(0x7f0000000080)=0xbe) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000200), 0x0) 01:05:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x0, @output={0x1000, 0x0, {0x8000}, 0x5, 0x1000}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x0, 0x34325842}}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 01:05:24 executing program 5: openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 01:05:25 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 989.586054][T25502] vivid-000: ================= START STATUS ================= [ 989.593940][T25502] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 989.600975][T25502] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 989.608135][T25502] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 989.615544][T25502] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 989.623222][T25502] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 989.629530][T25502] v4l2-ctrls: vivid-000: Show Border: false [ 989.635871][T25502] v4l2-ctrls: vivid-000: Show Square: false [ 989.641942][T25502] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 989.649923][T25502] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 989.657412][T25502] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 989.664739][T25502] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 989.672275][T25502] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 989.679515][T25502] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 989.686805][T25502] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 989.693964][T25502] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 989.701035][T25502] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 989.708242][T25502] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 989.714185][T25502] v4l2-ctrls: vivid-000: Transfer Function: Default [ 989.721423][T25502] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 989.728238][T25502] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 989.734987][T25502] v4l2-ctrls: vivid-000: Quantization: Default [ 989.742091][T25502] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 989.749949][T25502] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 989.756980][T25502] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 989.766358][T25502] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 989.773530][T25502] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 989.782170][T25502] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 989.788911][T25502] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 989.797008][T25502] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 989.804677][T25502] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 989.811751][T25502] tpg source WxH: 320x180 (Y'CbCr) [ 989.817193][T25502] tpg field: 1 [ 989.820760][T25502] tpg crop: 320x180@0x0 [ 989.825070][T25502] tpg compose: 320x180@0x0 [ 989.829754][T25502] tpg colorspace: 8 01:05:25 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)=@in6={0x2, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="82c2178d", 0xfc9e}], 0x1}, 0x0) [ 989.833725][T25502] tpg transfer function: 0/0 [ 989.838636][T25502] tpg Y'CbCr encoding: 0/0 [ 989.843338][T25502] tpg quantization: 0/0 [ 989.847778][T25502] tpg RGB range: 0/2 [ 989.851823][T25502] vivid-000: ================== END STATUS ================== [ 989.860498][T25503] vivid-000: ================= START STATUS ================= [ 989.869198][T25503] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 989.876182][T25503] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 989.883203][T25503] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 989.890864][T25503] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 989.898126][T25503] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 989.904305][T25503] v4l2-ctrls: vivid-000: Show Border: false [ 989.910586][T25503] v4l2-ctrls: vivid-000: Show Square: false [ 989.916929][T25503] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 989.924557][T25503] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false 01:05:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x8300, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000200), 0x0) [ 989.931977][T25503] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 989.939262][T25503] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 989.946514][T25503] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 989.953313][T25503] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 989.960535][T25503] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 989.967962][T25503] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 989.974822][T25503] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 989.982062][T25503] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 989.987969][T25503] v4l2-ctrls: vivid-000: Transfer Function: Default [ 989.994990][T25503] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 990.001777][T25503] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 990.008432][T25503] v4l2-ctrls: vivid-000: Quantization: Default [ 990.015028][T25503] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 990.022386][T25503] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 990.029384][T25503] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 990.038474][T25503] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 990.045694][T25503] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 990.054512][T25503] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 990.061250][T25503] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 990.068759][T25503] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 990.076413][T25503] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 990.083067][T25503] tpg source WxH: 320x180 (Y'CbCr) [ 990.088405][T25503] tpg field: 1 [ 990.091989][T25503] tpg crop: 320x180@0x0 [ 990.096478][T25503] tpg compose: 320x180@0x0 [ 990.101139][T25503] tpg colorspace: 8 [ 990.105139][T25503] tpg transfer function: 0/0 [ 990.109902][T25503] tpg Y'CbCr encoding: 0/0 [ 990.114457][T25503] tpg quantization: 0/0 [ 990.118908][T25503] tpg RGB range: 0/2 [ 990.119057][T25508] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 990.122919][T25503] vivid-000: ================== END STATUS ================== [ 990.132546][T25508] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 990.141931][T25504] vivid-000: ================= START STATUS ================= [ 990.158777][T25504] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 990.165850][T25504] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 990.173049][T25504] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 990.180551][T25504] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 990.187678][T25504] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 990.193702][T25504] v4l2-ctrls: vivid-000: Show Border: false [ 990.199844][T25504] v4l2-ctrls: vivid-000: Show Square: false [ 990.205919][T25504] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 990.213361][T25504] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 990.220902][T25504] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 990.228186][T25504] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 990.235402][T25504] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 990.242206][T25504] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 990.249478][T25504] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 990.256831][T25504] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 990.263647][T25504] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 990.270836][T25504] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 990.276742][T25504] v4l2-ctrls: vivid-000: Transfer Function: Default [ 990.283489][T25504] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 990.290285][T25504] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 990.296873][T25504] v4l2-ctrls: vivid-000: Quantization: Default [ 990.303165][T25504] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 990.310419][T25504] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 990.317485][T25504] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 990.326637][T25504] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 990.334063][T25504] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 990.342830][T25504] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 990.349431][T25504] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 990.357073][T25504] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 990.364693][T25504] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 990.371498][T25504] tpg source WxH: 320x180 (Y'CbCr) [ 990.376870][T25504] tpg field: 1 [ 990.380430][T25504] tpg crop: 320x180@0x0 [ 990.384842][T25504] tpg compose: 320x180@0x0 [ 990.389495][T25504] tpg colorspace: 8 [ 990.393437][T25504] tpg transfer function: 0/0 [ 990.398252][T25504] tpg Y'CbCr encoding: 0/0 [ 990.402826][T25504] tpg quantization: 0/0 [ 990.407235][T25504] tpg RGB range: 0/2 [ 990.411248][T25504] vivid-000: ================== END STATUS ================== [ 990.510814][T25505] vivid-000: ================= START STATUS ================= [ 990.519163][T25505] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 990.526351][T25505] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 990.533620][T25505] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 990.541411][T25505] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 990.548741][T25505] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 990.554827][T25505] v4l2-ctrls: vivid-000: Show Border: false [ 990.561218][T25505] v4l2-ctrls: vivid-000: Show Square: false [ 990.567850][T25505] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 990.575409][T25505] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 990.583000][T25505] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 990.590474][T25505] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 990.597729][T25505] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 990.604305][T25505] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 990.611538][T25505] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 990.614245][T25508] bridge0: port 74(veth149) entered blocking state [ 990.618657][T25505] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 990.627262][T25508] bridge0: port 74(veth149) entered disabled state [ 990.632231][T25505] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 990.645671][T25505] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 990.652435][T25505] v4l2-ctrls: vivid-000: Transfer Function: Default [ 990.659325][T25505] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 990.666146][T25505] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 990.672766][T25505] v4l2-ctrls: vivid-000: Quantization: Default [ 990.679432][T25505] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 990.686856][T25505] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 990.693757][T25505] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 990.702884][T25505] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 990.710134][T25505] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 990.718986][T25505] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 990.725577][T25505] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 990.728048][T25508] device veth149 entered promiscuous mode [ 990.733155][T25505] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 990.746735][T25505] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 990.753378][T25505] tpg source WxH: 320x180 (Y'CbCr) [ 990.758669][T25505] tpg field: 1 [ 990.762165][T25505] tpg crop: 320x180@0x0 [ 990.766636][T25505] tpg compose: 320x180@0x0 [ 990.771268][T25505] tpg colorspace: 8 [ 990.775286][T25505] tpg transfer function: 0/0 [ 990.780277][T25505] tpg Y'CbCr encoding: 0/0 [ 990.784853][T25505] tpg quantization: 0/0 [ 990.789311][T25505] tpg RGB range: 0/2 [ 990.793536][T25505] vivid-000: ================== END STATUS ================== 01:05:27 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x8300, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000200), 0x0) 01:05:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d61637365630000040002800a"], 0x40}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) [ 991.581546][T25527] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 991.592177][T25527] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 991.851233][T25527] bridge0: port 75(veth151) entered blocking state [ 991.859189][T25527] bridge0: port 75(veth151) entered disabled state 01:05:27 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)=@in6={0x2, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="82c2178d", 0xfc9e}], 0x1}, 0x0) [ 991.907442][T25527] device veth151 entered promiscuous mode 01:05:27 executing program 5: openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 01:05:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x0, @output={0x1000, 0x0, {0x8000}, 0x5, 0x1000}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x0, 0x34325842}}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) [ 992.629084][T25543] vivid-000: ================= START STATUS ================= [ 992.637349][T25543] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 992.644160][T25543] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 992.651679][T25543] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 992.659186][T25543] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 992.666554][T25543] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 992.672652][T25543] v4l2-ctrls: vivid-000: Show Border: false [ 992.678750][T25543] v4l2-ctrls: vivid-000: Show Square: false [ 992.684802][T25543] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 992.692598][T25543] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 992.700110][T25543] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 992.707452][T25543] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 992.714722][T25543] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 992.721914][T25543] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 992.729190][T25543] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 992.736380][T25543] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 992.743372][T25543] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 992.750776][T25543] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 992.756984][T25543] v4l2-ctrls: vivid-000: Transfer Function: Default [ 992.763819][T25543] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 992.770541][T25543] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 992.777169][T25543] v4l2-ctrls: vivid-000: Quantization: Default [ 992.783490][T25543] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 992.790872][T25543] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 992.797734][T25543] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 992.806948][T25543] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 992.814224][T25543] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 992.822916][T25543] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 992.829375][T25543] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 992.837059][T25543] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 992.844749][T25543] v4l2-ctrls: vivid-000: Power Present: 0x00000001 [ 992.851788][T25543] tpg source WxH: 320x180 (Y'CbCr) [ 992.857165][T25543] tpg field: 1 [ 992.860682][T25543] tpg crop: 320x180@0x0 [ 992.865121][T25543] tpg compose: 320x180@0x0 [ 992.869884][T25543] tpg colorspace: 8 [ 992.873951][T25543] tpg transfer function: 0/0 [ 992.878773][T25543] tpg Y'CbCr encoding: 0/0 [ 992.883313][T25543] tpg quantization: 0/0 [ 992.887725][T25543] tpg RGB range: 0/2 [ 992.891968][T25543] vivid-000: ================== END STATUS ================== [ 992.900010][T25545] vivid-000: ================= START STATUS ================= [ 992.908109][T25545] v4l2-ctrls: vivid-000: Test Pattern: 75% Colorbar [ 992.914936][T25545] v4l2-ctrls: vivid-000: Fill Percentage of Frame: 100 [ 992.922307][T25545] v4l2-ctrls: vivid-000: Horizontal Movement: No Movement [ 992.929773][T25545] v4l2-ctrls: vivid-000: Vertical Movement: No Movement [ 992.937114][T25545] v4l2-ctrls: vivid-000: OSD Text Mode: All [ 992.943461][T25545] v4l2-ctrls: vivid-000: Show Border: false [ 992.949937][T25545] v4l2-ctrls: vivid-000: Show Square: false [ 992.956304][T25545] v4l2-ctrls: vivid-000: Sensor Flipped Horizontally: false [ 992.963795][T25545] v4l2-ctrls: vivid-000: Sensor Flipped Vertically: false [ 992.971365][T25545] v4l2-ctrls: vivid-000: Insert SAV Code in Image: false [ 992.978651][T25545] v4l2-ctrls: vivid-000: Insert EAV Code in Image: false [ 992.986411][T25545] v4l2-ctrls: vivid-000: Reduced Framerate: false [ 992.993332][T25545] v4l2-ctrls: vivid-000: Enable Capture Cropping: true [ 993.000725][T25545] v4l2-ctrls: vivid-000: Enable Capture Composing: true [ 993.008081][T25545] v4l2-ctrls: vivid-000: Enable Capture Scaler: true [ 993.014956][T25545] v4l2-ctrls: vivid-000: Timestamp Source: End of Frame [ 993.022283][T25545] v4l2-ctrls: vivid-000: Colorspace: sRGB [ 993.028790][T25545] v4l2-ctrls: vivid-000: Transfer Function: Default [ 993.035909][T25545] v4l2-ctrls: vivid-000: Y'CbCr Encoding: Default [ 993.042623][T25545] v4l2-ctrls: vivid-000: HSV Encoding: Hue 0-179 [ 993.051560][T25545] v4l2-ctrls: vivid-000: Quantization: Default [ 993.058144][T25545] v4l2-ctrls: vivid-000: Apply Alpha To Red Only: false [ 993.065230][T25545] v4l2-ctrls: vivid-000: Standard Aspect Ratio: 4x3 [ 993.072495][T25545] v4l2-ctrls: vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 993.081800][T25545] v4l2-ctrls: vivid-000: DV Timings: 640x480p59 inactive [ 993.089597][T25545] v4l2-ctrls: vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 993.098513][T25545] v4l2-ctrls: vivid-000: Maximum EDID Blocks: 2 [ 993.104996][T25545] v4l2-ctrls: vivid-000: Limited RGB Range (16-235): false [ 993.112705][T25545] v4l2-ctrls: vivid-000: Rx RGB Quantization Range: Automatic [ 993.120680][T25545] v4l2-ctrls: vivid-000: Power Present: 0x00000001 01:05:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) [ 993.127842][T25545] tpg source WxH: 320x180 (Y'CbCr) [ 993.133322][T25545] tpg field: 1 [ 993.137149][T25545] tpg crop: 320x180@0x0 [ 993.141692][T25545] tpg compose: 320x180@0x0 [ 993.146426][T25545] tpg colorspace: 8 [ 993.150816][T25545] tpg transfer function: 0/0 [ 993.155731][T25545] tpg Y'CbCr encoding: 0/0 [ 993.160268][T25545] tpg quantization: 0/0 [ 993.164602][T25545] tpg RGB range: 0/2 [ 993.168934][T25545] vivid-000: ================== END STATUS ================== 01:05:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x20000000) 01:05:29 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x8300, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000200), 0x0) [ 993.761313][T25549] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 993.841564][T25553] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 01:05:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x8300, 0x0) 01:05:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) 01:05:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:31 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 01:05:31 executing program 2: unshare(0x40040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @remote}}) 01:05:31 executing program 4: [ 995.328517][T25556] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 995.338108][T25556] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 995.371414][T25556] bridge0: port 76(veth153) entered blocking state [ 995.378266][T25556] bridge0: port 76(veth153) entered disabled state [ 995.388863][T25556] device veth153 entered promiscuous mode [ 995.412534][T25549] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 995.466434][T25570] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 995.828848][T25577] IPVS: ftp: loaded support on port[0] = 21 01:05:31 executing program 5: 01:05:31 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 996.527358][T25583] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 996.538214][T25583] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:32 executing program 1: 01:05:32 executing program 4: 