Warning: Permanently added '10.128.1.59' (ECDSA) to the list of known hosts.
2021/04/21 08:20:59 fuzzer started
2021/04/21 08:20:59 dialing manager at 10.128.0.163:38241
2021/04/21 08:21:00 syscalls: 1982
2021/04/21 08:21:00 code coverage: enabled
2021/04/21 08:21:00 comparison tracing: enabled
2021/04/21 08:21:00 extra coverage: enabled
2021/04/21 08:21:00 setuid sandbox: enabled
2021/04/21 08:21:00 namespace sandbox: enabled
2021/04/21 08:21:00 Android sandbox: enabled
2021/04/21 08:21:00 fault injection: enabled
2021/04/21 08:21:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/04/21 08:21:00 net packet injection: /dev/net/tun does not exist
2021/04/21 08:21:00 net device setup: enabled
2021/04/21 08:21:00 concurrency sanitizer: enabled
2021/04/21 08:21:00 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/04/21 08:21:00 USB emulation: /dev/raw-gadget does not exist
2021/04/21 08:21:00 hci packet injection: /dev/vhci does not exist
2021/04/21 08:21:00 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist
2021/04/21 08:21:00 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist
2021/04/21 08:21:01 suppressing KCSAN reports in functions: 'generic_write_end' 'blk_mq_dispatch_rq_list' 'lookup_fast' '__writeback_single_inode' 'fast_dput' 'fifo_open' 'n_tty_receive_buf_common' 'alloc_pid' 'ext4_free_inode' 'exit_mm' 'blk_mq_rq_ctx_init' 'kauditd_thread' '__xa_clear_mark' '__ext4_update_other_inode_time' 'xas_clear_mark' 'blk_mq_sched_dispatch_requests' 'dd_has_work' '__ext4_new_inode' 'shmem_mknod' 'do_sys_poll' 'do_nanosleep' 'next_uptodate_page' 'tick_nohz_next_event' 
2021/04/21 08:21:01 fetching corpus: 0, signal 0/2000 (executing program)
2021/04/21 08:21:01 fetching corpus: 50, signal 11529/15267 (executing program)
2021/04/21 08:21:01 fetching corpus: 100, signal 20422/25788 (executing program)
2021/04/21 08:21:01 fetching corpus: 150, signal 27086/33954 (executing program)
2021/04/21 08:21:01 fetching corpus: 200, signal 32103/40424 (executing program)
2021/04/21 08:21:01 fetching corpus: 250, signal 37279/46908 (executing program)
2021/04/21 08:21:01 fetching corpus: 300, signal 42152/53014 (executing program)
2021/04/21 08:21:01 fetching corpus: 350, signal 45229/57359 (executing program)
2021/04/21 08:21:01 fetching corpus: 400, signal 47248/60708 (executing program)
2021/04/21 08:21:01 fetching corpus: 450, signal 49586/64284 (executing program)
2021/04/21 08:21:01 fetching corpus: 500, signal 53649/69367 (executing program)
2021/04/21 08:21:01 fetching corpus: 550, signal 56070/72916 (executing program)
2021/04/21 08:21:01 fetching corpus: 600, signal 58235/76190 (executing program)
2021/04/21 08:21:01 fetching corpus: 649, signal 61620/80438 (executing program)
2021/04/21 08:21:01 fetching corpus: 699, signal 66228/85617 (executing program)
2021/04/21 08:21:01 fetching corpus: 749, signal 68156/88508 (executing program)
2021/04/21 08:21:01 fetching corpus: 799, signal 70162/91401 (executing program)
2021/04/21 08:21:01 fetching corpus: 849, signal 71675/93807 (executing program)
2021/04/21 08:21:02 fetching corpus: 899, signal 72940/96065 (executing program)
2021/04/21 08:21:02 fetching corpus: 949, signal 74725/98715 (executing program)
2021/04/21 08:21:02 fetching corpus: 999, signal 76468/101176 (executing program)
2021/04/21 08:21:02 fetching corpus: 1049, signal 78429/103867 (executing program)
2021/04/21 08:21:02 fetching corpus: 1099, signal 79582/105900 (executing program)
2021/04/21 08:21:02 fetching corpus: 1149, signal 81112/108166 (executing program)
2021/04/21 08:21:02 fetching corpus: 1199, signal 82627/110434 (executing program)
2021/04/21 08:21:02 fetching corpus: 1249, signal 83701/112384 (executing program)
2021/04/21 08:21:02 fetching corpus: 1299, signal 84953/114427 (executing program)
2021/04/21 08:21:02 fetching corpus: 1349, signal 85980/116295 (executing program)
2021/04/21 08:21:02 fetching corpus: 1399, signal 88893/119448 (executing program)
2021/04/21 08:21:02 fetching corpus: 1449, signal 90038/121296 (executing program)
2021/04/21 08:21:02 fetching corpus: 1499, signal 91200/123117 (executing program)
2021/04/21 08:21:02 fetching corpus: 1549, signal 92291/124881 (executing program)
2021/04/21 08:21:02 fetching corpus: 1599, signal 93187/126479 (executing program)
2021/04/21 08:21:02 fetching corpus: 1649, signal 93931/127980 (executing program)
2021/04/21 08:21:02 fetching corpus: 1699, signal 94928/129596 (executing program)
2021/04/21 08:21:02 fetching corpus: 1749, signal 95772/131113 (executing program)
2021/04/21 08:21:02 fetching corpus: 1799, signal 96478/132518 (executing program)
2021/04/21 08:21:02 fetching corpus: 1849, signal 98290/134546 (executing program)
2021/04/21 08:21:02 fetching corpus: 1899, signal 99408/136134 (executing program)
2021/04/21 08:21:02 fetching corpus: 1949, signal 100477/137713 (executing program)
2021/04/21 08:21:02 fetching corpus: 1999, signal 101074/139038 (executing program)
2021/04/21 08:21:02 fetching corpus: 2049, signal 102738/140890 (executing program)
2021/04/21 08:21:02 fetching corpus: 2099, signal 103848/142380 (executing program)
2021/04/21 08:21:02 fetching corpus: 2149, signal 104730/143731 (executing program)
2021/04/21 08:21:02 fetching corpus: 2199, signal 105425/144976 (executing program)
2021/04/21 08:21:02 fetching corpus: 2249, signal 106341/146316 (executing program)
2021/04/21 08:21:02 fetching corpus: 2299, signal 106994/147519 (executing program)
2021/04/21 08:21:02 fetching corpus: 2349, signal 107870/148816 (executing program)
2021/04/21 08:21:02 fetching corpus: 2399, signal 108821/150121 (executing program)
2021/04/21 08:21:03 fetching corpus: 2449, signal 110116/151571 (executing program)
2021/04/21 08:21:03 fetching corpus: 2499, signal 110622/152595 (executing program)
2021/04/21 08:21:03 fetching corpus: 2549, signal 111140/153594 (executing program)
2021/04/21 08:21:03 fetching corpus: 2599, signal 111914/154762 (executing program)
2021/04/21 08:21:03 fetching corpus: 2648, signal 112654/155857 (executing program)
2021/04/21 08:21:03 fetching corpus: 2698, signal 113408/156943 (executing program)
2021/04/21 08:21:03 fetching corpus: 2747, signal 114342/158086 (executing program)
2021/04/21 08:21:03 fetching corpus: 2797, signal 114947/159093 (executing program)
2021/04/21 08:21:03 fetching corpus: 2847, signal 115577/160144 (executing program)
2021/04/21 08:21:03 fetching corpus: 2897, signal 116262/161204 (executing program)
2021/04/21 08:21:03 fetching corpus: 2947, signal 117258/162280 (executing program)
2021/04/21 08:21:03 fetching corpus: 2996, signal 117974/163285 (executing program)
2021/04/21 08:21:03 fetching corpus: 3046, signal 118704/164297 (executing program)
2021/04/21 08:21:03 fetching corpus: 3096, signal 119844/165428 (executing program)
2021/04/21 08:21:03 fetching corpus: 3146, signal 120761/166428 (executing program)
2021/04/21 08:21:03 fetching corpus: 3196, signal 121435/167330 (executing program)
2021/04/21 08:21:03 fetching corpus: 3246, signal 122076/168197 (executing program)
2021/04/21 08:21:03 fetching corpus: 3296, signal 122735/169076 (executing program)
2021/04/21 08:21:03 fetching corpus: 3346, signal 123472/169918 (executing program)
2021/04/21 08:21:03 fetching corpus: 3396, signal 124198/170778 (executing program)
2021/04/21 08:21:03 fetching corpus: 3446, signal 124632/171551 (executing program)
2021/04/21 08:21:03 fetching corpus: 3496, signal 125509/172436 (executing program)
2021/04/21 08:21:03 fetching corpus: 3546, signal 126402/173300 (executing program)
2021/04/21 08:21:03 fetching corpus: 3596, signal 127129/174125 (executing program)
2021/04/21 08:21:03 fetching corpus: 3646, signal 127685/174897 (executing program)
2021/04/21 08:21:03 fetching corpus: 3696, signal 128187/175627 (executing program)
2021/04/21 08:21:03 fetching corpus: 3746, signal 129396/176513 (executing program)
2021/04/21 08:21:03 fetching corpus: 3796, signal 130118/177277 (executing program)
2021/04/21 08:21:03 fetching corpus: 3846, signal 130780/178024 (executing program)
2021/04/21 08:21:04 fetching corpus: 3896, signal 131399/178701 (executing program)
2021/04/21 08:21:04 fetching corpus: 3946, signal 131853/179344 (executing program)
2021/04/21 08:21:04 fetching corpus: 3996, signal 132291/180005 (executing program)
2021/04/21 08:21:04 fetching corpus: 4046, signal 132737/180687 (executing program)
2021/04/21 08:21:04 fetching corpus: 4096, signal 133302/181347 (executing program)
2021/04/21 08:21:04 fetching corpus: 4146, signal 134081/181962 (executing program)
2021/04/21 08:21:04 fetching corpus: 4196, signal 134826/182610 (executing program)
2021/04/21 08:21:04 fetching corpus: 4246, signal 135277/183232 (executing program)
2021/04/21 08:21:04 fetching corpus: 4296, signal 135809/183844 (executing program)
2021/04/21 08:21:04 fetching corpus: 4346, signal 136276/184462 (executing program)
2021/04/21 08:21:04 fetching corpus: 4396, signal 136852/185043 (executing program)
2021/04/21 08:21:04 fetching corpus: 4446, signal 137214/185596 (executing program)
2021/04/21 08:21:04 fetching corpus: 4496, signal 137678/186153 (executing program)
2021/04/21 08:21:04 fetching corpus: 4546, signal 138231/186710 (executing program)
2021/04/21 08:21:04 fetching corpus: 4596, signal 138974/187226 (executing program)
2021/04/21 08:21:04 fetching corpus: 4646, signal 139715/187533 (executing program)
2021/04/21 08:21:04 fetching corpus: 4696, signal 140550/187533 (executing program)
2021/04/21 08:21:04 fetching corpus: 4746, signal 141176/187533 (executing program)
2021/04/21 08:21:04 fetching corpus: 4796, signal 141611/187533 (executing program)
2021/04/21 08:21:04 fetching corpus: 4846, signal 142313/187533 (executing program)
2021/04/21 08:21:04 fetching corpus: 4896, signal 142620/187533 (executing program)
2021/04/21 08:21:04 fetching corpus: 4946, signal 143392/187533 (executing program)
2021/04/21 08:21:04 fetching corpus: 4996, signal 143917/187533 (executing program)
2021/04/21 08:21:04 fetching corpus: 5046, signal 144354/187533 (executing program)
2021/04/21 08:21:04 fetching corpus: 5096, signal 145037/187534 (executing program)
2021/04/21 08:21:04 fetching corpus: 5146, signal 145795/187534 (executing program)
2021/04/21 08:21:04 fetching corpus: 5196, signal 146696/187534 (executing program)
2021/04/21 08:21:04 fetching corpus: 5246, signal 147651/187534 (executing program)
2021/04/21 08:21:04 fetching corpus: 5296, signal 148187/187534 (executing program)
2021/04/21 08:21:04 fetching corpus: 5346, signal 148829/187538 (executing program)
2021/04/21 08:21:04 fetching corpus: 5396, signal 149198/187538 (executing program)
2021/04/21 08:21:04 fetching corpus: 5446, signal 149622/187538 (executing program)
2021/04/21 08:21:05 fetching corpus: 5496, signal 150029/187538 (executing program)
2021/04/21 08:21:05 fetching corpus: 5546, signal 150695/187540 (executing program)
2021/04/21 08:21:05 fetching corpus: 5596, signal 151176/187540 (executing program)
2021/04/21 08:21:05 fetching corpus: 5646, signal 151818/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 5696, signal 152305/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 5746, signal 152591/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 5796, signal 152952/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 5846, signal 153275/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 5896, signal 153793/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 5946, signal 154263/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 5996, signal 154663/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 6046, signal 154959/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 6096, signal 155418/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 6146, signal 155642/187547 (executing program)
2021/04/21 08:21:05 fetching corpus: 6196, signal 156293/187553 (executing program)
2021/04/21 08:21:05 fetching corpus: 6246, signal 156714/187566 (executing program)
2021/04/21 08:21:05 fetching corpus: 6296, signal 157102/187566 (executing program)
2021/04/21 08:21:05 fetching corpus: 6346, signal 157563/187566 (executing program)
2021/04/21 08:21:05 fetching corpus: 6396, signal 157858/187573 (executing program)
2021/04/21 08:21:05 fetching corpus: 6446, signal 158359/187581 (executing program)
2021/04/21 08:21:05 fetching corpus: 6496, signal 158974/187596 (executing program)
2021/04/21 08:21:05 fetching corpus: 6546, signal 159868/187597 (executing program)