01:05:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:32 executing program 5: [ 996.988439][T25583] bridge0: port 77(veth155) entered blocking state [ 996.997292][T25583] bridge0: port 77(veth155) entered disabled state [ 997.087547][T25583] device veth155 entered promiscuous mode 01:05:33 executing program 4: 01:05:33 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:33 executing program 5: 01:05:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) [ 998.452050][T25620] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 998.462581][T25620] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 999.061678][T25620] bridge0: port 78(veth157) entered blocking state [ 999.071956][T25620] bridge0: port 78(veth157) entered disabled state [ 999.192180][T25620] device veth157 entered promiscuous mode [ 999.289170][T10573] tipc: TX() has been purged, node left! 01:05:35 executing program 2: 01:05:35 executing program 1: 01:05:35 executing program 5: 01:05:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000340)={0x5, @output={0x1000, 0x0, {0x8000, 0x110}, 0x5, 0x1000}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:35 executing program 4: 01:05:35 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 999.819695][T25633] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 999.830637][T25633] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:35 executing program 1: 01:05:36 executing program 5: 01:05:36 executing program 4: [ 1000.474166][T25633] bridge0: port 79(veth159) entered blocking state [ 1000.483910][T25633] bridge0: port 79(veth159) entered disabled state [ 1000.537760][T25633] device veth159 entered promiscuous mode 01:05:36 executing program 2: 01:05:36 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:36 executing program 5: 01:05:36 executing program 1: 01:05:37 executing program 4: 01:05:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) [ 1001.414218][T25648] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1001.424149][T25648] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:37 executing program 5: [ 1002.019209][T25648] bridge0: port 80(veth161) entered blocking state [ 1002.028714][T25648] bridge0: port 80(veth161) entered disabled state [ 1002.154094][T25648] device veth161 entered promiscuous mode 01:05:38 executing program 2: 01:05:38 executing program 4: 01:05:38 executing program 1: 01:05:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:38 executing program 5: 01:05:38 executing program 4: 01:05:39 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:39 executing program 1: 01:05:39 executing program 2: 01:05:39 executing program 3: r0 = syz_open_dev$video(0x0, 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:39 executing program 4: 01:05:39 executing program 5: [ 1003.738897][T25678] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1003.749728][T25678] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:39 executing program 1: 01:05:39 executing program 2: 01:05:39 executing program 4: 01:05:40 executing program 5: 01:05:40 executing program 3: r0 = syz_open_dev$video(0x0, 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) [ 1004.418420][T25678] bridge0: port 81(veth163) entered blocking state [ 1004.428575][T25678] bridge0: port 81(veth163) entered disabled state [ 1004.483320][T25678] device veth163 entered promiscuous mode 01:05:40 executing program 1: 01:05:40 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:40 executing program 5: 01:05:40 executing program 4: 01:05:40 executing program 2: 01:05:40 executing program 3: r0 = syz_open_dev$video(0x0, 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:41 executing program 1: 01:05:41 executing program 4: 01:05:41 executing program 2: [ 1005.546985][T25700] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1005.557590][T25700] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:41 executing program 5: 01:05:42 executing program 1: [ 1006.154507][T25700] bridge0: port 82(veth165) entered blocking state [ 1006.164676][T25700] bridge0: port 82(veth165) entered disabled state 01:05:42 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 1006.283301][T25700] device veth165 entered promiscuous mode 01:05:42 executing program 4: 01:05:42 executing program 2: [ 1006.677164][T25717] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1006.687013][T25717] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1006.721016][T25717] bridge0: port 83(veth167) entered blocking state [ 1006.727932][T25717] bridge0: port 83(veth167) entered disabled state [ 1006.738337][T25717] device veth167 entered promiscuous mode 01:05:42 executing program 5: 01:05:42 executing program 1: 01:05:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:42 executing program 4: 01:05:42 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:43 executing program 2: 01:05:43 executing program 5: 01:05:43 executing program 1: 01:05:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) [ 1007.472356][T25731] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1007.482813][T25731] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:43 executing program 4: [ 1008.074255][T25731] bridge0: port 84(veth169) entered blocking state [ 1008.082944][T25731] bridge0: port 84(veth169) entered disabled state [ 1008.168690][T25731] device veth169 entered promiscuous mode 01:05:44 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:44 executing program 5: 01:05:44 executing program 2: 01:05:44 executing program 3: syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:44 executing program 4: 01:05:44 executing program 1: [ 1008.720694][T25746] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1008.730461][T25746] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:44 executing program 5: [ 1008.923287][T25746] bridge0: port 85(veth171) entered blocking state [ 1008.930188][T25746] bridge0: port 85(veth171) entered disabled state [ 1008.940606][T25746] device veth171 entered promiscuous mode 01:05:44 executing program 4: 01:05:44 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:45 executing program 2: 01:05:45 executing program 3: syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:45 executing program 1: 01:05:45 executing program 5: 01:05:45 executing program 4: 01:05:45 executing program 2: unshare(0x400) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c01"}}}}}, 0x0) 01:05:45 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000280)) 01:05:45 executing program 3: syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:46 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 01:05:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec0100002900270d00"/20, @ANYRES32=r2, @ANYBLOB="0080"], 0x1ec}}, 0x0) 01:05:46 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0}}], 0x6c00, 0x0) 01:05:46 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c, 0x0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f179516d, 0x0) 01:05:46 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 1010.698006][T25784] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.4'. 01:05:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, 0x0) [ 1010.797010][T25785] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.4'. 01:05:46 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX], 0xfffffecc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@local, 0x800, 0x0, 0xff, 0x1}, 0x20) 01:05:47 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, 0x0) 01:05:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty}}) 01:05:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, 0x0) 01:05:48 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:48 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x9, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 01:05:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) 01:05:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) 01:05:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14e5f40700000000", 0xd4) 01:05:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:49 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:05:49 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="390000001000090468fe07002b0000fe0100ee002600000045000c070307001404001800120003000e04000001000000000000000000000020", 0x39}], 0x1) [ 1014.242754][T25837] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 01:05:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="39000000130009006900000000000000ab008000200000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) 01:05:50 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x0, 0x4c}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 01:05:50 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:50 executing program 4: unshare(0x400) r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000040)) 01:05:50 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0503002cf415480001020200c52cf7c25975e605b02f0800eb2b2ff0dac8897c6b118777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x1005a, 0x800, 0x0, 0x2f) 01:05:50 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbf, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000100), &(0x7f00000004c0)=@udp6=r1}, 0x20) 01:05:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @vbi={0x1ff, 0x401, 0x34325842}}) 01:05:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14e5f40700000000", 0xd4) 01:05:51 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 1015.377481][T25845] bridge0: port 2(bridge_slave_1) entered disabled state 01:05:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0xc0045878, 0x0) 01:05:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x401, 0x34325842}}) 01:05:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x80fe) 01:05:51 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}}) 01:05:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x2, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 01:05:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002300000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 01:05:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x0, 0x34325842}}) 01:05:52 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:52 executing program 4: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 01:05:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16070000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f24a3aa6bb3019c13bd23212fb56f040026fbfefc41056bd8174b7960317142fa9ea41d8123751c4e345c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206aa4939fc404000000c788b277beee1cbf9b2a4def23d410f6accd3641110bec4e90a6341965c39e9ef8f6e3968f200e011ea665c45a3449abe802f5ab3e89cf6c06000000b8580218ce740068720000074e468eea3fd2f73902ebcfcf49822775985bf313405b433a8acd715f5888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c000000000000000031000000000000000000e75a89faff01210cce39bf405f1e846c12423a164a33e680846f26ad7add65a73d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80560fbd7fb5e2a431ab9142f3a06d5579646b6c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d571010e80608131c3fa90e7e57a79d6fce424c2200af6c7784a1975fa657de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231baae1f734f22bc085115c6e779d8bdf456edc717918ee2e00d3673247df48dca02113a38300cabf2b5543ffc1664f57b3819d8c396d2c2361629d1822f722ec23812770d72cd00600000f7889b8d5044f563a1f68d4efe81a386c4fa7cc87cac6f45a6922ded2e295fdbc463f747c08f4aa99171c2ad05e010586903500000000000000000000000000000000005c6a7f25d49c5cce24fe9481476dd7594d59e0d0269162bf259b1b87bf80d7ce57de133e6b3119c64e3da3aab039076dbf751184f82732523f693469f9cbebda1fff62a4d8a8e3fbeb14b93a6c762fe87c0300000000000000630256b4005025bab0cf3a971e155cfa1809a075d1153487c9e1044dd3fd0bef7265f51724dbb8ab297cdc70f6075b380609fac8c1c58b797738bda31678f4d5b72588d3cd2b2d0f7c5ecd2a2221d6ec090000"], &(0x7f0000000140)='GPL\x00'}, 0x48) 01:05:52 executing program 5: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 01:05:52 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000b6b23e9b200a00080001c0000000010000", 0x7c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xa, 0x0, 0x0) [ 1017.128342][T25888] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x0, 0x34325842}}) 01:05:53 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x200739, 0xe, 0x4000, &(0x7f0000000400)="3d6ee2e04b91ab10f30f9b0186dd", 0x0, 0x4000}, 0x28) [ 1017.503076][T25896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1017.598340][T25896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:05:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8927, &(0x7f00000007c0)={'batadv_slave_0\x00', @ifru_flags}) 01:05:53 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(cipher_null-generic)\x00'}, 0x58) 01:05:53 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) [ 1017.805135][T25903] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x0, 0x34325842}}) 01:05:53 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 01:05:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x117}], 0x10}}], 0x1, 0x0) 01:05:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x401}}) 01:05:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27}, 0x24}}, 0x0) [ 1018.708088][T25922] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:54 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14e5f40700000000", 0x4ffe0) 01:05:54 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:55 executing program 4: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xffff0000, 0x8}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)="39000000130009006900000000000000ab008000200000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) 01:05:55 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x3) recvfrom(r2, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) splice(r0, 0x0, r1, 0x0, 0x4004ffe0, 0x0) 01:05:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x401}}) 01:05:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000004", @ANYRES32=r2], 0x1ec}}, 0x0) [ 1019.422973][T25937] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000a00ee0020000000450001070300001404001800120014000e04000020000300"/57, 0x39}], 0x1) 01:05:55 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 1019.714317][T25947] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.2'. 01:05:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x401}}) [ 1020.191643][T25946] bridge0: port 2(bridge_slave_1) entered disabled state 01:05:56 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)) [ 1020.682276][T25949] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1020.692959][T25951] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1020.705160][T25954] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. 01:05:56 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xb}}}, 0x24}}, 0x0) [ 1020.720243][T25954] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1020.739965][ T8718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1020.749943][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.757215][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state 01:05:56 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:56 executing program 2: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x400000000001e871, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 01:05:56 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x1}, 0x6d) 01:05:56 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, 0x0, 0x0, 0x4001259e, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4004ffe0, 0x0) 01:05:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0xf402, 0x40, 0x0, 0x0) 01:05:57 executing program 1: getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)=""/59, &(0x7f00000000c0)=0x3b) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESOCT=r2, @ANYRESOCT, @ANYRES64], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4004ffe0, 0x0) 01:05:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000600000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 01:05:57 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00'], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:57 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000502008000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x11, 0x800000000000004, 0x4, 0x8004, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x2}, 0x40) 01:05:57 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) [ 1022.067564][T25993] [ 1022.070201][T25993] ********************************************************** [ 1022.077968][T25993] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 1022.085562][T25993] ** ** [ 1022.093051][T25993] ** trace_printk() being used. Allocating extra memory. ** [ 1022.100661][T25993] ** ** [ 1022.108159][T25993] ** This means that this is a DEBUG kernel and it is ** [ 1022.115669][T25993] ** unsafe for production use. ** [ 1022.123092][T25993] ** ** [ 1022.130622][T25993] ** If you see this message and you are not debugging ** [ 1022.138288][T25993] ** the kernel, report this immediately to your vendor! ** [ 1022.145927][T25993] ** ** [ 1022.153350][T25993] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 1022.161041][T25993] ********************************************************** 01:05:58 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00'], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:58 executing program 4: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1, {[@generic={0x0, 0x2}]}}}}}}, 0x0) 01:05:58 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10}, {0x10}], 0x20}}], 0x501, 0x0) [ 1022.753937][T25998] __nla_validate_parse: 2 callbacks suppressed [ 1022.754006][T25998] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.0'. 01:05:58 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x0, 0x2, 0xff, 0x1}, 0x20) 01:05:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000600000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 01:05:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="39000000130009006900000000000000ab008000270000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) 01:05:58 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00'], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:05:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c000000050605"], 0x6c}}, 0x0) 01:05:59 executing program 5: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0xd8, 0x401eb94) 01:05:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @local}, {0x6, @link_local}, 0x8, {}, 'veth0_to_hsr\x00'}) 01:05:59 executing program 1: unshare(0x400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) [ 1023.667584][T26017] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. 