2021/04/21 08:21:05 fetching corpus: 6596, signal 160544/187597 (executing program)
2021/04/21 08:21:05 fetching corpus: 6646, signal 160887/187597 (executing program)
2021/04/21 08:21:05 fetching corpus: 6696, signal 161318/187599 (executing program)
2021/04/21 08:21:05 fetching corpus: 6746, signal 161716/187599 (executing program)
2021/04/21 08:21:05 fetching corpus: 6796, signal 161990/187599 (executing program)
2021/04/21 08:21:05 fetching corpus: 6846, signal 162466/187599 (executing program)
2021/04/21 08:21:05 fetching corpus: 6896, signal 162924/187599 (executing program)
2021/04/21 08:21:05 fetching corpus: 6946, signal 163436/187599 (executing program)
2021/04/21 08:21:05 fetching corpus: 6996, signal 163741/187599 (executing program)
2021/04/21 08:21:05 fetching corpus: 7046, signal 164067/187599 (executing program)
2021/04/21 08:21:05 fetching corpus: 7096, signal 164339/187599 (executing program)
2021/04/21 08:21:05 fetching corpus: 7146, signal 164700/187599 (executing program)
2021/04/21 08:21:05 fetching corpus: 7196, signal 165142/187610 (executing program)
2021/04/21 08:21:06 fetching corpus: 7246, signal 165541/187623 (executing program)
2021/04/21 08:21:06 fetching corpus: 7296, signal 165989/187623 (executing program)
2021/04/21 08:21:06 fetching corpus: 7346, signal 166498/187623 (executing program)
2021/04/21 08:21:06 fetching corpus: 7396, signal 166848/187623 (executing program)
2021/04/21 08:21:06 fetching corpus: 7446, signal 167235/187623 (executing program)
2021/04/21 08:21:06 fetching corpus: 7496, signal 167629/187623 (executing program)
2021/04/21 08:21:06 fetching corpus: 7546, signal 168096/187623 (executing program)
2021/04/21 08:21:06 fetching corpus: 7596, signal 168519/187623 (executing program)
2021/04/21 08:21:06 fetching corpus: 7646, signal 169078/187623 (executing program)
2021/04/21 08:21:06 fetching corpus: 7696, signal 169580/187699 (executing program)
2021/04/21 08:21:06 fetching corpus: 7746, signal 170014/187699 (executing program)
2021/04/21 08:21:06 fetching corpus: 7796, signal 170647/187699 (executing program)
2021/04/21 08:21:06 fetching corpus: 7846, signal 170955/187725 (executing program)
2021/04/21 08:21:06 fetching corpus: 7896, signal 171261/187725 (executing program)
2021/04/21 08:21:06 fetching corpus: 7946, signal 171565/187725 (executing program)
2021/04/21 08:21:06 fetching corpus: 7996, signal 171933/187725 (executing program)
2021/04/21 08:21:06 fetching corpus: 8045, signal 172278/187725 (executing program)
2021/04/21 08:21:06 fetching corpus: 8095, signal 172703/187725 (executing program)
2021/04/21 08:21:06 fetching corpus: 8145, signal 172984/187725 (executing program)
2021/04/21 08:21:06 fetching corpus: 8195, signal 173270/187725 (executing program)
2021/04/21 08:21:06 fetching corpus: 8245, signal 173566/187725 (executing program)
2021/04/21 08:21:06 fetching corpus: 8294, signal 173799/187725 (executing program)
2021/04/21 08:21:06 fetching corpus: 8344, signal 174088/187726 (executing program)
2021/04/21 08:21:06 fetching corpus: 8394, signal 174392/187726 (executing program)
2021/04/21 08:21:06 fetching corpus: 8444, signal 174597/187729 (executing program)
2021/04/21 08:21:06 fetching corpus: 8494, signal 174831/187729 (executing program)
2021/04/21 08:21:06 fetching corpus: 8544, signal 175311/187729 (executing program)
2021/04/21 08:21:06 fetching corpus: 8594, signal 175562/187729 (executing program)
2021/04/21 08:21:06 fetching corpus: 8644, signal 175890/187729 (executing program)
2021/04/21 08:21:06 fetching corpus: 8694, signal 176140/187729 (executing program)
2021/04/21 08:21:06 fetching corpus: 8744, signal 177057/187731 (executing program)
2021/04/21 08:21:06 fetching corpus: 8794, signal 177458/187734 (executing program)
2021/04/21 08:21:06 fetching corpus: 8844, signal 177883/187734 (executing program)
2021/04/21 08:21:07 fetching corpus: 8894, signal 178117/187734 (executing program)
2021/04/21 08:21:07 fetching corpus: 8944, signal 178364/187734 (executing program)
2021/04/21 08:21:07 fetching corpus: 8994, signal 178736/187734 (executing program)
2021/04/21 08:21:07 fetching corpus: 9044, signal 178937/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9094, signal 179314/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9144, signal 179621/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9194, signal 180108/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9244, signal 180473/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9294, signal 180877/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9344, signal 181100/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9394, signal 181440/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9444, signal 181968/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9494, signal 182247/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9544, signal 182680/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9594, signal 183033/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9644, signal 183302/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9694, signal 183576/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9744, signal 184138/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9794, signal 184328/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9844, signal 184605/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9894, signal 184886/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9944, signal 185182/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 9994, signal 185697/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 10044, signal 185949/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 10094, signal 186239/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 10144, signal 186463/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 10184, signal 186700/187754 (executing program)
2021/04/21 08:21:07 fetching corpus: 10184, signal 186700/187754 (executing program)
2021/04/21 08:21:09 starting 6 fuzzer processes
08:21:09 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
poll(0x0, 0x0, 0xfffffffffffffff8)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x10d}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x2a)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