01:05:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="390000001100090468fe07002b0000000100ee0020000000450001070300001404001800120014000e04000020000300"/57, 0x39}], 0x1) 01:06:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="39000000130009006900000000000000ab008000270000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) 01:06:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 1024.548603][T26014] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1024.560506][T26027] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 01:06:00 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, 0x0, 0x0, 0x40012526, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4004ffe0, 0x0) 01:06:00 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:00 executing program 1: unshare(0x400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 01:06:00 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9dc3f45f9f65515b0e1a38d8665522be18bd10a48b043e3c42646d25dfd730500e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_find_delalloc_range\x00', r0}, 0x10) [ 1025.079010][T26027] device bridge_slave_1 left promiscuous mode [ 1025.085587][T26027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.198028][T26042] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1025.208847][T26042] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 01:06:01 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:01 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 01:06:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000280)={0x9}, 0x88) [ 1025.995064][T26058] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1026.005445][T26058] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) 01:06:02 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast1=0xe0000300, @local}, 0x8) 01:06:02 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffd}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 01:06:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000201010100000000002aa712475e"], 0x14}}, 0x0) 01:06:02 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:02 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480050000000e1ff95000000000000002ba7e1d30cb599e83f24a3aa6bb3019c13bd23212fb56f040026fbfefc41056bd8174b7960317142fa9ea41d8123751c4e345c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206aa4939fc404000000c788b277beee1cbf9b2a4def23d410f6accd3641110bec4e90a6341965c39e9ef8f6e3968f200e011ea665c45a3449abe802f5ab3e89cf6c06000000b8580218ce740068720000074e468eea3fd2f73902ebcfcf49822775985bf313405b433a8acd715f5888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c000000000000000031000000000000000000e75a89faff01210cce39bf405f1e846c12423a164a33e680846f26ad7add65a73d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80560fbd7fb5e2a431ab9142f3a06d5579646b6c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d571010e80608131c3fa90e7e57a79d6fce424c2200af6c7784a1975fa657de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231baae1f734f22bc085115c6e779d8bdf456edc717918ee2e00d3673247df48dca02113a38300cabf2b5543ffc1664f57b3819d8c396d2c2361629d1822f722ec23812770d72cd00600000f7889b8d5044f563a1f68d4efe81a386c4fa7cc87cac6f45a6922ded2e295fdbc463f747c08f4aa99171c2ad05e010586903500000000000000000000000000000000005c6a7f25d49c5cce24fe9481476dd7594d59e0d0269162bf259b1b87bf80d7ce57de133e6b3119c64e3da3aab039076dbf751184f82732523f693469f9cbebda1fff62a4d8a8e3fbeb14b93a6c762fe87c0300000000000000630256b4005025bab0cf3a971e155cfa1809a075d1153487c9e1044dd3fd0bef7265f51724dbb8ab297cdc70f6075b380609fac8c1c58b797738bda31678f4d5b72588d3cd2b2d0f7c5ecd2a2221d6ec090000"], &(0x7f0000000140)='GPL\x00'}, 0x48) [ 1026.740472][T26075] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1026.750806][T26075] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:02 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:03 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @loopback}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}, 0x0) 01:06:03 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000010"], 0x6c}}, 0x0) 01:06:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002300000784000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 01:06:03 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) [ 1027.816399][T26089] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1027.827046][T26089] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1027.886951][T26093] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. 01:06:03 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 01:06:04 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000700)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x0, 0x0, 0xff, 0x1}, 0x20) 01:06:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000010"], 0x6c}}, 0x0) 01:06:04 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x14, r1, 0x703, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 01:06:04 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) [ 1028.772235][T26106] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1028.782767][T26106] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1028.806504][T26108] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1028.980221][T26100] not chained 70000 origins [ 1028.984787][T26100] CPU: 0 PID: 26100 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 1028.993462][T26100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.003518][T26100] Call Trace: [ 1029.006822][T26100] dump_stack+0x21c/0x280 [ 1029.011167][T26100] kmsan_internal_chain_origin+0x6f/0x130 [ 1029.016927][T26100] ? ip_do_fragment+0x3b50/0x3b50 [ 1029.021979][T26100] ? kmsan_get_metadata+0x116/0x180 [ 1029.027192][T26100] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1029.033041][T26100] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1029.039118][T26100] ? kmsan_get_metadata+0x116/0x180 [ 1029.044338][T26100] ? kmsan_set_origin_checked+0x95/0xf0 [ 1029.049901][T26100] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1029.055989][T26100] ? _copy_from_user+0x221/0x330 [ 1029.060942][T26100] ? kmsan_get_metadata+0x116/0x180 [ 1029.066147][T26100] __msan_chain_origin+0x50/0x90 [ 1029.071096][T26100] __get_compat_msghdr+0x6db/0x9d0 [ 1029.076231][T26100] get_compat_msghdr+0x108/0x2b0 [ 1029.081188][T26100] __sys_sendmmsg+0x768/0xfd0 [ 1029.085890][T26100] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 1029.091797][T26100] ? should_fail+0x72/0x9e0 [ 1029.096308][T26100] ? __msan_poison_alloca+0xf0/0x120 [ 1029.101608][T26100] ? kmsan_copy_to_user+0x81/0x90 [ 1029.106635][T26100] ? _copy_to_user+0x203/0x2b0 [ 1029.111418][T26100] ? put_old_timespec32+0x231/0x2d0 [ 1029.116621][T26100] ? kmsan_get_metadata+0x116/0x180 [ 1029.121826][T26100] ? kmsan_get_metadata+0x116/0x180 [ 1029.127031][T26100] ? kmsan_get_metadata+0x116/0x180 [ 1029.132239][T26100] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1029.137625][T26100] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1029.143181][T26100] __do_fast_syscall_32+0x2af/0x480 [ 1029.148404][T26100] do_fast_syscall_32+0x6b/0xd0 [ 1029.153262][T26100] do_SYSENTER_32+0x73/0x90 [ 1029.157781][T26100] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.164109][T26100] RIP: 0023:0xf7fb9549 [ 1029.168168][T26100] Code: Bad RIP value. [ 1029.172235][T26100] RSP: 002b:00000000f55b30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 1029.180652][T26100] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020007fc0 [ 1029.188626][T26100] RDX: 00000000000001a8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1029.196598][T26100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1029.204569][T26100] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1029.212540][T26100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1029.220522][T26100] Uninit was stored to memory at: [ 1029.225556][T26100] kmsan_internal_chain_origin+0xad/0x130 [ 1029.231286][T26100] __msan_chain_origin+0x50/0x90 [ 1029.236248][T26100] __get_compat_msghdr+0x6db/0x9d0 [ 1029.241369][T26100] get_compat_msghdr+0x108/0x2b0 [ 1029.246312][T26100] __sys_sendmmsg+0x768/0xfd0 [ 1029.250989][T26100] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1029.256357][T26100] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1029.261895][T26100] __do_fast_syscall_32+0x2af/0x480 [ 1029.267086][T26100] do_fast_syscall_32+0x6b/0xd0 [ 1029.271926][T26100] do_SYSENTER_32+0x73/0x90 [ 1029.276422][T26100] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.282730][T26100] [ 1029.285054][T26100] Uninit was stored to memory at: [ 1029.290072][T26100] kmsan_internal_chain_origin+0xad/0x130 [ 1029.295781][T26100] __msan_chain_origin+0x50/0x90 [ 1029.300708][T26100] __get_compat_msghdr+0x6db/0x9d0 [ 1029.305806][T26100] get_compat_msghdr+0x108/0x2b0 [ 1029.310735][T26100] __sys_sendmmsg+0x768/0xfd0 [ 1029.315410][T26100] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1029.320773][T26100] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1029.326331][T26100] __do_fast_syscall_32+0x2af/0x480 [ 1029.331518][T26100] do_fast_syscall_32+0x6b/0xd0 [ 1029.336359][T26100] do_SYSENTER_32+0x73/0x90 [ 1029.340853][T26100] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.347158][T26100] [ 1029.349470][T26100] Uninit was stored to memory at: [ 1029.354485][T26100] kmsan_internal_chain_origin+0xad/0x130 [ 1029.360191][T26100] __msan_chain_origin+0x50/0x90 [ 1029.365117][T26100] __get_compat_msghdr+0x6db/0x9d0 [ 1029.370219][T26100] get_compat_msghdr+0x108/0x2b0 [ 1029.375147][T26100] __sys_sendmmsg+0x768/0xfd0 [ 1029.379813][T26100] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1029.385173][T26100] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1029.390708][T26100] __do_fast_syscall_32+0x2af/0x480 [ 1029.395901][T26100] do_fast_syscall_32+0x6b/0xd0 [ 1029.400743][T26100] do_SYSENTER_32+0x73/0x90 [ 1029.405255][T26100] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.411560][T26100] [ 1029.413872][T26100] Uninit was stored to memory at: [ 1029.418891][T26100] kmsan_internal_chain_origin+0xad/0x130 [ 1029.424596][T26100] __msan_chain_origin+0x50/0x90 [ 1029.429521][T26100] __get_compat_msghdr+0x6db/0x9d0 [ 1029.434616][T26100] get_compat_msghdr+0x108/0x2b0 [ 1029.439540][T26100] __sys_sendmmsg+0x768/0xfd0 [ 1029.444206][T26100] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1029.449565][T26100] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1029.455101][T26100] __do_fast_syscall_32+0x2af/0x480 [ 1029.460287][T26100] do_fast_syscall_32+0x6b/0xd0 [ 1029.465125][T26100] do_SYSENTER_32+0x73/0x90 [ 1029.469619][T26100] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.475922][T26100] [ 1029.478234][T26100] Uninit was stored to memory at: [ 1029.483249][T26100] kmsan_internal_chain_origin+0xad/0x130 [ 1029.488962][T26100] __msan_chain_origin+0x50/0x90 [ 1029.493905][T26100] __get_compat_msghdr+0x6db/0x9d0 [ 1029.499016][T26100] get_compat_msghdr+0x108/0x2b0 [ 1029.503941][T26100] __sys_sendmmsg+0x768/0xfd0 [ 1029.508608][T26100] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1029.513972][T26100] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1029.519519][T26100] __do_fast_syscall_32+0x2af/0x480 [ 1029.524703][T26100] do_fast_syscall_32+0x6b/0xd0 [ 1029.529563][T26100] do_SYSENTER_32+0x73/0x90 [ 1029.534055][T26100] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.540359][T26100] [ 1029.542670][T26100] Uninit was stored to memory at: [ 1029.547697][T26100] kmsan_internal_chain_origin+0xad/0x130 [ 1029.553411][T26100] __msan_chain_origin+0x50/0x90 [ 1029.558337][T26100] __get_compat_msghdr+0x6db/0x9d0 [ 1029.563440][T26100] get_compat_msghdr+0x108/0x2b0 [ 1029.568363][T26100] __sys_sendmmsg+0x768/0xfd0 [ 1029.573030][T26100] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1029.578391][T26100] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1029.583928][T26100] __do_fast_syscall_32+0x2af/0x480 [ 1029.589113][T26100] do_fast_syscall_32+0x6b/0xd0 [ 1029.593953][T26100] do_SYSENTER_32+0x73/0x90 [ 1029.598483][T26100] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.605221][T26100] [ 1029.607532][T26100] Uninit was stored to memory at: [ 1029.612688][T26100] kmsan_internal_chain_origin+0xad/0x130 [ 1029.618500][T26100] __msan_chain_origin+0x50/0x90 [ 1029.623427][T26100] __get_compat_msghdr+0x6db/0x9d0 [ 1029.628529][T26100] get_compat_msghdr+0x108/0x2b0 [ 1029.633452][T26100] __sys_sendmmsg+0x768/0xfd0 [ 1029.638119][T26100] __se_compat_sys_sendmmsg+0xcd/0xf0 [ 1029.643481][T26100] __ia32_compat_sys_sendmmsg+0x56/0x70 [ 1029.649017][T26100] __do_fast_syscall_32+0x2af/0x480 [ 1029.654205][T26100] do_fast_syscall_32+0x6b/0xd0 [ 1029.659044][T26100] do_SYSENTER_32+0x73/0x90 [ 1029.663540][T26100] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1029.669860][T26100] [ 1029.672173][T26100] Local variable ----msg_sys@__sys_sendmmsg created at: 01:06:05 executing program 1: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xffff0000, 0x8}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="39000000130009006900000000000000ab008000200000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) 01:06:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) [ 1029.679093][T26100] __sys_sendmmsg+0xbb/0xfd0 [ 1029.683770][T26100] __sys_sendmmsg+0xbb/0xfd0 01:06:05 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000010"], 0x6c}}, 0x0) 01:06:06 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x3) recvfrom(r3, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012500, 0x0, 0xffffffffffffff49) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4004ffe0, 0x0) [ 1030.204571][T26123] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1030.216124][T26123] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) [ 1030.309818][T26127] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1031.322434][T26137] bridge0: port 2(bridge_slave_1) entered disabled state 01:06:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 01:06:07 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008000100766574"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:07 executing program 5: r0 = socket(0x840000000002, 0x3, 0xff) accept4$inet6(r0, 0x0, 0x0, 0x0) 01:06:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:07 executing program 2: syz_emit_ethernet(0xfffffdef, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}]}}}}}}, 0x0) 01:06:07 executing program 1: bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect(r0, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 1031.877523][T26146] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8943, &(0x7f00000007c0)={'veth0_virt_wifi\x00', @ifru_flags}) 01:06:08 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000bc0)={0x0, 'syz_tun\x00'}) 01:06:08 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008000100766574"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:08 executing program 5: unshare(0x400) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) 01:06:08 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 01:06:09 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d0000002500120008000100766574"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:09 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x4}}]}, 0x34}}, 0x0) 01:06:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x0, @multicast1=0xe0000002}, {0x2, 0x0, @local}, {}, 0xbf}) 01:06:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'raw\x00'}, &(0x7f0000000000)=0x54) 01:06:09 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) [ 1033.939859][T26185] __nla_validate_parse: 3 callbacks suppressed [ 1033.939959][T26185] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1033.957931][T26185] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:09 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000002400070500deffffffffffffff000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000700010066710000340002000800050004"], 0x60}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 01:06:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea400001b00056bd25a80648c69940d0124fc60100009400a000048053582c137153e370948038002000000d1bd", 0x33fe0}], 0x1}, 0x7a000000) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 01:06:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) 01:06:10 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) [ 1034.237940][ T29] audit: type=1804 audit(1599959170.061:20): pid=26192 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir823610840/syzkaller.zfEwjr/509/cgroup.controllers" dev="sda1" ino=15925 res=1 01:06:10 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xc, 0x2011, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) [ 1034.740628][T26205] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r1, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 01:06:10 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:10 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9dc3f45f9f65515b0e1838d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0xfdde) 01:06:10 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7301}, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002980)="ad9ac8a3ca5636c8488bf89ac1770b5ccc3c4622714c07ac1a3db914b23e1e9761c2ab4ce7c395b3885487062fb14cc6a5f290985f3bcb1561624d1d37c92eb761462596", 0x44}, {&(0x7f0000002a00)="d526a2e7ebd4eb8e7379d9edd9aa0f838d4b323fa8253e7e1a3ebefa29b244db54427853872e61e43cd7fbf5f6c269c2fb364032163ffce0ee566828cb75d83773aff0eaf434b2ac690284aa4b2249343c1bf7c7d6ff741e18505ef330ead62aa160d416f12d2209c7d2114d05517a0d9233f8d72d13c265c33accd9d5d57fcde06793af5e40856011d63251a839cafbb8a0f00299dc3b2494de10e77d73e84f9807b43637d11faa73fc0c991fd6", 0xae}, {&(0x7f0000002ac0)="cb83aed85e3baa5ff4a205d09e201a65f6f0f01a3217b031", 0x18}, {&(0x7f0000002b00)="18abe5c9fb3164ce0cc270ffd7e8efb124204bff922ff882eafa1bedeff8e36d795d1a180236f08299c87e40b3732059f632f34329c758b301b34d1e96c47546aa85a4a1bbcff24cea5bb5f5ca53ade707bf5b44a38f446c835822331c10e80853ed5bcb579a17d7b6e64947bebb0ebc1679b816c8d4d1524df18662fb41dfb5cf4870553a8c5f4bb0b8635f4bc8ccae5f956ef2e9ac4650143e3cc287bffb3255ca7bbfb9c20eb3d1d9c17063ff8725c0aa354810fd1f7126d8c489a166d2ba9f00cdb88668efad944d94abe9651db0d3f14a2e6906743f7c39b8cddca8a2dc99f093253de0dfab82a6854e8ae3e65b6d99ea", 0xf3}, {&(0x7f00000051c0)="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", 0xcc4}], 0x5}, 0x0) 01:06:10 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:11 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9dc3f45f9f65515b0e1838d8665522be18b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, &(0x7f0000000040), 0xfdde) [ 1035.518442][T26223] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:11 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfdde) 01:06:11 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x5, &(0x7f0000000040), 0xfdde) 01:06:11 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40719, 0x7fff}) r1 = perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0xcc, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa122, 0x0, @perf_bp={&(0x7f0000000280)}, 0x52b40, 0x0, 0x7, 0x8, 0xffffffff}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x5) perf_event_open(0x0, 0x0, 0x3, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x2084, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x1000000000000) close(r0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x6a, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 01:06:11 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:11 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:12 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000040), 0xfdde) 01:06:12 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9dc3f45f9f65515b0e1838d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000040), 0xfdde) 01:06:12 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00'}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000040), 0xfdde) [ 1036.354264][T26243] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:12 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:12 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:12 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x77, &(0x7f0000000040), 0xfdde) 01:06:12 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9dc3f45f9f65515b0e1838d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000040), 0xfdde) 01:06:13 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:13 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:13 executing program 5: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9dc3f45f9f65515b0e1838d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x6, &(0x7f0000000040), 0xfdde) 01:06:13 executing program 1: 01:06:13 executing program 2: 01:06:13 executing program 3: 01:06:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 01:06:14 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:14 executing program 5: 01:06:14 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9dc3f45f9f65515b0e1838d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f94535"], &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x6b, &(0x7f0000000040), 0xfdde) 01:06:14 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9dc3f45f9f65515b0e1838d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c352"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000040), 0xfdde) 01:06:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 01:06:14 executing program 3: 01:06:14 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:14 executing program 5: 01:06:14 executing program 1: 01:06:14 executing program 2: 01:06:15 executing program 3: 01:06:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 01:06:15 executing program 2: 01:06:15 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:15 executing program 5: 01:06:15 executing program 1: 01:06:15 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:15 executing program 3: 01:06:16 executing program 2: 01:06:16 executing program 5: 01:06:16 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:16 executing program 1: 01:06:16 