08:21:09 executing program 1:
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e800ff7f", @ANYRES16=0x0, @ANYBLOB="f0df26bd7808fc5a7815d1"], 0xe8}}, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

08:21:09 executing program 5:
epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x21d, 0x0, 0x0, 0x205)

08:21:09 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
tgkill(r0, r1, 0x0)

08:21:09 executing program 3:
syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}])

08:21:09 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8441, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000000))

syzkaller login: [   25.195474][   T25] audit: type=1400 audit(1618993269.283:8): avc:  denied  { execmem } for  pid=1751 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   25.308730][ T1756] cgroup: Unknown subsys name 'perf_event'
[   25.315147][ T1756] cgroup: Unknown subsys name 'net_cls'
[   25.368643][ T1758] cgroup: Unknown subsys name 'perf_event'
[   25.380907][ T1759] cgroup: Unknown subsys name 'perf_event'
[   25.386959][ T1759] cgroup: Unknown subsys name 'net_cls'
[   25.387816][ T1758] cgroup: Unknown subsys name 'net_cls'
[   25.393639][ T1761] cgroup: Unknown subsys name 'perf_event'
[   25.418007][ T1761] cgroup: Unknown subsys name 'net_cls'
[   25.428620][ T1769] cgroup: Unknown subsys name 'perf_event'
[   25.435256][ T1771] cgroup: Unknown subsys name 'perf_event'
[   25.441701][ T1769] cgroup: Unknown subsys name 'net_cls'
[   25.449520][ T1771] cgroup: Unknown subsys name 'net_cls'
[   29.754556][ T4470] loop3: detected capacity change from 0 to 1
[   29.768225][ T4472] Restarting kernel threads ... done.
08:21:13 executing program 1:
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e800ff7f", @ANYRES16=0x0, @ANYBLOB="f0df26bd7808fc5a7815d1"], 0xe8}}, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

08:21:13 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8441, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000000))

08:21:13 executing program 5:
epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x21d, 0x0, 0x0, 0x205)

[   29.800454][ T4472] Restarting kernel threads ... done.
[   29.820570][ T4470]  loop3: p2 < > p3 p4
[   29.839989][ T4470] loop3: p2 size 2 extends beyond EOD, truncated
08:21:14 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8441, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000000))

08:21:14 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
tgkill(r0, r1, 0x0)

[   29.864609][ T4506] Restarting kernel threads ... done.
[   29.873481][ T4470] loop3: p3 start 225 is beyond EOD, truncated
[   29.879704][ T4470] loop3: p4 size 3657465856 extends beyond EOD, truncated
08:21:14 executing program 1:
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e800ff7f", @ANYRES16=0x0, @ANYBLOB="f0df26bd7808fc5a7815d1"], 0xe8}}, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[   29.958900][ T4517] Restarting kernel threads ... done.
08:21:16 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
poll(0x0, 0x0, 0xfffffffffffffff8)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x10d}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x2a)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

08:21:16 executing program 5:
epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x21d, 0x0, 0x0, 0x205)

08:21:16 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
tgkill(r0, r1, 0x0)

08:21:16 executing program 1:
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e800ff7f", @ANYRES16=0x0, @ANYBLOB="f0df26bd7808fc5a7815d1"], 0xe8}}, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

08:21:16 executing program 3:
syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}])

08:21:16 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8441, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000000))

08:21:16 executing program 5:
epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x21d, 0x0, 0x0, 0x205)

08:21:16 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
tgkill(r0, r1, 0x0)

08:21:16 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
tgkill(r0, r1, 0x0)

08:21:16 executing program 5:
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x88031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

[   32.716955][ T4548] loop3: detected capacity change from 0 to 1
08:21:16 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @local}, 0x8)

08:21:16 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
poll(0x0, 0x0, 0xfffffffffffffff8)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="66530700ae897094e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ba5dcf4c2e1fea4b7a3dfc8ea6a7efef7990d00d51feaa24440d21e48dd9e05485b4ff95f715134d", 0x68}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2a)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

[   32.768918][ T4553] Restarting kernel threads ... done.
[   32.776210][ T4548]  loop3: p2 < > p3 p4
[   32.780399][ T4548] loop3: p2 size 2 extends beyond EOD, truncated
[   32.795136][ T4548] loop3: p3 start 225 is beyond EOD, truncated
[   32.801347][ T4548] loop3: p4 size 3657465856 extends beyond EOD, truncated
08:21:19 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
poll(0x0, 0x0, 0xfffffffffffffff8)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x10d}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x2a)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

08:21:19 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
tgkill(r0, r1, 0x0)

08:21:19 executing program 3:
syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}])

08:21:19 executing program 5:
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x88031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

08:21:19 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @local}, 0x8)

08:21:19 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
poll(0x0, 0x0, 0xfffffffffffffff8)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="66530700ae897094e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ba5dcf4c2e1fea4b7a3dfc8ea6a7efef7990d00d51feaa24440d21e48dd9e05485b4ff95f715134d", 0x68}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2a)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

08:21:19 executing program 5:
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x88031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

08:21:19 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @local}, 0x8)

08:21:19 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @local}, 0x8)

08:21:19 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
r1 = gettid()
tgkill(r0, r1, 0x0)

08:21:19 executing program 5:
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x88031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

[   35.750179][ T4609] loop3: detected capacity change from 0 to 1
08:21:19 executing program 3:
syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}])

[   35.820288][ T4609]  loop3: p2 < > p3 p4
[   35.826659][ T4609] loop3: p2 size 2 extends beyond EOD, truncated
[   35.837107][ T4609] loop3: p3 start 225 is beyond EOD, truncated
[   35.843320][ T4609] loop3: p4 size 3657465856 extends beyond EOD, truncated
[   35.898534][ T4639] loop3: detected capacity change from 0 to 1
[   35.945066][ T4639]  loop3: p2 < > p3 p4
[   35.949277][ T4639] loop3: p2 size 2 extends beyond EOD, truncated
[   35.956348][ T4639] loop3: p3 start 225 is beyond EOD, truncated
[   35.962530][ T4639] loop3: p4 size 3657465856 extends beyond EOD, truncated
[   35.971937][ T1028]  loop3: p2 < > p3 p4
[   35.976139][ T1028] loop3: p2 size 2 extends beyond EOD, truncated
[   35.982953][ T1028] loop3: p3 start 225 is beyond EOD, truncated
[   35.989162][ T1028] loop3: p4 size 3657465856 extends beyond EOD, truncated
08:21:22 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
poll(0x0, 0x0, 0xfffffffffffffff8)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="66530700ae897094e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ba5dcf4c2e1fea4b7a3dfc8ea6a7efef7990d00d51feaa24440d21e48dd9e05485b4ff95f715134d", 0x68}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2a)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

08:21:22 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
poll(0x0, 0x0, 0xfffffffffffffff8)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x10d}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x2a)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