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:16 executing program 3: 01:06:17 executing program 2: 01:06:17 executing program 5: 01:06:17 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebff", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:17 executing program 1: 01:06:17 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:17 executing program 3: 01:06:18 executing program 5: 01:06:18 executing program 2: [ 1042.239822][T26334] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:18 executing program 3: 01:06:18 executing program 1: 01:06:18 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x74) 01:06:18 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebff", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:18 executing program 2: 01:06:18 executing program 5: 01:06:18 executing program 3: [ 1043.118899][T26347] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:19 executing program 1: 01:06:19 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x74) 01:06:19 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebff", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:19 executing program 2: 01:06:19 executing program 5: 01:06:19 executing program 3: 01:06:19 executing program 1: [ 1043.880939][T26357] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:19 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x74) 01:06:20 executing program 2: 01:06:20 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:20 executing program 5: 01:06:20 executing program 1: 01:06:20 executing program 3: [ 1044.691745][T26367] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:20 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x74) 01:06:20 executing program 2: 01:06:20 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:21 executing program 5: 01:06:21 executing program 3: 01:06:21 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x74) 01:06:21 executing program 1: [ 1045.562708][T26377] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:21 executing program 2: 01:06:21 executing program 5: 01:06:21 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:21 executing program 3: 01:06:22 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x74) 01:06:22 executing program 1: 01:06:22 executing program 2: 01:06:22 executing program 5: [ 1046.467901][T26390] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:22 executing program 3: 01:06:22 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600004004", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:22 executing program 2: 01:06:22 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:22 executing program 1: 01:06:23 executing program 5: [ 1047.277611][T26400] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1047.295730][T26400] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:23 executing program 3: 01:06:23 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600004004", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:23 executing program 2: 01:06:23 executing program 1: 01:06:23 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:23 executing program 5: [ 1048.085229][T26410] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1048.093831][T26410] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:23 executing program 3: 01:06:24 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c600004004", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:24 executing program 2: 01:06:24 executing program 1: 01:06:24 executing program 5: 01:06:24 executing program 3: 01:06:24 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) [ 1048.923280][T26422] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1048.931561][T26422] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:24 executing program 2: 01:06:25 executing program 5: 01:06:25 executing program 1: 01:06:25 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c60000400412", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:25 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x74) 01:06:25 executing program 3: [ 1049.677743][T26433] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:25 executing program 2: 01:06:25 executing program 1: 01:06:25 executing program 5: 01:06:25 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c60000400412", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:25 executing program 3: 01:06:26 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x74) [ 1050.457491][T26443] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:26 executing program 1: 01:06:26 executing program 2: 01:06:26 executing program 5: 01:06:26 executing program 3: 01:06:26 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c60000400412", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:26 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x74) 01:06:26 executing program 1: 01:06:27 executing program 5: 01:06:27 executing program 2: [ 1051.395524][T26455] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 01:06:27 executing program 3: 01:06:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:27 executing program 1: 01:06:27 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x0, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:27 executing program 5: 01:06:27 executing program 2: 01:06:28 executing program 3: 01:06:28 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:28 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x0, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:28 executing program 1: 01:06:28 executing program 5: 01:06:28 executing program 2: 01:06:28 executing program 3: 01:06:28 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x5800}, 0x6d) 01:06:29 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x0, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:29 executing program 5: 01:06:29 executing program 1: 01:06:29 executing program 3: 01:06:29 executing program 2: 01:06:29 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:06:29 executing program 5: 01:06:30 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:30 executing program 1: 01:06:30 executing program 2: 01:06:30 executing program 3: 01:06:30 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:06:30 executing program 5: 01:06:30 executing program 1: 01:06:30 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:30 executing program 3: 01:06:30 executing program 2: 01:06:30 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:06:31 executing program 5: 01:06:31 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:31 executing program 1: 01:06:31 executing program 3: 01:06:31 executing program 2: 01:06:31 executing program 4: 01:06:32 executing program 5: 01:06:32 executing program 1: 01:06:32 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:32 executing program 3: 01:06:32 executing program 2: 01:06:32 executing program 4: 01:06:32 executing program 5: 01:06:32 executing program 3: 01:06:32 executing program 1: 01:06:33 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:33 executing program 2: 01:06:33 executing program 4: 01:06:33 executing program 5: 01:06:33 executing program 3: 01:06:33 executing program 1: 01:06:33 executing program 4: 01:06:33 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:33 executing program 2: 01:06:34 executing program 5: 01:06:34 executing program 1: 01:06:34 executing program 3: 01:06:34 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:34 executing program 4: 01:06:34 executing program 2: 01:06:34 executing program 5: 01:06:35 executing program 3: 01:06:35 executing program 1: 01:06:35 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:35 executing program 4: 01:06:35 executing program 2: 01:06:35 executing program 5: 01:06:35 executing program 3: 01:06:36 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:37 executing program 4: 01:06:37 executing program 1: 01:06:37 executing program 5: 01:06:37 executing program 2: 01:06:37 executing program 3: 01:06:37 executing program 1: 01:06:37 executing program 2: 01:06:38 executing program 4: 01:06:38 executing program 5: 01:06:38 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:38 executing program 3: 01:06:38 executing program 1: 01:06:38 executing program 2: 01:06:38 executing program 5: 01:06:38 executing program 4: 01:06:38 executing program 3: 01:06:38 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:39 executing program 1: 01:06:39 executing program 4: 01:06:39 executing program 2: 01:06:39 executing program 5: 01:06:39 executing program 3: 01:06:39 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:40 executing program 2: 01:06:40 executing program 4: 01:06:40 executing program 1: 01:06:40 executing program 5: 01:06:40 executing program 3: 01:06:40 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:40 executing program 4: 01:06:40 executing program 5: 01:06:40 executing program 2: 01:06:40 executing program 1: 01:06:40 executing program 3: 01:06:41 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:41 executing program 5: 01:06:41 executing program 2: 01:06:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) sendfile(r0, r1, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 01:06:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) 01:06:41 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x7e21881b) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:06:41 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000018007f5a00fe01b2a4a29093020604be58bbff00000001080009003900090035000c020200000025001540000000d1000022dcc144b9d9352155dee42b0df806132ed54404009beadd68c8f240de0d1679", 0x55}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80003, 0x0) sendmmsg$alg(r0, &(0x7f0000000100), 0x492492492492711, 0x0) 01:06:42 executing program 2: r0 = socket(0x10, 0x80803, 0x0) write(r0, &(0x7f0000000000)="120000001a002517fc05bc04fef6000d0a0d", 0x12) 01:06:42 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha3-384-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 1066.589169][T26628] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1066.669893][T26629] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.5'. 01:06:42 executing program 3: r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004019) r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x5, 0x3f, 0x1, 0x2, 0x0, 0xe8, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb3f, 0x1, @perf_config_ext={0x83, 0x5}, 0x440, 0x9, 0x0, 0x4, 0xffffffff, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r0, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) close(r1) 01:06:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 01:06:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) 01:06:42 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 01:06:43 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100)}], 0x1, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) 01:06:43 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0}, 0x10) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000009c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) close(r2) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000a00)="68a380f611e47150828d30a0c2b87af28381e610416255ed9611c5fcc010e15f4722f9eaca0009ef45899bfd34a3b1c5eb33eb58381b10d14c44cb10d32cee3bfe996b1e8851d8fc45716a4fbc38d0f1ac05d8826a964f4e9d383f0643278ece61e39cd27fcda42c216d2d302e98a3e852a9a79e10fa2c98e3458729449fb23aff9fab08952156d15f829fef3fdb9f2eaad63f6e54081f828f3a46ed8c593c0c337373fe6efcd8d199f604ec92dff56b2583f722f4b6c7368d401444b66883f0c721fdcb4d44c676bcc872096a745c0dd6f59c92cdb85a52a860fec025a4f62e4a84d5090291d8ef39dbf853410405885b9207420e979725f94527e55f1d2c94850fe8bcf5af884fc39d1e33a03319fa5fbb52a120a9731bce5c5a3a62fd74e9c888fe24dce2d6e0df9690ef072911aeba4a0896a029dfbbd4b70c3512d6cd3c8bfc8c804b81b8a63ebc4f05eb14a2d674432ad7e0f2e6827e3344f8d9dc891e56f3d381d9170b9a7bc49dd2b4a61070c6b48dab26e317149a13eb9e17aab57c2751e3f30a7326b37b21a06deae67344633ce44324df52f3c3f3ae7ad569cbca68a7a4bc3024e72652453be226bfe81e96250ae5df4b2ccceb4cc53051532076cf76b2f40d33e102f763e19e07292bf6afc75c9fc9bb5201178f248d81dd40153855a15166ea63845aa122360586a754e43a741388f0683cdf8c51652c1d0da4f6ab875ea3142098b180c42e8dcb895a406171da71ec53720974eeeb7254c302459e4360d0661af4449a1da665a95f2f2a1ff2e9f1033d139e7244e4583fd763912ead9c1bbe10e89fa39adb50f19f6a113f1d4bd93467c48de23f709bbdc10b7af5393bbb5243690faed306b153cf0ca03c0314e42e04a1ac40c05de296065793bf9e57ac2fd25d9e36101f42c86fa1b012a91c0f1a4472f74732749ad82172dece5b6d95fcdc98642e436bb2a65b78d041290e537f72855e924b7f0ab58e4a0233f789b384774d39187df3c9f53b73207715c2ef39cbc4487e8d263dba632b955bcff2c0208db183b77f6469200bebeb77c3f55a856cf3bfa08fae904292dac85739e20f60c20232e479e44422893327edce7b156a4aadd8c5c47b9611bc507b3d2dbe1f37620f3a7c7e5860cf6299f8e13011182bb8c355435a434b5cd8a9b40028f57acaf277ee96c686e95dc832f69871bb34b3e30a2dc789faf87c852479fafc13fa62842b62ab15dfa4b4b721c6cd9759e42e6d12c569e83604253c97959e61e0f6ba0ee3383c30c886f444c0a29b563f808ceba615aa6b23f60f05fb9d3c93f59ec7c0822e464c1e893caf96b508a53b607c7e5acba9261c483cc4b16ba3c202255e19ed49fb64ff251a2554ff8fde1e6ccb98116125b6949e7e7262c5036a1f3615ed47e6e8ec780cb1ffc7677a9ef3d1131450a4323255cd35eb74938f34f31941acbf38fa83b66e78612900d23d192d3b2cad4ff815cb37659858a9d9e2dbaff66d4210ba63cba4c2086b18d8ddf67a71397a9f5f0aff36a1e49aee993397fb7cb0126577795fc9f2b1bce42813b0e6e306d20340fbf2a3f602bfdd7df715d0544b948af2f617c681d6c586ead56dff4dd58d9f5197883467b7fdbf0a2d68c0ff23b2ace3104ee0635567b7888752e334cdac567c2189085d58d6ef503872fd91748b4ab086bb149579173abb886d29068c4e656eb7e8db4b48298cef43608ea3e58e099fb0d770174965ed6fb7a6312affc62e0a5947962b72b9149de68b4d3e2936477245f95d0d1f22756f20793a7a87e58e195d86502e23dd95c3e834f0aeab797fe79de4fc29adbbb5bc9e87738cc60a51837a8d6bfdc3635cf85bf19da58966c6ccecdec073d9b9d0be9cd1157bbbb5c09ee0a18508ed9dc7e7ca9e170822bd321ec3731f428dcf11b28e8e1d686f6fb3f4260aa25ccc79131e0b2211a8e639b67d2440142d292aadabf90c801a01235a4f6d8c2882d25203b3a9f4a5625d100a1daaf7579601afdff01b459478c379f506265cabb80d0968e07d021cd6abbc431c030ae7d18f4e6e610c6c25e09ba152d3aa7f3799b9f31137ce83cfae31eff97b4e5b9d936c0ff62348288ffbb5abf8f2d6b5fdadafde034e4fae603f0d37025fd2df3bdbec15546bdd671739e53fe1b3953b086208bd5f0864be41fafdb52cdb37e6c300c4d8e63aff48b06f097723a503e620c0da195e78bfc4e58d791006b583a0a89152c2f33b16c7bd36b7ea8b7d618a5c32d69ebd3bded2e602c2a29eac16ed5284cf551866db9cb12b59c7ef647391a90ab7205e45a5a8cfc927a76a36aa95830385cd4b5137395e3e563531cb485ca6ad85d3048f86a803ed5c12debe1a124f31eeea2ae1aa2466dedcfc6f141ce0983c30f049138817c2458b28f06f66f04e5c74f2327b9163e623a8affd3f0fa701ea906dcb6676dcc17075269349eb70010e5f40dee7a5ced0a53cd140900382c354902c19238b0827b3ad618f0940b618521466668ba133e22eec64b424e8db3d93b1dc668ddddbf88bc42fef686eaad082794379e7768ec4ce486224e3c312310b2950c7299b8deb96fd1217d37d74fd6a26c888161ef0eee453a81a5ffc19cc1b4a6760dac66406e66dfe5dd076be977c554c0dddb4184d6ee750bbfb33671b76626518009acb4a5da4d8ae8d496fba57c66ddcfccd193596d4782be4c416934667e1c5a742d5dee7a41c021da909cf7f665592a1619b23bea21db0bf5fa01a3cceb5d2f57fc12d899b0f1b32883c23250b42a2d8a1a57f31b53f1d1779084c1bd588103d9ea20bcc5c5f2c228024d42b143d19c572f6f7c294cf7501d513f2d36063f488dc4a302eb546efeb885b18c5046f1d35692081ea2ca368b565eb6f265c7c46e38ebe098eeb3080b72fd0accde11f3e73fa03bc932d170399e7a6448a768b7b476a453cf6bd42dd723f60a69d1b207410522b88a141f604ed887b21ac482917d8c57f30fc1c5507ed3f38f5b8319fd23d41de9eeb264fb1f30b7e21a03ab454729bf6134a23142bf2e2f667df4f489f17484b3b54d5c77eb2736a30957024e59cc0b2a6aea6db2eae856da7e5085a1cdc6fff0b95d22f9a64a7063ba61d24907074479ee56041cac6acb225ea92e71bad9131ec86508b738fc43146da456a884880706fa7d91f75c8acfc0cd1e821d94876fce062028d2b747e26d259fe19cd9f6e75e454d4738e90132444e0be8b449ead42290c2a245b0ccb209749b54e82a54d2b650d131d12cfa5b348e3188ff8d74775e1b23de86f905e30ba3d3aad86b450bb7431bac160ef0ae8b5a3ca547220153beb79c7fed3e1f403b537ca3543001979de3603d0ff45a4a1ce3513afb5b90ba7ad1c60d17af0c87ccca695972cb0183a6a631b15b7209ddc019be4b39ccb0060c45cad47f8ef051302913016723ba434e13966ec9bfb2671d4565df83b048caf96f957c13b2ac85188f24c6835e24075e679942f0010233f8391f22b014589c1b586361b3cfd2ec7288850abe8b679dc8f915ffe19bcfe7e880c4822675561b607441f04043ade404273b2aec91c1d55e4847e05aad47d4ea539af90ba2e3b913386718532ee302e6113969180c460dacbc41c4657e348ef46a38b5826244bcd5d1a4c30348cd8f1cf1e6c29cc967a52423d11690aefb4335ccf7a5373f8ab477e08012fc23603fcbc1607bfdd4e6b4669a0bfb6e95b3d0cc8baa6e76aad209b640ada6b86653113c82ab25a9343771436984de089a9c1754aaec6d30b27b4d4ce977a1faf9ec6e16677265ffb07113d56829e8aba374fabb11db1a427c4662dd6232f6bd92476471d1c8075d10083bdabb34f5faf7a63bd0ab9911fa577c1de600cc846230c8f44dfbd46479d9c3c9c0cd99a610e1ef495a677d1f0c23101b4306459ddb18c262f13f9312dbe27070865ad1f4eb289a786254acece8a381b29ebb6b4186952dbb9f4c35d40012e76da7794c73b4bdea05619f4fbb13e12f54d611b508fd51b158fca8c0d14a1a794bb74363ac2f8e188e4c3b740457143925ab445cb3cde8815868c5ae848f3e16e8f9c527b8fc0d65b47dd7aa14b5e8a91945394c41ac3b57cd5567e08298cb8d985a97728ec3b2c1979f7e1b9aa31dab959c67381bc70e8d97bb2845b4c885be328068859db0eb9867b8531cb99801142fcb61d81716cae3b05e27b52f5a4413e4564d9f42fb07ec6457d31cc352edca831d90b84c95078f72f639f51bed0beb12b417c227f67c0e890dfc371e2129dfc01f8b92192501332f727d78e432b6765e2ed9751f4d8d7fefa8671f26d324bd79e01bc6f5b787bda2f7872b203b1cbad02a280e6b5298d915f4be6ee5e868aef2c61aeaf04397aa5c9de699fe367b8ef85dec01a694cd39a9d9c12ae7469035d9bff943b3efcd621cb58756609628e9976df334a76115cd7bbbf3ceba2762f73a2160dd7ad7df004bd5b730c2210be655c596fda1cfe0ba5c278e1d72e4dd88536a0f5a75d78131ee897630a8641ac2dfb96d8dc8bac251b354a2dd8cf4434a3613107b81c1211b642918cf0a9e7eb57ac9c76d46acdaabb04c08962bda2c5dca2503e457a94e1918e70308b6079a6f1deca26ec0d7211ed41dd29735ce584927fc3bc9bd21d2da24e0706236ce923db52839744dbcaa0bfe315d87cb60892953c061d022b194f1f1c1706e7c36eb5088252501b1ed6dc38e4e90a91587a72a90e0e6ac709c1b8d1711d912d8cfbc327fc05fb10bd232e0f4c41af596115696c20e9389dcbf67203ae97ce406d9c710bc2491fe2eec8a35d47152644f0417db7842d944cb4c8ed16cb7e1d7decd1ed0aeb36de49238c1e471db157244a35060bc778a9feaf37139b6f4f85f679d5e293f96cdab89f3e01f8e1a0d7a97ccad406e2406114bb14c2aba7903375ccb0b3c43fb4ad9778f26d5993bd33d84e347980aa4061919720497f1183c8b3ef757b4b851a782b80a7ad5a886f2adbbd3b32ffb8524be35df54b8c9fc63976fcb8c9ac99071c98aa8ca4a92780d39fa37d2c1f91700509b08a05a6a15f68cd20f747d7f915fa4cb3a9df949d4de43c159f17e7e28ed6196c97cd0b9b843bc861172b9deb8b31e92ecaa949b1358e73402af8c41fb5278e61d155253623d0f384c97b4b5ab73b2c76a3f46d8920893b72b973100d7eb97a5b69a3d3d6b9c82af5bbef805a05144976415a4c61b26d7b0377c1196b99e5e3839d31e82586503b8c03248bea8793134a83d2b13781fdf95f7d337e928da819b47660cc505606e10b0a634ae6158bd82517eb7d6be47cd5ecfb2455db4d8c5a1569f72bb506ca55e80d99d5d9191a7d8fa3c50cf7f25af700c7fbb1eb7bc1d5a394c596f2eb7ab01c69682e96902fd790821081d7cc9e08ba305b2adda1bf39aabb42e73bb4707d878fd5d8bb07456fd65a450a662bc12570e6d3e928385b75e0943a6d04ced844b6bb91f6b1097be48b7d840fe9c5f797aee5a9ab61a82703075b6cf851b858fb5d63054b48b7f903580290393a0f9f86fb175eb75177ba6645c6c3108490074caa27c1f6635d9ad85037a188bde04b21a46865fe8ec4cc1d0b2f13cc69f2e0fa76c79ebd1f66aaa306b1ad7e29d5dfb250f570447522255e09bd87804805c16b96d188f5c7b27096e158d4a8e2779af62289c2e8787a623fa0132eb6fc886169a7d9050f8bb996afe734b014dc0c2b158aee18604e8318cab5a23e345b7ce8d4cde35af41ec5336114a58da636c995f67af0704b6ef8a4eaeb522eb8120a416ab9", &(0x7f0000000180)=""/155, &(0x7f0000000280)="382c1815d6a56e8cbfb1000f80181c98dd901fd9568d2fdeb19beb315904a063dc1c8eefc3dd2ea9967fe8bb4948fdedd8", &(0x7f00000002c0)="9243b27e40d18fac0594782557fc79898296bb4dc1aa8d5ea83298a2ddc07d43ef58cc4cc36d0f255a615e68cc1cecc10fa4843977066f1e433d0cf8a8ac38d0065189bfaefae8b578c501f86620246f8bbe7246f40b755bd7e4a2f9c8647ccb41cafcb04f9b02fe2a10a0d140332409e29674812ccbff", 0x0, r3}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x26e1, 0x0) 01:06:43 executing program 5: setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket(0x2, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x3ef) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000000)=ANY=[], 0x3ef) 01:06:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000800)="df59c71a4dc8a144bb60494f431876d92a7219a486eaa08b342c99e060f15924e7c7437b1504e40163a85ad6c1cd58aa407275271f3098ec7bca28777cc80e86ca90871984158c653a679bda65d2057848a357b594d918591e7c6b4b5fd9c982f278feb8de7986b50894bb699840a4776d53887a7deb11b2dc7e49b043b2ab6af5b63ae244ec4edd582ea517cb02944279b40ada731d276bac63a12276d1802b62f628189c0c02bc613ee6cedd05d6a0ea11663201d9eecaba7da4459946c5cf9f9e1ec9cba937f9c242002d25475eaddb28", 0xd2}, {&(0x7f0000001140)="d5d19128ddb154459fefe2cff40b781833f509ba5e025dbeb8135783510bc5552fbc3014712d54f77dcc53256b43330e749f0aeb7660f75e1d6c282601887c90357ae72e216bce9ec5e9630c0be77ec5049515", 0x53}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000980)="8589e4e6eb320624286cbe509c900cf995cc86565c4422bd8c8f105f8a7e7bc412c5e8d681957b10c9a3b9b19a35c8808e9553fa3317d1b9f32ebbf8938afb5b1c7d3fcc7f74221d96c336e5616ad33bb9702724dbcff234e9b68da26e89690626b04ebaa5e2d296e9f6daf15f4c981d5374e23d8f0921c454c72bb121031fc4c47fd8301d89d8dba76e30472b1fe4f880acf848cd06ee870977e88b54ebab755b897328fc8e99b15e574af9da", 0xad}, {&(0x7f0000000a40)="916654db0036d66efb0f411e5df5777c3a1313387832572759885b75006fb94fc5eef8f04ff498240aaa3a39adc478b31a8bce18625e76e1d3d6", 0x3a}, {&(0x7f0000000a80)="d0a6d4798ec119", 0x7}, {&(0x7f00000027c0)="898fa0aa4d505a241f89a6b7d182e1d903364bce3ecb3e4815574416e2387c25f7eba783e51cd185060f071927008eeee0d0f847f35cb0515d3638dfd6a4a206d8b73f771a927a4403ab671d766feba38b3ac3a1ae62a9721beeb58e0907cbd7f1e3b65f0977298cdfb3c00dd591ffd724405dda625a7c3f96218e3904c5b79fe772e273f35b866fe2283dab81099a503e16da38001767966cb5ed4899777da5f6fe1b7e101934482914892e5f6e34c05107c61bcd15e31a7c81115fc95a5cdaa7e2972eea0786f8b14e613b119633825c76f4f581cd956fd6fcd994cbd19e5856afeb1f846d647502edbf39134c14a164454d8a45b6e188565579c100de3aee81dc02d94bb4891b5dcb0d884ba0768f2965ba40eba0f93ff459a522ec2a1e73998638794cb3916818c486a170c1b3b957c4dea7794d6a67d17f7ea434fdf085485ce6809c6e2ccc1fd9013c395954fbf1cec1825851639ae1754dc970c591c9fdcaba8218704056f7a4d39c7a3b0ef0005ea106fc99832321ab3a166919b4bc63b450bd64e1d641515c0a64ba9a41c8698b2b930e292407fd787c38df99db53446cd1d3cc8a12c2b2e9f5b9c80e9a9b3cba3400e07bec70029a3bae092e6168a907946989577fea412cd0cc04ab2df2c39ebc898d379fa34b25319eca1ab8f7d624a2a51685ed593356d50ab154aa7affc5df334aa4525df6afe60707193b9babdb2dd9de316156e4dfc9a2be8e77eb4dd826fbb34fc2c3acc320e9888176e48b39a7d89de017757a076ddd9a1e8145cc21e2ad79bb6ce02e07bd77f06459d7c301fe17553ec51e815d4e97069274d2591e6a46876c150146ad9a1b8c84eade8b92780ed2b2768323872d1e4c529e95004899f94e57b855ad3cbbb6d4f66106dba7e28722cd1f8a3229c56117f708958c5bfc4419153234778a3ce1085da11980a8024626886e27b36596f2a8cb3c678e070e7f3575fd2eb16778fec194e68b7ef21a3e780907cc23c2a81040080685a806e1f7c40596160bcf65d591bc4b1464a511b0e414a682cc89d1b3a8646bf70eb15da3bd7d1b590f219f6e812ffaa0791b43f04c7eec7c7180dd46763bd98ca372f7fbeec24bded8f53f93fd1a691ecee5061103394773120eff317fbb03d25b7f2e28a6334fee72539c38af3976d8f5b841661ade316fceee41d0c30406be1c118b44cd36c71b73fb1e4e754181f5ae5bf7b6fb118772cc5436e6bb0314144346d264afcbf26bdcc9aa19486bc5371b38c2e5addfbfd11a34de2b7787b0b8cab94f5bd58c34f00ab0cdfa5f077c50f273dc98b346e2520d79c7753a5d5992e8412b5b9789234f9d002e07b739943a32488a27f075ccf5d38504f23acf84e6ea20f916d7fc2c28775dd91129f4c56a3af9c446d89a47e8721633206fd284b4a090391fda091ba4fb48c1b04d84b7af63df84292dcf40ce4304da677d1cca365bae1b246b39eeef16ac2ee675d8a4839338db81526eac8c0ba8c2443f2a0d2dbd8a6e9448a3dc929944acc94c38b3d9f6fd2444ae938d8345475e4e8d59b4769dd5eb8b0b6c3b281eb4f648e9fea0b19949ea6a752f8dabfb3d9eddddec2ccecdd457ab05bdd43435ed3dbf6731e89f4dea1e7044c7416c734aa64438cab09159fde53ba119bfeed8d7accf90d15e73b9c8d1a4999aaab64e5847d48cd4d9d56f5cba6305c8482800a79453f9253ce5256050fd0e0e0d47d7ca1e7b5956ce9583cb42d87ea8cb7a318e3cd8e99bd6608ecca81ce3f7865e523dbff009328a52c6363ede5b0bcfbe73aef73c7e11ec045da2d65fa84830cf0a923a697b8aeb45b6725fb99e2bfef236bb039cfc63a8492975ec942d730512b2bebd6fef7c5d4d8a752f9f87e884b85b707d53008b3f72d2ce3a53a9ee26a91b6bf8542db72fc18a53a0e1c1caed9ca4e4b6df7d88fa2d91e1c5380af8e8ada8fbfb6d83c38b43239144d92cc10d66a13bd19bf7460bfab3d4e55be44c31e743351ebd7b6b04431e7b13c5a393b5b3c00f82557eaea2a6499a64001ad2888ddc19a770d4968f7a85450d9fdb60b61eb26ca6bd150dca88316713b5748d3a157d368d50570d3a7f2bf7c4ffc90079e91081e467e61e8eeacd45b1efb83e79e6af10bab35f9954a01add287da918e7900f1f371ff886837cc5a2cef1243d5ddc383a243299d8a3d44688fe6ee9cb98cdcf3899f2a310c51d8e40994f2f6b20d1783aae3d6c804a9269238cc490599c7d708bd0e763b4e697474ebb073aced1f7cf8f91ed268540df020cee155cc59321f1dd1b45d8e56793a10f7dceb1029830a17f4c33fb48bf55dbad053172f9e7ff5ad7e2714528461e7bfe129747d84e180f637f10c60573c88522692efec1dfca2beffe6bf52e45fb4143c0c2593017fbfa1e5e10ae3224407b3526706d56faa742d361916f754729c46faf82ce690cb25c504a83a942dc985d8912197249c27002baf6f5823fad886a4a6709c70a6cec34b6c51c3197afe7e8b3815209772d52bd5be04a85bd0d0e69eb82c21754cf36e857f3c4f3d25cf2d97f05d3b96c665e84cd8e1d58d5bdc93597860c7cf6126f98eeb4f24872a648e9d11918f8fbe5525fb41297d942e0d85f124070bb16b8eeba307cda19ee06acce852c1612098d44a6c6cb10fe13899d82d96c965d8c949db32c4797cfc42b1e0500c91cf9aff4ceeca41b4997a492e9cbc74133a4770b99be1746d2eda275d093ab9e9980cc91a9898cb77f9b05774697c075121d256afb3523432c2325f0d04fe124818c47ccbbe0b1fedb99a85fb522416e31685603a3a23e40e555fab96bba0949db44dccfaded2dec41cab53d906c43e5f665a33005a5207871618682cb037e100b9d7cbd2cfbb60c44cbd43df9824db49b2592050a6b65ccb4e014389253768a5d22cd7382a28f1409d2be5a8e5aec357a61f381e395121de52b9355e8c1fa964f0df5e022f07c559a10d65d748e9ac1d15771e194621a6871312de2fbb5878fe989a3a7c70df24f74619c6acc4e9c76515470e6c57fcaf965e8a2e7d02680485562f65a63d64d1feba894e2ba5f9f50f98719816d089ae287c9e136fc0c578bd18d40f47c258fffaa86d33abc1f4fb2d86851c360391b7ade05dbe47a5385d5d2d8b0465cd951691c128ab891dfccb0d68424786e3a2de4fa2458fe3b622873e02a4f565d7a85af850d9c19356acda090b492f5de106c3eb2463e7ec2b2d671e4b8456e5cf4a38c6ea0a782c30ec340693bb478b84b59c7bb76ef14b92fa9bd21f2203948ddcdf73c2a283dfc0202f959c72f7fcfd2ec13be4bae56b8186c05a7c32363839e8b089f25d91bc03329035d5a79e214d9b6998732c0be46270fedcb4984c49ff04364ed2f3f3b4be63749a73e58d98f1f01b64346be8f444b547030bdbace6b920ee8523ba66b1c67ac8cc54c7465f2528a3f685d4fddcb8b78b848f46c6ce0211a32bccaaab9960e4dc747e8452fafaca16a18988d8008414b66c5e2f5956927052c78f18e796654bf1b325f6c4efa8920e939e13da8be92a9e8aa8679f3641356767c9eb641c902a45b185836e91475c1579c28836cace00867205c463c7e6bc8ecd9b7be85158228e98e092240a48038d0af939077d1a53345cdb1086f586949356063d6a537fa9dda2678f5c3dc861db34c37e393f8054bde3d35", 0xa35}], 0x7}, 0x0) 01:06:44 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100)}], 0x1, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 1068.287173][ T29] audit: type=1400 audit(1599959204.114:21): avc: denied { create } for pid=26661 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 01:06:44 executing program 4: r0 = socket(0x2, 0x10000001, 0x0) r1 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x1203, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES64=r0], 0x3ef) sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="06", 0x1}, {&(0x7f0000000480)="b2af96587ff14dd228a1897be6288bb50c8b04de205a134668bf9dfaa652e84d89e7c5fd4c940b56ae402258ed960f777564e75e1f8acc434fa6f0df64e4558cf3024f534d4bb52c56223db77fb42dc6a074d1e6b68acf9fe592d028e44e72bd8cae5b4d7c6417f369ba992728303417ead754e293efc1ec6db3fe9a9e40bde21a697954c9d7231b69f5cd3b042a70e900d2e3f1740bd122111f1281f9c3ed76bb5e7c20dbdfaac27bb2570bc3983eb00998d42c0fd87adadbe56536faa5cf1ca3f4ac1e30759261c4f48c6dc8b2da01f403fead1990705508b769f20596da3f8cdefed43b3da93776077ceaae3a5afca7502753bb7a88883889093eb314910c9a833893bfedcdb981e6eadc3592ac08034ff34be8656d34c5c9993b7b265ed789f1b32d73c9dd005f9612bd7b1f8f6705cdda63295f880f234562ef91ea233d89c4b31ad8340f63f533f8dd151d572751eaded2779ab3ba38f0face50595b537d2ac6eb0cf2775c806bd8e09e69662cd34844b8e404108acd3a8de112a4c0aeec9c2cc5f21612b4adea81eab43b1bf73a1fe270cc6da23e41fce17eb4b342cc9f9202c9abe43a08ef14d261b80d013499214377e61e25c59537213f1a44306f215f592fee76feb9ee14aa52e42ef4c7fffed10788f3f410848b81f435a1ad8dec5b4df0e3eab5e6cd61c99e9b0c1932f8d64b990fef9cacbf8a6686fc933808ed27268c12eb2fa7686620591d0412d687e1c97109307c82a38bbf3e3edd90f33230cc3615bb089dd4257642b6323859179d824dffe99a5bf92826eb8faf42f411dc98f7b35f47100c4ba58123961b654c5c3aeb2d6f4f0a5211c325b9d8c509d6e7435dc3c46cdb5cc26be1f6dc0f67df8208e7451f38e01b1d667e3386b7f0139946904cef5abfcbf0927a77221b3613d4fb4c4fbf5a615a9dc9e5cf0ac70ff98a732fbb8299f9617fb36032e179e3417178b8537b83209abf3db7af2bca8de3f46fbfdcfe118e802f5f496f4e5c1a467541ed1eaf636b6cedae4992a1110e3079539adeac0f5e0651c6861ea58aae60d04cc1fbb40dc606dfe3c3628983d49074f72778bab2175e17952a1f3b4342a0c15435648dc50b8cce9d1bffed20b5ca34fffae79c91417630f888f019de84f731dde6c6851011553d177cd89072c5371672bd8ba82010637612d526eaabea44392f54713ce7809a15895996b4a2b5e884f0fad9fb28d1f03deef9b866e1c859ca332bc331f932a4f5fde70755b4985992af7bb0231f98762ddbe29ec2edbcbeedfc70efd4ff7d042ee023649b5fa4fbc6efd4815f224f95527adf02263119fad75cebc96f3dd2e95c4d04ba8e35f60d085c85abcbd7038c729fdb2116579ed627ad53c3ec89dec80d1071ed30fd48b7733a340430631055edd86284ae994c2d12e91f0881eb515be8cf7b39607229406299f7a536bdfcdbd9419cd063bd1df6d3ebde459e7f474f8057af6f4faa64a1faf143ab6246b41f3620824af3b520b49b3b88eedcad16cdf8242e299ea6cadf4421c0d07b6cdd721edcb289f2c26a9c83af81ad2755e09bcafc0f685ff299126ac5423fa0e34fe6bb6fa75da88a2a97b2f6fa2a557ecc5cb07b2cd6485914f9250048e6cbcfcd581a38b31a40aecc35dbe0ae654b7f19c19d196a91e1b6ff9856e5b0cf37e50bc9aaaf03ba7f01ab0135b11d43d1697461587834b8c83008003d3520b0354a9994553d44e1caf6147815efa2a5e4abf221f3f1d261d8076b381db7f9431eac54cf5b8787940967101db3bf8af35e92bdae1fd3a86d4cbd93d6a042a5a2a27b4cd00e49025db344b49ab91bec72295758bb1891f1c79bf1a0126593c7dd572d0076afc9c7fecb6af1dae3e70ff20eceb2a2ce7fb2235b01e59907361a34fe3bb468947f43d4b44c079b2c061d75dd4273bd56e13e3b0cc653de94ab283c603fb4f830f41c4aaba1935a66a02acf04ab6f1e84d66e957e5d555f96acdd96bc97f4fd55386b45b5cd5145d60bc6cef7dd24", 0x598}], 0x2}, 0x0) dup2(r0, r1) 01:06:44 executing program 5: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x3ef) 01:06:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000005600)=""/102380, 0x18fec}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa378b25db4cb904e473730e55cff26d1b0e001d00090000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) [ 1069.735750][T26682] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1069.744709][T26682] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1069.754422][T26681] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1070.010995][T26682] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1070.019736][T26682] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1070.029915][T26681] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1070.283915][ T29] audit: type=1800 audit(1599959206.114:22): pid=26654 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=16370 res=0 01:06:46 executing program 1: r0 = socket(0x2, 0x10000001, 0x0) r1 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x1203, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES64=r0], 0x3ef) sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="06", 0x1}], 0x1}, 0x0) dup2(r0, r1) 01:06:46 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100)}], 0x1, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b0b, &(0x7f0000000000)='wlan1\x00\x1f\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9\xff\x7f\x00\x00\x00\x00\x00\x00\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b8\x84c\xf2\xc2\fpp.{\xb2\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2\x9d\xe9\x00\x00\x00)-v\x91WQ\xfd\xdcSE;\x9d\xc3\xc1LO\xf1\xf7\xbe\xdc\xd0Y\a\xdf\x11\r\x9a\xfe#N\a\xc6\xf3I\x89tZU#Ifx\xc3\xeb\xbe\xb6efpM\xc8\xaa\x88BA\n\xd1\x16\x81\x96ZI\xb2\xb5\xf2\xe6\xf5\x00\x92\r\xf6\x8d\x95\x9db\xe2\xc4\xad\xcb>\x890x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x18e998e97b7) 01:06:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x58, 0x2, {{0x1, [], 0xfc}}}}]}, 0x88}}, 0x0) 01:06:57 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:57 executing program 4: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x218}, 0x1c) socket(0x11, 0x800000003, 0x0) [ 1082.246758][T26875] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1082.354303][T26875] device bond1 entered promiscuous mode [ 1082.361145][T26875] 8021q: adding VLAN 0 to HW filter on device bond1 01:06:58 executing program 5: setitimer(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x40) 01:06:58 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="ea"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind(r0, &(0x7f0000000100)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x20000009}, {&(0x7f00000003c0)="8454fccf3ae2d8dbe8f339b6fab583", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="8a4beada52d630602894", 0x1000e}], 0x1}}], 0x2, 0x8000000) [ 1082.612604][T26914] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1082.622887][T26914] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1083.195609][T26914] bridge0: port 92(veth185) entered blocking state [ 1083.205288][T26914] bridge0: port 92(veth185) entered disabled state [ 1083.300672][T26931] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 01:06:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 01:06:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1083.446304][T26914] device veth185 entered promiscuous mode [ 1083.454445][T26878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 01:06:59 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="ea"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) bind(r0, &(0x7f0000000100)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x9}, {&(0x7f00000003c0)="8454fccf3ae2d8dbe8f339b6fab583", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="8a4beada52d630602894", 0x10018}], 0x1}}], 0x2, 0x8000000) 01:06:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002e80)=[{0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000002880)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) dup2(r1, r0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 01:06:59 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:06:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(&(0x7f0000000100)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000240)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f00000000c0)=0x8) pipe2(&(0x7f00000001c0), 0x800) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}, 0x41800, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:06:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="640f21f3f20f2b2b26d9784a0f01c3d93926670fa80f3266b83d0000000f23280f21f86635000000040f23f826df1dbaa10066b8ef8dc56d66ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x88003}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="f801000000000000", @ANYRES64=0x0, @ANYBLOB="030000000000000000000000000000000600000000000000030000000000000001000000400000000000000000000000000000a00000000005000000000000000000000000000000000040000000000007000000000000000004000000000000050000000040000002000000", @ANYRES32=0xee00, @ANYRES32=r6, @ANYBLOB="000000007f000000000000000500000000000000000000000000000009000000000000002f6465762f6b766d000000000000000003000000000000000000000000000000ffffffffffffffff008000000000000008000000b45d0000000000000000000000000000000000000000000001000000070000000000000005000000000000000700000000000000ffffffff060000000400000000c0000009000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0080000007000000000000000500000000000000018000000000000000000000000000000500000000000000000000000000000003000000000000000400000000000000663bcc57010400000600000000000000080000000000000000000000000000007a010000000000000c11ffffffffffff00000000000000000200000009000000040000000010000003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0008000002000000000000000100000000000000010000000000000009000000000100002f6465762f6b766d0000000000000000ef8f29b9f2f2cc9572eec9f49c9fd7584c24ac7750e405f17bd5076c44d30a1988d529f97f2c8ffc8961ea5d7d2c1750d6746ffda513c98ecf5c8142b8dc1ebda1c45e840534a66abed8d6a859b4a04abd30bf5ab44d08b536e3b03bb62a03e5cd1d89192c91c85fa13ceca8517d75bb8a488ba4b8ef48ebd4d2cb6be8243759f7d2ea077eada654db223fc42de09c31fb48ec6296cb72d4f072142cee3df75ddd214cf49f8a35b341ba7f6dcac6e5ac2013e45ca0eca75ca0670af8be870c9efefd77f27ab64ae63d412ca05173f89ef9b96a4aa26a9774ac6cd19c6216bb"], 0x1f8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000c00004cb, 0x0, 0x0, 0x0, 0xb5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:06:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:06:59 executing program 4: r0 = inotify_init1(0x0) semctl$GETVAL(0xffffffffffffffff, 0x1, 0xc, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) setresuid(0x0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_LOCAL={0x8}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x14c, 0x0, 0x100, 0x0, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040816}, 0x200088a1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x47, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0xfffffffe}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_getaffinity(r2, 0x8, &(0x7f0000000180)) fstat(0xffffffffffffffff, 0x0) [ 1084.170283][T26946] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1084.180484][T26946] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1084.765058][T26946] bridge0: port 93(veth187) entered blocking state [ 1084.774914][T26946] bridge0: port 93(veth187) entered disabled state [ 1084.875467][T26946] device veth187 entered promiscuous mode 01:07:00 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:00 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x2802) socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x448d0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x10008002) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x4) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)) write(r2, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) splice(r2, 0x0, r1, 0x0, 0x8ec0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 01:07:01 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:01 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002e80)=[{0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000002880)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}], 0x1, 0x0) [ 1085.620652][T26987] sg_read: process 1289 (syz-executor.1) called from kernel context, this is not allowed. [ 1085.651254][T26989] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1085.661963][T26989] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1085.702933][T26991] 9pnet_virtio: no channels available for device 127.0.0.1 01:07:01 executing program 5: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) [ 1086.303188][T26989] bridge0: port 94(veth189) entered blocking state [ 1086.312169][T26989] bridge0: port 94(veth189) entered disabled state [ 1086.442797][T26989] device veth189 entered promiscuous mode 01:07:03 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1087.202623][ T8815] tipc: TX() has been purged, node left! 01:07:03 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x18e998e97b7) 01:07:03 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:04 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:04 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:04 executing program 4: syslog(0xa, 