08:21:22 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x4000000a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x3c)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x44, &(0x7f0000000640)="f47970da7c2fd541e0656c5762306aa606a0c2a76e59b65fa78fb184da006cabbd58564cf09dcac5456d212e05d23391ff083d78ff122a776e08af2025580c72249ad2f5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

08:21:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r1, 0x305, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

08:21:22 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
clone(0x2300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8934, &(0x7f00000002c0)={'wlan1\x00'})

08:21:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x107, &(0x7f0000000140)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x17)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = gettid()
tkill(r3, 0x40)

08:21:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x107, &(0x7f0000000140)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x17)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = gettid()
tkill(r3, 0x40)

08:21:22 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
clone(0x2300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8934, &(0x7f00000002c0)={'wlan1\x00'})

08:21:22 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
clone(0x2300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8934, &(0x7f00000002c0)={'wlan1\x00'})

08:21:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r1, 0x305, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

08:21:22 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
clone(0x2300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8934, &(0x7f00000002c0)={'wlan1\x00'})

08:21:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x107, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd891fa870d434223169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b36000000007baa17dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0132044681400bf30024514a6d2675bab926125c43083e773eb3d8dea74700066ee70c42196645292c0e4c3622c102a16be9066fc27e7d4466cbb295eb7f286dcccfde0740cb90366fdd064888fc176574bd977c8c7ef316262a70e75001b11c7c49ae8797518e425ef9080c77c164ad240e88feb"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x17)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = gettid()
tkill(r3, 0x40)

08:21:25 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
poll(0x0, 0x0, 0xfffffffffffffff8)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="66530700ae897094e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ba5dcf4c2e1fea4b7a3dfc8ea6a7efef7990d00d51feaa24440d21e48dd9e05485b4ff95f715134d", 0x68}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2a)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x0)

08:21:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20}, {0x4d}, {0x6}]})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

08:21:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r1, 0x305, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

08:21:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x107, &(0x7f0000000140)="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"}}], 0x1c)
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x17)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = gettid()
tkill(r3, 0x40)

08:21:25 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit_2292={{0x14}}, @dontfrag={{0x14}}, @hopopts={{0x18}}], 0x48}, 0x2008090)

08:21:25 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = fork()
waitid(0x3, r1, &(0x7f0000000600), 0x8, 0x0)

08:21:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0)='ethtool\x00', 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r1, 0x305, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)

08:21:25 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1000, 0x802)
set_mempolicy(0x3, &(0x7f0000000000)=0xffffffff00000001, 0x2)
write$9p(r0, 0x0, 0x0)

08:21:25 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit_2292={{0x14}}, @dontfrag={{0x14}}, @hopopts={{0x18}}], 0x48}, 0x2008090)

08:21:25 executing program 1:
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x80000001)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0)
io_uring_enter(r0, 0x2b66, 0x0, 0x0, 0x0, 0x5e)

08:21:26 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1000, 0x802)
set_mempolicy(0x3, &(0x7f0000000000)=0xffffffff00000001, 0x2)
write$9p(r0, 0x0, 0x0)

[   41.836161][   T25] audit: type=1326 audit(1618993285.947:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0
08:21:26 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit_2292={{0x14}}, @dontfrag={{0x14}}, @hopopts={{0x18}}], 0x48}, 0x2008090)

[   42.644852][   T25] audit: type=1326 audit(1618993286.747:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0
08:21:28 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20}, {0x4d}, {0x6}]})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

08:21:28 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1000, 0x802)
set_mempolicy(0x3, &(0x7f0000000000)=0xffffffff00000001, 0x2)
write$9p(r0, 0x0, 0x0)

08:21:28 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = fork()
waitid(0x3, r1, &(0x7f0000000600), 0x8, 0x0)

08:21:28 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit_2292={{0x14}}, @dontfrag={{0x14}}, @hopopts={{0x18}}], 0x48}, 0x2008090)

08:21:28 executing program 1:
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x80000001)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0)
io_uring_enter(r0, 0x2b66, 0x0, 0x0, 0x0, 0x5e)

08:21:28 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20}, {0x4d}, {0x6}]})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

08:21:28 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1000, 0x802)
set_mempolicy(0x3, &(0x7f0000000000)=0xffffffff00000001, 0x2)
write$9p(r0, 0x0, 0x0)

08:21:29 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae897094e7b126b097eaa769bc6d05c41bd34e677d114b7691d8b125fa654b7d0000000000007209ec1aebcb67f9e613b0eedcc53ee19ed6ae74a3af432786ee1cbf4d80d39f5ccefc5a7c34877a3854f4ccd7b0dfa6430a4a0ad4ee0ae91ceb80ab2f45562fdbb25fc66a9de0792ec3d2f3dd8a4771611043902bfa61a1a05fb05099a66bc22faccdda85f01ec1871c81d4208c44108c995ff1a0dd6f0d410d1737ebd339c654d018605cddabb9ad5154465ac5d0863d9c3620af7cc51e6cbb8f87c6609978", 0xca}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x37)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r0, 0x0, 0x2)

[   44.846745][   T25] audit: type=1326 audit(1618993288.948:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4772 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0
08:21:29 executing program 1:
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x80000001)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0)
io_uring_enter(r0, 0x2b66, 0x0, 0x0, 0x0, 0x5e)

08:21:29 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000000040000000000008001f000d000000", 0x24)