0x0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b70200000b400000bfa300000000000024020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000ffffffffad640500000000007502faff07cd02020404000001007d60b7030000001000006a0a00fe000000008500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1aa3750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab487c37a7f4182f32333b08c6e497640000000aea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de35949a7a48ce18799ee53de177a81ea67a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d34a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7caffff0000141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8f32b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e756598442406333c890923a797e00b75481739952fe87fde27ce01893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45577c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8e1b49b0400e4f6f767ee30ea3aad2c6d6b8c97c00eaa00ff9bc46e1cfecbdc0e451ac53e8f76c8b556306b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404a0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b30873016427aab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc7eafb613313b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c9eb0dcca5303eed6689ea91e1c1785f61368dde47e6672e93a314a5f60e7b68c2242bf0caeff11f6090f4fb311afd7f8b48f3f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f98126324ea02baea5808c4d69e5749901b09e4902a6f5addc0103756b894418e4591c624a9b2ccabbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b15f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b775152786118384eebd5fc19928ceb713ff09e179c308fbe9bc54374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471647f8bc03d11811ac6eec9a3ecd9e3c325fcabbab3d129c0cced3ce11dafa387a8077db8a2230d201e82c6dae4a57bc8dd42759147f1d854bae92b2eebd5e1626cab98499328fb024a240199993433c5321e20427a32df7047d63010dfc6a461517ad48ff64042e84c85c899fd1d8fc0e78c1aaa152d567f9c3e2b6772d167fed1b605965a5c2332d094a461a990000000000000000000000000000000000000000000000000000000000000000000000000000000000b385c644a4a170e6dc9e9e546bfa049d025b319abd87fd84482b43db5d6c2cb6a204d45f88dd4140c8edb598a37d6b9aac001beed399c56633b01813fc5cd7d048469a966bbfb300fd772cbadf0cf26899bfd15e7d9408026a92f13f11d1c9832259b2f97227f8420806c1f387b1b5a2ede34a3bb96253717a177ac0fa7ff31729857f9e6fe9f19e481a3f77ceadd02f4968aac9ea5e29663f42456e080952636515c758f5047b2148944133a492ef20a1778088c42094903d6ece2497b99fc745c4305b60a2a7cf77074a62a2d957ae2e47ff1ea8a059f2d03bf9c3e8d2b16ab409de762522f6008de48bb70b698c5c9867437ac3127fad4bd699acaad78a5f66c7fc7d46e048082a0af6473ed26b032a1c0ea10e985703b292c7336112b1f35c3b069363869dce725d8da75dc4c76d1ee113968beeaf30c64c4600a0bc3d4945d4b918865bbf52f732a500689cbd9a84d07846417796f2a85e7a41d27d64b10f8e970469cf495b4ae9f3048351b550c59a634b47981420181ea4da18b9d318a5bd1ce660b28ba8f3c1a889"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x63}], 0x7, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x41) 01:07:04 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1088.976040][T27033] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1088.988919][T27033] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:04 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:04 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1089.545897][T27033] bridge0: port 95(veth191) entered blocking state [ 1089.555931][T27033] bridge0: port 95(veth191) entered disabled state 01:07:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x18e998e97b7) 01:07:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:05 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 01:07:05 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) 01:07:06 executing program 5: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) dup3(r1, r0, 0x0) [ 1090.211986][T27033] device veth191 entered promiscuous mode 01:07:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x45200, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="640f21f3f20f2b2b26d9784a0f01c3d93926670fa80f3266b83d0000000f23280f21f86635000000040f23f826df1dbaa10066b8ef8dc56d66ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x88003}) setfsgid(0x0) socket$netlink(0x10, 0x3, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000007f000000000000000500000000000000000000000000000009000000000000002f6465762f6b766d000000000000000003000000000000000000000000000000ffffffffffffffff008000000000000008000000b45d0000000000000000000000000000000000000000000001000000070000000000000005000000000000000700000000000000ffffffff060000000400000000c000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x1f8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:07:06 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:06 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 01:07:07 executing program 5: clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x4000000, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/2958], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000280)={0x0, 0x65}) 01:07:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1091.306583][T27071] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1091.318296][T27071] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:07 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 1091.966727][T27071] bridge0: port 96(veth193) entered blocking state [ 1091.976607][T27071] bridge0: port 96(veth193) entered disabled state [ 1092.033102][T27071] device veth193 entered promiscuous mode 01:07:07 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) 01:07:08 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:08 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) 01:07:08 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:08 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) [ 1096.340722][ T8815] tipc: TX() has been purged, node left! [ 1096.378458][ T8815] tipc: TX() has been purged, node left! [ 1096.432095][ T8815] tipc: TX() has been purged, node left! [ 1096.463541][ T8815] tipc: TX() has been purged, node left! [ 1096.510071][ T8815] tipc: TX() has been purged, node left! [ 1096.572600][ T8815] tipc: TX() has been purged, node left! [ 1096.623269][ T8815] tipc: TX() has been purged, node left! [ 1096.668901][ T8815] tipc: TX() has been purged, node left! [ 1096.736095][ T8815] tipc: TX() has been purged, node left! [ 1096.780241][ T8815] tipc: TX() has been purged, node left! [ 1096.860329][ T8815] tipc: TX() has been purged, node left! [ 1096.902553][ T8815] tipc: TX() has been purged, node left! [ 1096.943173][ T8815] tipc: TX() has been purged, node left! [ 1097.018062][ T8815] tipc: TX() has been purged, node left! [ 1097.034799][ T8815] tipc: TX() has been purged, node left! [ 1097.112865][ T8815] tipc: TX() has been purged, node left! [ 1097.155775][ T8815] tipc: TX() has been purged, node left! [ 1097.204793][ T8815] tipc: TX() has been purged, node left! [ 1097.287760][ T8815] tipc: TX() has been purged, node left! [ 1097.339654][ T8815] tipc: TX() has been purged, node left! [ 1097.418992][ T8815] tipc: TX() has been purged, node left! [ 1097.458908][ T8815] tipc: TX() has been purged, node left! [ 1097.500138][ T8815] tipc: TX() has been purged, node left! [ 1097.582330][ T8815] tipc: TX() has been purged, node left! [ 1097.604949][ T8815] tipc: TX() has been purged, node left! [ 1097.702185][ T8815] tipc: TX() has been purged, node left! [ 1097.731533][ T8815] tipc: TX() has been purged, node left! [ 1097.781442][ T8815] tipc: TX() has been purged, node left! [ 1097.860052][ T8815] tipc: TX() has been purged, node left! [ 1097.896424][ T8815] tipc: TX() has been purged, node left! [ 1097.946098][ T8815] tipc: TX() has been purged, node left! [ 1097.987344][ T8815] tipc: TX() has been purged, node left! [ 1098.045336][ T8815] tipc: TX() has been purged, node left! [ 1098.061240][ T8815] tipc: TX() has been purged, node left! [ 1098.098597][ T8815] tipc: TX() has been purged, node left! [ 1098.133809][ T8815] tipc: TX() has been purged, node left! [ 1098.143108][ T8815] tipc: TX() has been purged, node left! [ 1098.169445][ T8815] tipc: TX() has been purged, node left! [ 1098.207234][ T8815] tipc: TX() has been purged, node left! [ 1098.243232][ T8815] tipc: TX() has been purged, node left! [ 1098.265147][ T8815] tipc: TX() has been purged, node left! 01:07:15 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 1099.454188][T27134] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1099.465276][T27134] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1100.018192][T27134] bridge0: port 97(veth195) entered blocking state [ 1100.027426][T27134] bridge0: port 97(veth195) entered disabled state [ 1100.140589][T27134] device veth195 entered promiscuous mode [ 1103.457401][T27141] IPVS: ftp: loaded support on port[0] = 21 [ 1104.964093][ T3222] Bluetooth: hci4: command 0x0409 tx timeout [ 1105.492728][T27141] chnl_net:caif_netlink_parms(): no params data found [ 1105.774604][T27141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.782044][T27141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.792472][T27141] device bridge_slave_0 entered promiscuous mode [ 1105.804039][T27141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.811452][T27141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.821989][T27141] device bridge_slave_1 entered promiscuous mode [ 1105.884282][ T8815] device hsr_slave_0 left promiscuous mode [ 1105.892975][ T8815] device hsr_slave_1 left promiscuous mode [ 1105.906674][ T8815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.914241][ T8815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.925650][ T8815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.934037][ T8815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.949997][ T8815] device bridge_slave_0 left promiscuous mode [ 1105.956561][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.978669][ T8815] device veth5 left promiscuous mode [ 1105.984472][ T8815] device veth1_macvtap left promiscuous mode [ 1105.990883][ T8815] device veth0_macvtap left promiscuous mode [ 1105.997394][ T8815] device veth1_vlan left promiscuous mode [ 1106.003197][ T8815] device veth0_vlan left promiscuous mode [ 1107.036142][ T3222] Bluetooth: hci4: command 0x041b tx timeout [ 1108.063223][ T8815] team0 (unregistering): Port device team_slave_1 removed [ 1108.084592][ T8815] team0 (unregistering): Port device team_slave_0 removed [ 1108.104001][ T8815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.126468][ T8815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.203761][ T8815] bond0 (unregistering): Released all slaves [ 1108.399462][T27141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.421693][T27141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.473984][T27141] team0: Port device team_slave_0 added [ 1108.487622][T27141] team0: Port device team_slave_1 added [ 1108.528568][T27141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.535557][T27141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.561985][T27141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.580688][T27141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.588169][T27141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.614379][T27141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.664937][T27141] device hsr_slave_0 entered promiscuous mode [ 1108.674365][T27141] device hsr_slave_1 entered promiscuous mode [ 1108.687358][T27141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1108.694914][T27141] Cannot create hsr debugfs directory [ 1109.121954][ T8718] Bluetooth: hci4: command 0x040f tx timeout [ 1109.378242][T27141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.426101][T13247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1109.435514][T13247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1109.462246][T27141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.490918][T13247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1109.501732][T13247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1109.511490][T13247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.518794][T13247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.576523][T27375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1109.586296][T27375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1109.595990][T27375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1109.605031][T27375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.612383][T27375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.622794][T27375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1109.693160][T27375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1109.704882][T27375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1109.716741][T27375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1109.727021][T27375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1109.737901][T27375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1109.774332][T13247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1109.783492][T13247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1109.793989][T13247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1109.804031][T13247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1109.814182][T13247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1109.833573][T27141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1109.909709][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1109.917458][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1109.960598][T27141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.232230][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1110.242785][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1110.332216][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1110.342566][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1110.359414][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1110.369236][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1110.394246][T27141] device veth0_vlan entered promiscuous mode [ 1110.439410][T27141] device veth1_vlan entered promiscuous mode [ 1110.519433][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1110.529942][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1110.551950][T27141] device veth0_macvtap entered promiscuous mode [ 1110.580279][T27141] device veth1_macvtap entered promiscuous mode [ 1110.632742][T27141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1110.643812][T27141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.653917][T27141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1110.664589][T27141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.674668][T27141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1110.685302][T27141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.695404][T27141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1110.706021][T27141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.716092][T27141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1110.726702][T27141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.742017][T27141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.750704][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1110.760832][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1110.770849][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1110.781503][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1110.817013][T27141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1110.829402][T27141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.839461][T27141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1110.850065][T27141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.860088][T27141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1110.870746][T27141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.880773][T27141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1110.891348][T27141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.901370][T27141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1110.911946][T27141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.927268][T27141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.936457][T11230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1110.947085][T11230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1111.228583][T27419] Bluetooth: hci4: command 0x0419 tx timeout [ 1111.537063][T27428] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 01:07:27 executing program 4: 01:07:27 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) 01:07:27 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) 01:07:27 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:27 executing program 5: ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="640f21f3f20f2b2b26d9784a0f01c3d93926670fa80f3266b83d0000000f23280f21f86635000000040f23f826df1dbaa10066b8ef8dc56d66ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x88003}) setfsgid(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:07:27 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 1112.041192][T27449] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1112.051249][T27449] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:28 executing program 5: 01:07:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) [ 1112.751950][T27449] bridge0: port 98(veth197) entered blocking state [ 1112.761459][T27449] bridge0: port 98(veth197) entered disabled state [ 1112.782063][T27449] device veth197 entered promiscuous mode 01:07:28 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) 01:07:28 executing program 4: 01:07:28 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) 01:07:29 executing program 5: 01:07:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 01:07:29 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:29 executing program 4: 01:07:29 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) 01:07:29 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) 01:07:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 01:07:30 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1114.344303][T27481] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1114.357389][T27481] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:30 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) 01:07:30 executing program 4: [ 1115.092020][T27481] bridge0: port 99(veth199) entered blocking state [ 1115.098962][T27481] bridge0: port 99(veth199) entered disabled state [ 1115.109456][T27481] device veth199 entered promiscuous mode 01:07:31 executing program 4: 01:07:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:31 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:31 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:31 executing program 5: 01:07:31 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1115.852002][T27505] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1115.862634][T27505] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:32 executing program 4: 01:07:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:32 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) read(r0, 0x0, 0xffffffffffffff47) dup3(r0, 0xffffffffffffffff, 0x0) [ 1116.516095][T27505] bridge0: port 100(veth201) entered blocking state [ 1116.525643][T27505] bridge0: port 100(veth201) entered disabled state [ 1116.613127][T27505] device veth201 entered promiscuous mode 01:07:32 executing program 5: 01:07:32 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:32 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) read(r0, 0x0, 0xffffffffffffff47) dup3(r0, 0xffffffffffffffff, 0x0) 01:07:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:33 executing program 4: 01:07:33 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:33 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$VT_RESIZEX(r0, 0x541b, &(0x7f0000000000)) 01:07:33 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:33 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) read(r0, 0x0, 0xffffffffffffff47) dup3(r0, 0xffffffffffffffff, 0x0) 01:07:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) [ 1117.960462][T27538] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1117.971446][T27538] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000500)="9953ebafc834c0103e5da1602b5852369a") sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x46812, 0x0, 0x1f4) [ 1118.521515][T27538] bridge0: port 101(veth203) entered blocking state [ 1118.530394][T27538] bridge0: port 101(veth203) entered disabled state [ 1118.692119][T27538] device veth203 entered promiscuous mode 01:07:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:34 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) read(r0, 0x0, 0xffffffffffffff47) dup3(r0, 0xffffffffffffffff, 0x0) 01:07:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:35 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) [ 1119.756714][T27576] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.767021][T27576] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:36 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) read(r0, 0x0, 0xffffffffffffff47) dup3(r0, 0xffffffffffffffff, 0x0) [ 1120.284838][T27576] bridge0: port 102(veth205) entered blocking state [ 1120.294862][T27576] bridge0: port 102(veth205) entered disabled state 01:07:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1120.410702][T27576] device veth205 entered promiscuous mode 01:07:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 01:07:36 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1121.171284][T27598] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1121.181521][T27598] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1121.715470][T27598] bridge0: port 103(veth207) entered blocking state [ 1121.724866][T27598] bridge0: port 103(veth207) entered disabled state [ 1121.817029][T27598] device veth207 entered promiscuous mode 01:07:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x260007e9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000002c0)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xc30}], 0x1, 0x0, 0x2000012, 0x1f4}}], 0x138, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c83", 0x2, 0x408d5, 0x0, 0x0) 01:07:37 executing program 1: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) read(r0, 0x0, 0xffffffffffffff47) dup3(r0, 0xffffffffffffffff, 0x0) 01:07:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:38 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:39 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:07:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000380)={0x0, 0x0, {0x5, @struct={0x3, 0x7}, 0x0, 0x0, 0x3, 0x4, 0x0, 0x530000000000000, 0x2, @struct={0x7fff, 0x6}, 0x7, 0x8, [0x0, 0x9, 0x80000001, 0x2, 0x9, 0x10000]}, {0x80, @struct={0x8001, 0x5}, 0x0, 0x401, 0x7fff, 0x1, 0x6, 0x100, 0x0, @struct={0x1ff, 0x20}, 0x80000000, 0x8, [0x1f, 0x7, 0x0, 0x3, 0xec, 0x8]}, {0x6, @struct={0x8, 0x1d6}, 0x0, 0x2, 0x1f, 0x400, 0x6, 0x3c0, 0x27, @usage=0x100, 0x0, 0x1, [0x10001, 0x1, 0x8, 0xee, 0x5, 0x2]}, {0x6, 0x1000, 0x800}}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x7ffff000}], 0x1) 01:07:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1123.678437][T27632] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1123.689039][T27632] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1124.202380][T27632] bridge0: port 104(veth209) entered blocking state [ 1124.211567][T27632] bridge0: port 104(veth209) entered disabled state [ 1124.323847][T27632] device veth209 entered promiscuous mode 01:07:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:40 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite6\x00') preadv(r0, &(0x7f0000000500), 0x120, 0xc141, 0x0) 01:07:40 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:40 executing program 4: socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b25db4cb904e473730e55cff26d1b0e001d005b0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) 01:07:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:41 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 1125.503143][T27668] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1125.537070][T27668] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1125.619155][T27673] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 1125.630553][T27673] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 01:07:41 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:42 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:42 executing program 4: socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b25db4cb904e473730e55cff26d1b0e001d005b0000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) [ 1126.694940][T27684] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1126.705747][T27684] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:42 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 1126.994618][T27691] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 01:07:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1127.224240][T27684] bridge0: port 105(veth211) entered blocking state [ 1127.233370][T27684] bridge0: port 105(veth211) entered disabled state [ 1127.314382][T27684] device veth211 entered promiscuous mode [ 1127.348875][T27691] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 01:07:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dbbc48ef6edd8c56a50104ad3279f641", 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="ad", 0x1}, {&(0x7f0000000180)='g', 0x1}], 0x2}}], 0x1, 0x0) 01:07:43 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x3af4701e) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 01:07:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1128.199468][ T29] audit: type=1804 audit(1599959264.030:23): pid=27707 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir823610840/syzkaller.zfEwjr/595/memory.events" dev="sda1" ino=16359 res=1 [ 1128.225600][ T29] audit: type=1800 audit(1599959264.030:24): pid=27707 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16359 res=0 01:07:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1128.247215][ T29] audit: type=1804 audit(1599959264.030:25): pid=27706 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir823610840/syzkaller.zfEwjr/595/memory.events" dev="sda1" ino=16359 res=1 01:07:44 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 1128.382587][ T29] audit: type=1804 audit(1599959264.120:26): pid=27706 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir823610840/syzkaller.zfEwjr/595/memory.events" dev="sda1" ino=16359 res=1 [ 1128.408983][ T29] audit: type=1800 audit(1599959264.120:27): pid=27706 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=16359 res=0 01:07:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:44 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0xfffffffffffffdbd, &(0x7f0000000100)}, 0x10) 01:07:44 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:44 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) 01:07:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1129.303704][T27731] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1129.314057][T27731] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1129.942945][T27731] bridge0: port 106(veth213) entered blocking state [ 1129.952379][T27731] bridge0: port 106(veth213) entered disabled state 01:07:45 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 1130.048743][T27731] device veth213 entered promiscuous mode 01:07:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:46 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:46 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:47 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x10, 0x0}, 0x10) 01:07:47 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b276062f763e9b200a00080001c0", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4092, 0xc462, 0x0, 0x0, 0xf4acd1e9c4fa5544) 01:07:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1131.262578][T27781] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1131.274489][T27781] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1131.913876][T27781] bridge0: port 107(veth215) entered blocking state [ 1131.924497][T27781] bridge0: port 107(veth215) entered disabled state 01:07:47 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 1132.080212][T27781] device veth215 entered promiscuous mode 01:07:48 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x10, 0x0}, 0x10) [ 1132.288967][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1132.298508][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:07:48 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 1132.349446][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:07:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1132.449574][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1132.459272][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1132.469861][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:07:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:48 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x10, 0x0}, 0x10) 01:07:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 1133.395969][T27809] bridge0: port 108(veth217) entered blocking state [ 1133.404251][T27809] bridge0: port 108(veth217) entered disabled state [ 1133.495570][T27809] device veth217 entered promiscuous mode 01:07:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:49 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:49 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) r1 = dup(r0) getsockname$unix(r1, 0x0, &(0x7f0000000080)) 01:07:49 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x10, 0x0}, 0x10) 01:07:50 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:07:50 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1134.536533][T27841] __nla_validate_parse: 2 callbacks suppressed [ 1134.536604][T27841] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1134.552848][T27841] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) 01:07:50 executing program 3: r0 = socket$inet_sctp(0x2, 0xfff8000000000001, 0x84) listen(r0, 0x0) 01:07:51 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x10, 0x0}, 0x10) [ 1135.427953][T27841] bridge0: port 109(veth219) entered blocking state [ 1135.438304][T27841] bridge0: port 109(veth219) entered disabled state [ 1135.544237][T27841] device veth219 entered promiscuous mode 01:07:51 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:07:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:51 executing program 3: r0 = socket$inet_sctp(0x2, 0xfff8000000000001, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c1c"], &(0x7f0000000000)=0x98) 01:07:51 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) [ 1136.006741][T27863] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1136.017595][T27863] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:52 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) [ 1136.696580][T27863] bridge0: port 110(veth221) entered blocking state [ 1136.706892][T27863] bridge0: port 110(veth221) entered disabled state 01:07:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1136.748909][T27863] device veth221 entered promiscuous mode 01:07:52 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:07:52 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) shutdown(r0, 0x1) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 01:07:52 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) [ 1137.196783][T27884] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1137.207289][T27884] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:53 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x2}, 0x10) [ 1137.852764][T27884] bridge0: port 111(veth223) entered blocking state [ 1137.862232][T27884] bridge0: port 111(veth223) entered disabled state [ 1137.947899][T27884] device veth223 entered promiscuous mode 01:07:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, 0xffffffffffffffff, 0x0) 01:07:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:54 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x2}, 0x10) 01:07:54 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:54 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffc7b, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005", 0x2b}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 01:07:54 executing program 5: socket$packet(0x11, 0x2, 0x300) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:54 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x2}, 0x10) 01:07:54 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) 01:07:54 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x100000000000003, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, 0xfffffffffffffffe) r2 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x5, 0x1, 0x0, 0x6, 0x8200, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x1, @perf_config_ext={0x7, 0x100000001}, 0x4, 0x401, 0xbd84, 0x4, 0x400, 0x1, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x4, 0x8, 0xc2, 0x2, 0x0, 0x954b, 0x800, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0xfffffffffffffff9}, 0x40000, 0x100000001, 0x8e2, 0x0, 0x7, 0x3}, r1, 0x10, r2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1600000016008105e00f80e045e4b37c4cb33fab463c", 0x16}], 0x1, 0x0, 0x0, 0xa00}, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe52}, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x140) [ 1139.259687][T27926] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1139.270409][T27926] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, 0xffffffffffffffff, 0x0) 01:07:55 executing program 5: socket$packet(0x11, 0x2, 0x300) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:55 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x2}, 0x10) 01:07:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(0xffffffffffffffff, 0x0, 0xffffffffffffff47) dup3(r1, r0, 0x0) [ 1139.787985][T27926] bridge0: port 112(veth225) entered blocking state [ 1139.797188][T27926] bridge0: port 112(veth225) entered disabled state [ 1139.886008][T27926] device veth225 entered promiscuous mode 01:07:56 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) 01:07:56 executing program 3: 01:07:56 executing program 5: socket$packet(0x11, 0x2, 0x300) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:56 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x2}, 0x10) [ 1140.600260][T27951] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1140.611217][T27951] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1141.130806][T27951] bridge0: port 113(veth227) entered blocking state [ 1141.139564][T27951] bridge0: port 113(veth227) entered disabled state [ 1141.221983][T27951] device veth227 entered promiscuous mode 01:07:57 executing program 3: 01:07:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) 01:07:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, 0xffffffffffffffff, 0x0) 01:07:57 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:07:57 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:57 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x2}, 0x10) 01:07:57 executing program 3: [ 1141.940514][T27977] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1141.950731][T27977] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:57 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 1142.570330][T27977] bridge0: port 114(veth229) entered blocking state [ 1142.579886][T27977] bridge0: port 114(veth229) entered disabled state [ 1142.706192][T27977] device veth229 entered promiscuous mode 01:07:58 executing program 3: 01:07:58 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:07:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 01:07:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(0xffffffffffffffff, r0, 0x0) 01:07:58 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:07:59 executing program 5: syz_open_dev$evdev(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 1143.316265][T27997] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1143.326194][T27997] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:07:59 executing program 3: r0 = socket$inet_sctp(0x2, 0xfff8000000000001, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)=0x98) 01:07:59 executing program 2: 01:07:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, 0xffffffffffffffff, 0x0) [ 1144.078254][T27997] bridge0: port 115(veth231) entered blocking state [ 1144.085165][T27997] bridge0: port 115(veth231) entered disabled state [ 1144.095677][T27997] device veth231 entered promiscuous mode 01:08:00 executing program 2: 01:08:00 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:08:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:00 executing program 3: 01:08:00 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:08:00 executing program 2: 01:08:00 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:00 executing program 3: 01:08:00 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 1145.006420][T28028] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1145.018401][T28028] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:08:01 executing program 2: 01:08:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, 0xffffffffffffffff, 0x0) [ 1145.708451][T28028] bridge0: port 116(veth233) entered blocking state [ 1145.716379][T28028] bridge0: port 116(veth233) entered disabled state [ 1145.790540][T28028] device veth233 entered promiscuous mode 01:08:01 executing program 3: 01:08:01 executing program 2: 01:08:02 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:02 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) pselect6(0x10, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:08:02 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:08:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ffffffea00000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) read(r1, 0x0, 0xffffffffffffff47) dup3(r1, 0xffffffffffffffff, 0x0) 01:08:02 executing program 3: 01:08:02 executing program 2: [ 1146.749130][T28056] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1146.760383][T28056] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:08:02 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:03 executing program 3: [ 1147.370480][T28056] bridge0: port 117(veth235) entered blocking state [ 1147.380253][T28056] bridge0: port 117(veth235) entered disabled state 01:08:03 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 1147.491411][T28056] device veth235 entered promiscuous mode 01:08:03 executing program 2: 01:08:03 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:03 executing program 3: 01:08:03 executing program 1: 01:08:04 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:04 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:08:04 executing program 3: 01:08:04 executing program 2: 01:08:04 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 01:08:04 executing program 1: [ 1148.790168][T28085] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1148.802577][T28085] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:08:04 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:04 executing program 3: 01:08:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) [ 1149.506385][T28085] bridge0: port 118(veth237) entered blocking state [ 1149.516341][T28085] bridge0: port 118(veth237) entered disabled state 01:08:05 executing program 3: 01:08:05 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:05 executing program 1: 01:08:05 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 1150.320932][T28085] device veth237 entered promiscuous mode 01:08:06 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:08:06 executing program 2: 01:08:06 executing program 3: 01:08:06 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:06 executing program 1: 01:08:06 executing program 2: [ 1150.853291][T28116] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1150.863820][T28116] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:08:06 executing program 3: 01:08:06 executing program 1: 01:08:06 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) [ 1151.438066][T28116] bridge0: port 119(veth239) entered blocking state [ 1151.447172][T28116] bridge0: port 119(veth239) entered disabled state [ 1151.532038][T28116] device veth239 entered promiscuous mode 01:08:07 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) 01:08:07 executing program 2: 01:08:07 executing program 3: 01:08:08 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:08:08 executing program 1: 01:08:08 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:08 executing program 3: 01:08:08 executing program 2: [ 1152.802439][T28142] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1152.813743][T28142] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:08:08 executing program 1: 01:08:08 executing program 3: 01:08:09 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) [ 1153.470555][T28142] bridge0: port 120(veth241) entered blocking state [ 1153.480304][T28142] bridge0: port 120(veth241) entered disabled state [ 1153.543578][T28142] device veth241 entered promiscuous mode 01:08:09 executing program 2: 01:08:09 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) 01:08:09 executing program 1: 01:08:09 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x0, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:08:09 executing program 3: [ 1154.091798][T28159] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1154.101779][T28159] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:08:10 executing program 1: 01:08:10 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:10 executing program 2: [ 1154.736904][T28159] bridge0: port 121(veth243) entered blocking state [ 1154.747811][T28159] bridge0: port 121(veth243) entered disabled state [ 1154.846305][T28159] device veth243 entered promiscuous mode 01:08:10 executing program 3: 01:08:10 executing program 1: 01:08:11 