08:21:29 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = fork()
waitid(0x3, r1, &(0x7f0000000600), 0x8, 0x0)

08:21:29 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20}, {0x4d}, {0x6}]})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[   44.920707][   T25] audit: type=1326 audit(1618993289.008:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4775 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0
[   44.988833][   T25] audit: type=1326 audit(1618993289.058:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4802 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0
08:21:29 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20}, {0x4d}, {0x6}]})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

08:21:29 executing program 1:
r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x80000001)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0)
io_uring_enter(r0, 0x2b66, 0x0, 0x0, 0x0, 0x5e)

08:21:29 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = fork()
waitid(0x3, r1, &(0x7f0000000600), 0x8, 0x0)

08:21:29 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000000040000000000008001f000d000000", 0x24)

08:21:29 executing program 1:
prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000004200), 0x8, 0x0)

08:21:29 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000000040000000000008001f000d000000", 0x24)

[   45.691885][   T25] audit: type=1326 audit(1618993289.788:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4828 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0
08:21:29 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000000040000000000008001f000d000000", 0x24)

08:21:32 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x5})

08:21:32 executing program 0:
r0 = socket(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x4c, 0x0, 0x4)

08:21:32 executing program 1:
prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000004200), 0x8, 0x0)

08:21:32 executing program 3:
clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
pause()
ptrace(0x10, r0)
ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000001100)={&(0x7f0000000100)=""/4096, 0x1000})

08:21:32 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20}, {0x4d}, {0x6}]})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

08:21:32 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20}, {0x4d}, {0x6}]})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

08:21:32 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x5})

08:21:32 executing program 0:
r0 = socket(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x4c, 0x0, 0x4)

08:21:32 executing program 1:
prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000004200), 0x8, 0x0)

[   47.949895][   T25] audit: type=1326 audit(1618993292.048:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4862 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0
08:21:32 executing program 0:
r0 = socket(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x4c, 0x0, 0x4)

08:21:32 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x5})

08:21:32 executing program 1:
prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000004200), 0x8, 0x0)

[   48.015813][   T25] audit: type=1326 audit(1618993292.118:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4863 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0
08:21:32 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0)
lseek(r2, 0x0, 0x0)

08:21:32 executing program 0:
r0 = socket(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x4c, 0x0, 0x4)

08:21:32 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x5})

08:21:32 executing program 3:
clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
pause()
ptrace(0x10, r0)
ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000001100)={&(0x7f0000000100)=""/4096, 0x1000})

08:21:32 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1, 0x2})

08:21:32 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0)
lseek(r2, 0x0, 0x0)

08:21:32 executing program 0:
set_mempolicy(0x4, 0x0, 0x0)
syz_io_uring_setup(0x580e, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

08:21:32 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)

08:21:32 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000500)={0x64ad}, 0x10)
write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000008001d0000000000", 0x24)

08:21:32 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0)
lseek(r2, 0x0, 0x0)

08:21:32 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1, 0x2})

08:21:33 executing program 0:
set_mempolicy(0x4, 0x0, 0x0)
syz_io_uring_setup(0x580e, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

[   48.857260][ T4919] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
08:21:33 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0)
lseek(r2, 0x0, 0x0)

08:21:33 executing program 0:
set_mempolicy(0x4, 0x0, 0x0)
syz_io_uring_setup(0x580e, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

08:21:33 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1, 0x2})

[   48.900941][ T4932] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
08:21:33 executing program 3:
clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
pause()
ptrace(0x10, r0)
ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000001100)={&(0x7f0000000100)=""/4096, 0x1000})

08:21:33 executing program 4:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1, 0x2})

08:21:33 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000500)={0x64ad}, 0x10)
write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000008001d0000000000", 0x24)

08:21:33 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1, 0x2})

08:21:33 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)

08:21:33 executing program 0:
set_mempolicy(0x4, 0x0, 0x0)
syz_io_uring_setup(0x580e, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800))

08:21:33 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)

08:21:33 executing program 4:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1, 0x2})

08:21:33 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000500)={0x64ad}, 0x10)
write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000008001d0000000000", 0x24)

08:21:33 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

[   49.712552][ T4973] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
08:21:33 executing program 4:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1, 0x2})

08:21:33 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)

[   49.774636][ T4991] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
08:21:34 executing program 3:
clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
pause()
ptrace(0x10, r0)
ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000001100)={&(0x7f0000000100)=""/4096, 0x1000})

08:21:34 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

08:21:34 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000500)={0x64ad}, 0x10)
write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000000000000000000008001d0000000000", 0x24)

08:21:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)

08:21:34 executing program 4:
r0 = openat$thread_pidfd(0xffffff9c, &(0x7f0000001240)='/proc/thread-self\x00', 0x0, 0x0)
r1 = getpid()
fcntl$setown(r0, 0x8, r1)
fcntl$notify(r0, 0x402, 0x80000022)

08:21:34 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)

08:21:34 executing program 4:
r0 = openat$thread_pidfd(0xffffff9c, &(0x7f0000001240)='/proc/thread-self\x00', 0x0, 0x0)
r1 = getpid()
fcntl$setown(r0, 0x8, r1)
fcntl$notify(r0, 0x402, 0x80000022)