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) 01:08:11 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:11 executing program 2: 01:08:11 executing program 3: 01:08:11 executing program 1: 01:08:11 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x0, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:08:11 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:11 executing program 2: 01:08:11 executing program 1: 01:08:11 executing program 3: [ 1156.163571][T28186] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1156.174053][T28186] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:08:12 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:12 executing program 2: [ 1156.859954][T28186] bridge0: port 122(veth245) entered blocking state [ 1156.869608][T28186] bridge0: port 122(veth245) entered disabled state [ 1156.906604][T28186] device veth245 entered promiscuous mode 01:08:13 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, 0x0, 0x0, 0x0) 01:08:13 executing program 1: 01:08:13 executing program 3: 01:08:13 executing program 2: 01:08:13 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x0, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:08:13 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:13 executing program 1: [ 1157.713102][T28206] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1157.723036][T28206] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:08:13 executing program 2: 01:08:14 executing program 3: [ 1158.257724][T28206] bridge0: port 123(veth247) entered blocking state [ 1158.267307][T28206] bridge0: port 123(veth247) entered disabled state [ 1158.349714][T28206] device veth247 entered promiscuous mode 01:08:14 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:08:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa0008016005c2fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 01:08:14 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:08:14 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) [ 1158.814470][T28219] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1158.825403][T28219] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 01:08:14 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000e40)={{0x12, 0x1, 0x0, 0xe8, 0x38, 0x7, 0x10, 0x12d1, 0x1c05, 0x2ca1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{}]}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x7f, &(0x7f0000000240)=ANY=[@ANYBLOB="7f031d2018121a10e21c5187f97da1f96adbe07991587418cb723803110d62acc97d0ab4376e8fa1e5ab006fceef275fd4060edc275b3826e8523db65fda9dd8"]}]}) 01:08:15 executing program 2: [ 1159.471067][T28219] bridge0: port 124(veth249) entered blocking state [ 1159.480448][T28219] bridge0: port 124(veth249) entered disabled state [ 1159.491151][T27760] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1159.552637][T28219] device veth249 entered promiscuous mode 01:08:15 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) [ 1159.730994][T27760] usb 6-1: Using ep0 maxpacket: 8 01:08:15 executing program 2: [ 1159.864570][T27760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1159.875861][T27760] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1159.886138][T27760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1159.896106][T27760] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 01:08:15 executing program 1: [ 1159.906147][T27760] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1159.930833][T27764] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1159.993015][T27760] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1160.002634][T27760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1160.010902][T27760] usb 6-1: SerialNumber: syz [ 1160.124106][T28227] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1160.145584][T27760] hub 6-1:1.0: bad descriptor, ignoring hub [ 1160.151951][T27760] hub: probe of 6-1:1.0 failed with error -5 [ 1160.181799][T27764] usb 4-1: Using ep0 maxpacket: 16 01:08:16 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) 01:08:16 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) [ 1160.343010][T27764] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1160.387084][T28227] raw-gadget gadget: fail, usb_ep_enable returned -22 01:08:16 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x40, &(0x7f00000001c0)=0x0) io_submit(r1, 0x5800, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1160.497414][T28248] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1160.507722][T28248] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1160.542312][T27764] usb 4-1: New USB device found, idVendor=12d1, idProduct=1c05, bcdDevice=2c.a1 [ 1160.551652][T27764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.559781][T27764] usb 4-1: Product: syz [ 1160.564322][T27764] usb 4-1: Manufacturer: ”መယ᳢蝑緹說秠墑ᡴ狋̸഑걢緉됊渷ꆏꯥ漀弧۔嬧☸勨똽 [ 1160.575721][T27764] usb 4-1: SerialNumber: syz [ 1160.665533][T27760] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 01:08:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000029c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f00000002c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 1160.922790][T27760] usb 6-1: USB disconnect, device number 2 [ 1161.046196][T27760] usblp0: removed [ 1161.178257][T27764] usb 4-1: config 0 descriptor?? [ 1161.187160][T28248] bridge0: port 125(veth251) entered blocking state [ 1161.197491][T28248] bridge0: port 125(veth251) entered disabled state [ 1161.327673][T27764] usb 4-1: bad CDC descriptors [ 1161.329535][T28248] device veth251 entered promiscuous mode [ 1161.363179][T27764] usb 4-1: bad CDC descriptors [ 1161.370789][T27764] option 4-1:0.0: GSM modem (1-port) converter detected 01:08:17 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) [ 1161.509250][T27764] usb 4-1: USB disconnect, device number 2 [ 1161.518856][T27764] option 4-1:0.0: device disconnected [ 1161.690863][T27760] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1161.951136][T27760] usb 6-1: Using ep0 maxpacket: 8 01:08:18 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:08:18 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r3, @ANYBLOB="000000000400"/28]) [ 1162.231048][T27764] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1162.270974][T27760] usb 6-1: unable to read config index 0 descriptor/all [ 1162.278239][T27760] usb 6-1: can't read configurations, error -71 [ 1162.306399][T28296] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1162.317832][T28296] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1162.494535][T27764] usb 4-1: Using ep0 maxpacket: 16 [ 1162.615732][T27764] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1162.844916][T27764] usb 4-1: New USB device found, idVendor=12d1, idProduct=1c05, bcdDevice=2c.a1 [ 1162.852106][T28296] bridge0: port 126(veth253) entered blocking state [ 1162.854335][T27764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.854454][T27764] usb 4-1: Product: syz [ 1162.863542][T28296] bridge0: port 126(veth253) entered disabled state [ 1162.869411][T27764] usb 4-1: Manufacturer: ”መယ᳢蝑緹說秠墑ᡴ狋̸഑걢緉됊渷ꆏꯥ漀弧۔嬧☸勨똽 [ 1162.869523][T27764] usb 4-1: SerialNumber: syz [ 1163.048822][T28296] device veth253 entered promiscuous mode [ 1163.082865][T27764] usb 4-1: config 0 descriptor?? 01:08:19 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000000)=0xffffffff, 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0xd4) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c542) 01:08:19 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) 01:08:19 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000082505a8a4070000000001090224000101004a9809040000120701010009050102"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1163.170649][T27764] usb 4-1: can't set config #0, error -71 [ 1163.196318][T27764] usb 4-1: USB disconnect, device number 3 [ 1163.204623][T27760] usb 6-1: new high-speed USB device number 4 using dummy_hcd 01:08:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 01:08:19 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) [ 1163.461067][T27760] usb 6-1: Using ep0 maxpacket: 8 01:08:19 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) [ 1163.552548][ T29] audit: type=1804 audit(1599959299.394:28): pid=28322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir823610840/syzkaller.zfEwjr/632/file0" dev="sda1" ino=15820 res=1 [ 1163.606922][T27760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1163.618198][T27760] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1163.628698][T27760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1163.638762][T27760] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1163.648753][T27760] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1163.730508][T27762] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1163.990685][T27762] usb 2-1: Using ep0 maxpacket: 8 [ 1164.104666][T27760] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1164.114567][T27760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1164.123033][T27760] usb 6-1: SerialNumber: syz [ 1164.140404][T27762] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 01:08:20 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="00008100000081008e01a602c24e865a21653b3c4634ee030e47b93d363fb03a165f9976a9b6d6afea657cc3c9a111d79a750c5b2ac43057b191391489a724c6825cb9cdfa73bc27e3614772da06fbb3395913d3f6b1b4e722cfe7a1c5ac7d10582fefa56764ab6bbdf36a2b06b6684181"], 0x0}, 0x0) [ 1164.150742][T27762] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1164.160634][T27762] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1164.170547][T27762] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1164.183981][T27762] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1164.193252][T27762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 01:08:20 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000001fc0)='net/rfcomm\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000004700)=ANY=[@ANYBLOB="0300000000000000fdff1effffffff010600000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000750300"/28, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28]) 01:08:20 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x0, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) [ 1164.423919][T28307] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1164.472850][T27760] hub 6-1:1.0: bad descriptor, ignoring hub [ 1164.478998][T27760] hub: probe of 6-1:1.0 failed with error -5 [ 1164.583144][T27762] hub 2-1:1.0: bad descriptor, ignoring hub [ 1164.589283][T27762] hub: probe of 2-1:1.0 failed with error -5 [ 1164.614597][T28339] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1164.626548][T28339] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1165.240090][T28339] bridge0: port 127(veth255) entered blocking state [ 1165.249789][T28339] bridge0: port 127(veth255) entered disabled state [ 1165.358403][T28339] device veth255 entered promiscuous mode [ 1165.417727][T28307] raw-gadget gadget: fail, usb_ep_enable returned -22 01:08:21 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x46) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x0, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) [ 1165.533052][T27762] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1165.611196][T27421] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1165.726542][T27760] usblp 6-1:1.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1165.808559][T27760] usb 6-1: USB disconnect, device number 4 [ 1165.837167][T27760] usblp1: removed [ 1165.863377][T27421] usb 3-1: Using ep0 maxpacket: 16 [ 1165.891472][T27764] usb 2-1: USB disconnect, device number 2 [ 1165.932752][T27764] usblp0: removed [ 1165.981349][T27421] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 1165.989682][T27421] usb 3-1: config 0 has no interface number 0 [ 1165.996755][T27421] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1166.006910][T27421] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1166.016302][T27421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.102866][T27421] usb 3-1: config 0 descriptor?? [ 1166.360515][T27421] gtco 3-1:0.219: Collection level already at zero [ 1166.367229][T27421] ===================================================== [ 1166.374240][T27421] BUG: KMSAN: uninit-value in gtco_probe+0x1c62/0x39b0 [ 1166.381094][T27421] CPU: 1 PID: 27421 Comm: kworker/1:79 Not tainted 5.8.0-rc5-syzkaller #0 [ 1166.389590][T27421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.399685][T27421] Workqueue: usb_hub_wq hub_event [ 1166.404705][T27421] Call Trace: [ 1166.408003][T27421] dump_stack+0x21c/0x280 [ 1166.412347][T27421] kmsan_report+0xf7/0x1e0 [ 1166.416780][T27421] __msan_warning+0x58/0xa0 [ 1166.421295][T27421] gtco_probe+0x1c62/0x39b0 [ 1166.425863][T27421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1166.431682][T27421] ? store_tabletExecute+0x150/0x150 [ 1166.437027][T27421] usb_probe_interface+0xece/0x1550 [ 1166.442245][T27421] ? usb_register_driver+0x900/0x900 [ 1166.447601][T27421] really_probe+0xf20/0x20b0 [ 1166.452203][T27421] ? kmsan_get_metadata+0x116/0x180 [ 1166.457412][T27421] driver_probe_device+0x293/0x390 [ 1166.462536][T27421] __device_attach_driver+0x63f/0x830 [ 1166.467925][T27421] bus_for_each_drv+0x2ca/0x3f0 [ 1166.472782][T27421] ? coredump_store+0xf0/0xf0 [ 1166.477484][T27421] __device_attach+0x4e2/0x7f0 [ 1166.482265][T27421] device_initial_probe+0x4a/0x60 [ 1166.487294][T27421] bus_probe_device+0x177/0x3d0 [ 1166.492154][T27421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1166.497963][T27421] device_add+0x3b0e/0x40d0 [ 1166.502494][T27421] usb_set_configuration+0x380f/0x3f10 [ 1166.507967][T27421] ? usb_set_configuration+0xb91/0x3f10 [ 1166.513544][T27421] usb_generic_driver_probe+0x138/0x300 [ 1166.519098][T27421] ? usb_choose_configuration+0xe70/0xe70 [ 1166.524821][T27421] usb_probe_device+0x311/0x490 [ 1166.529681][T27421] ? usb_register_device_driver+0x540/0x540 [ 1166.535585][T27421] really_probe+0xf20/0x20b0 [ 1166.540227][T27421] ? kmsan_get_metadata+0x116/0x180 [ 1166.545439][T27421] driver_probe_device+0x293/0x390 [ 1166.550562][T27421] __device_attach_driver+0x63f/0x830 [ 1166.555954][T27421] bus_for_each_drv+0x2ca/0x3f0 [ 1166.560821][T27421] ? coredump_store+0xf0/0xf0 [ 1166.565507][T27421] __device_attach+0x4e2/0x7f0 [ 1166.570306][T27421] device_initial_probe+0x4a/0x60 [ 1166.575346][T27421] bus_probe_device+0x177/0x3d0 [ 1166.580208][T27421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1166.586017][T27421] device_add+0x3b0e/0x40d0 [ 1166.590544][T27421] usb_new_device+0x1bd4/0x2a30 [ 1166.595417][T27421] hub_event+0x5e7b/0x8a70 [ 1166.599876][T27421] ? kmsan_get_metadata+0x116/0x180 [ 1166.605077][T27421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1166.610884][T27421] ? led_work+0x7c0/0x7c0 [ 1166.615286][T27421] process_one_work+0x1688/0x2140 [ 1166.620336][T27421] worker_thread+0x10bc/0x2730 [ 1166.625102][T27421] ? kmsan_get_metadata+0x116/0x180 [ 1166.630306][T27421] ? kmsan_get_metadata+0x116/0x180 [ 1166.635524][T27421] kthread+0x551/0x590 [ 1166.639596][T27421] ? process_one_work+0x2140/0x2140 [ 1166.644807][T27421] ? kthread_blkcg+0x110/0x110 [ 1166.649591][T27421] ret_from_fork+0x1f/0x30 [ 1166.654006][T27421] [ 1166.656326][T27421] Uninit was stored to memory at: [ 1166.661355][T27421] kmsan_internal_chain_origin+0xad/0x130 [ 1166.667072][T27421] __msan_chain_origin+0x50/0x90 [ 1166.672014][T27421] gtco_probe+0x1e77/0x39b0 [ 1166.676523][T27421] usb_probe_interface+0xece/0x1550 [ 1166.681727][T27421] really_probe+0xf20/0x20b0 [ 1166.686317][T27421] driver_probe_device+0x293/0x390 [ 1166.691432][T27421] __device_attach_driver+0x63f/0x830 [ 1166.696801][T27421] bus_for_each_drv+0x2ca/0x3f0 [ 1166.701657][T27421] __device_attach+0x4e2/0x7f0 [ 1166.706422][T27421] device_initial_probe+0x4a/0x60 [ 1166.711445][T27421] bus_probe_device+0x177/0x3d0 [ 1166.716309][T27421] device_add+0x3b0e/0x40d0 [ 1166.720843][T27421] usb_set_configuration+0x380f/0x3f10 [ 1166.726304][T27421] usb_generic_driver_probe+0x138/0x300 [ 1166.731870][T27421] usb_probe_device+0x311/0x490 [ 1166.736724][T27421] really_probe+0xf20/0x20b0 [ 1166.741330][T27421] driver_probe_device+0x293/0x390 [ 1166.746537][T27421] __device_attach_driver+0x63f/0x830 [ 1166.751916][T27421] bus_for_each_drv+0x2ca/0x3f0 [ 1166.756769][T27421] __device_attach+0x4e2/0x7f0 [ 1166.761538][T27421] device_initial_probe+0x4a/0x60 [ 1166.766570][T27421] bus_probe_device+0x177/0x3d0 [ 1166.771434][T27421] device_add+0x3b0e/0x40d0 [ 1166.775940][T27421] usb_new_device+0x1bd4/0x2a30 [ 1166.780790][T27421] hub_event+0x5e7b/0x8a70 [ 1166.785210][T27421] process_one_work+0x1688/0x2140 [ 1166.790237][T27421] worker_thread+0x10bc/0x2730 [ 1166.795002][T27421] kthread+0x551/0x590 [ 1166.799075][T27421] ret_from_fork+0x1f/0x30 [ 1166.803480][T27421] [ 1166.805803][T27421] Local variable ----globalval.i@gtco_probe created at: [ 1166.812741][T27421] gtco_probe+0xda0/0x39b0 [ 1166.817162][T27421] gtco_probe+0xda0/0x39b0 [ 1166.821569][T27421] ===================================================== [ 1166.828495][T27421] Disabling lock debugging due to kernel taint [ 1166.834640][T27421] Kernel panic - not syncing: panic_on_warn set ... [ 1166.841236][T27421] CPU: 1 PID: 27421 Comm: kworker/1:79 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 1166.851117][T27421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.861182][T27421] Workqueue: usb_hub_wq hub_event [ 1166.866290][T27421] Call Trace: [ 1166.869589][T27421] dump_stack+0x21c/0x280 [ 1166.874116][T27421] panic+0x4d7/0xef7 [ 1166.878040][T27421] ? add_taint+0x17c/0x210 [ 1166.882480][T27421] kmsan_report+0x1df/0x1e0 [ 1166.886994][T27421] __msan_warning+0x58/0xa0 [ 1166.891509][T27421] gtco_probe+0x1c62/0x39b0 [ 1166.896065][T27421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1166.901877][T27421] ? store_tabletExecute+0x150/0x150 [ 1166.907168][T27421] usb_probe_interface+0xece/0x1550 [ 1166.912383][T27421] ? usb_register_driver+0x900/0x900 [ 1166.917675][T27421] really_probe+0xf20/0x20b0 [ 1166.922275][T27421] ? kmsan_get_metadata+0x116/0x180 [ 1166.927488][T27421] driver_probe_device+0x293/0x390 [ 1166.932615][T27421] __device_attach_driver+0x63f/0x830 [ 1166.938007][T27421] bus_for_each_drv+0x2ca/0x3f0 [ 1166.942870][T27421] ? coredump_store+0xf0/0xf0 [ 1166.947560][T27421] __device_attach+0x4e2/0x7f0 [ 1166.952343][T27421] device_initial_probe+0x4a/0x60 [ 1166.957375][T27421] bus_probe_device+0x177/0x3d0 [ 1166.962237][T27421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1166.968054][T27421] device_add+0x3b0e/0x40d0 [ 1166.972582][T27421] usb_set_configuration+0x380f/0x3f10 [ 1166.978059][T27421] ? usb_set_configuration+0xb91/0x3f10 [ 1166.983639][T27421] usb_generic_driver_probe+0x138/0x300 [ 1166.989195][T27421] ? usb_choose_configuration+0xe70/0xe70 [ 1166.994922][T27421] usb_probe_device+0x311/0x490 [ 1166.999804][T27421] ? usb_register_device_driver+0x540/0x540 [ 1167.005705][T27421] really_probe+0xf20/0x20b0 [ 1167.010304][T27421] ? kmsan_get_metadata+0x116/0x180 [ 1167.015527][T27421] driver_probe_device+0x293/0x390 [ 1167.020670][T27421] __device_attach_driver+0x63f/0x830 [ 1167.026075][T27421] bus_for_each_drv+0x2ca/0x3f0 [ 1167.030929][T27421] ? coredump_store+0xf0/0xf0 [ 1167.035619][T27421] __device_attach+0x4e2/0x7f0 [ 1167.040438][T27421] device_initial_probe+0x4a/0x60 [ 1167.045480][T27421] bus_probe_device+0x177/0x3d0 [ 1167.050344][T27421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1167.056157][T27421] device_add+0x3b0e/0x40d0 [ 1167.060687][T27421] usb_new_device+0x1bd4/0x2a30 [ 1167.065557][T27421] hub_event+0x5e7b/0x8a70 [ 1167.070012][T27421] ? kmsan_get_metadata+0x116/0x180 [ 1167.075221][T27421] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 1167.081048][T27421] ? led_work+0x7c0/0x7c0 [ 1167.085384][T27421] process_one_work+0x1688/0x2140 [ 1167.090431][T27421] worker_thread+0x10bc/0x2730 [ 1167.095199][T27421] ? kmsan_get_metadata+0x116/0x180 [ 1167.100404][T27421] ? kmsan_get_metadata+0x116/0x180 [ 1167.105616][T27421] kthread+0x551/0x590 [ 1167.109693][T27421] ? process_one_work+0x2140/0x2140 [ 1167.114901][T27421] ? kthread_blkcg+0x110/0x110 [ 1167.119670][T27421] ret_from_fork+0x1f/0x30 [ 1167.125857][T27421] Kernel Offset: disabled [ 1167.130174][T27421] Rebooting in 86400 seconds..