08:21:34 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

08:21:34 executing program 4:
r0 = openat$thread_pidfd(0xffffff9c, &(0x7f0000001240)='/proc/thread-self\x00', 0x0, 0x0)
r1 = getpid()
fcntl$setown(r0, 0x8, r1)
fcntl$notify(r0, 0x402, 0x80000022)

[   50.586048][ T5022] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
08:21:34 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

08:21:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)

08:21:34 executing program 2:
io_setup(0x401, &(0x7f00000000c0))
io_setup(0x5e0f, &(0x7f0000000280))
io_setup(0x100, &(0x7f0000000400))
io_setup(0x2, &(0x7f00000002c0))
io_setup(0x1, &(0x7f00000001c0))
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:21:35 executing program 4:
r0 = openat$thread_pidfd(0xffffff9c, &(0x7f0000001240)='/proc/thread-self\x00', 0x0, 0x0)
r1 = getpid()
fcntl$setown(r0, 0x8, r1)
fcntl$notify(r0, 0x402, 0x80000022)

08:21:35 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000880)='tmpfs\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x47]}}]})

08:21:35 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001600738b0000000000000000fe8000000000000000000000000000aa7f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000ffffffff000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aab900000c0015"], 0x104}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}})
sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0)

08:21:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000000c0)='source', 0x0)

08:21:35 executing program 2:
io_setup(0x401, &(0x7f00000000c0))
io_setup(0x5e0f, &(0x7f0000000280))
io_setup(0x100, &(0x7f0000000400))
io_setup(0x2, &(0x7f00000002c0))
io_setup(0x1, &(0x7f00000001c0))
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:21:35 executing program 3:
io_setup(0x401, &(0x7f00000000c0))
io_setup(0x5e0f, &(0x7f0000000280))
io_setup(0x100, &(0x7f0000000400))
io_setup(0x2, &(0x7f00000002c0))
io_setup(0x1, &(0x7f00000001c0))
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:21:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000000c0)='source', 0x0)

08:21:35 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000880)='tmpfs\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x47]}}]})

08:21:35 executing program 4:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2})

08:21:35 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001600738b0000000000000000fe8000000000000000000000000000aa7f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000ffffffff000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aab900000c0015"], 0x104}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}})
sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0)

08:21:35 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000880)='tmpfs\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x47]}}]})

08:21:35 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001600738b0000000000000000fe8000000000000000000000000000aa7f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000ffffffff000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aab900000c0015"], 0x104}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}})
sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0)

08:21:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000000c0)='source', 0x0)

08:21:35 executing program 2:
io_setup(0x401, &(0x7f00000000c0))
io_setup(0x5e0f, &(0x7f0000000280))
io_setup(0x100, &(0x7f0000000400))
io_setup(0x2, &(0x7f00000002c0))
io_setup(0x1, &(0x7f00000001c0))
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:21:35 executing program 3:
io_setup(0x401, &(0x7f00000000c0))
io_setup(0x5e0f, &(0x7f0000000280))
io_setup(0x100, &(0x7f0000000400))
io_setup(0x2, &(0x7f00000002c0))
io_setup(0x1, &(0x7f00000001c0))
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:21:35 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000880)='tmpfs\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={[{@size={'size', 0x3d, [0x47]}}]})

08:21:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000000c0)='source', 0x0)

08:21:35 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001600738b0000000000000000fe8000000000000000000000000000aa7f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000ffffffff000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aab900000c0015"], 0x104}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}})
sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0)

08:21:35 executing program 0:
mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])

08:21:35 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="000000f9ffffffffffffff47a837086d987c3b812e28f5e34f456a667ccf16534b2716", 0x23}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x34)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)

[   51.711891][ T5127] ==================================================================
[   51.720028][ T5127] BUG: KCSAN: data-race in ptrace_check_attach / zap_other_threads
[   51.727924][ T5127] 
[   51.730251][ T5127] write to 0xffff888126582518 of 8 bytes by task 5125 on cpu 1:
[   51.737878][ T5127]  zap_other_threads+0x98/0x1e0
[   51.742871][ T5127]  do_group_exit+0x145/0x1a0
[   51.747466][ T5127]  __do_sys_exit_group+0xb/0x10
[   51.752317][ T5127]  __se_sys_exit_group+0x5/0x10
[   51.757166][ T5127]  __x64_sys_exit_group+0x16/0x20
[   51.762188][ T5127]  do_syscall_64+0x34/0x50
[   51.766603][ T5127]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   51.772609][ T5127] 
[   51.774946][ T5127] read to 0xffff888126582518 of 8 bytes by task 5127 on cpu 0:
[   51.782479][ T5127]  ptrace_check_attach+0x144/0x250
[   51.787586][ T5127]  __se_sys_ptrace+0xd8/0x1b0
[   51.792254][ T5127]  __x64_sys_ptrace+0x51/0x60
[   51.796933][ T5127]  do_syscall_64+0x34/0x50
[   51.801343][ T5127]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   51.807230][ T5127] 
[   51.809538][ T5127] Reported by Kernel Concurrency Sanitizer on:
[   51.815668][ T5127] CPU: 0 PID: 5127 Comm: syz-executor.5 Not tainted 5.12.0-rc8-syzkaller #0
[   51.824330][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   51.834380][ T5127] ==================================================================
08:21:36 executing program 4:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2})

08:21:36 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
fsopen(0x0, 0x0)

08:21:36 executing program 2:
io_setup(0x401, &(0x7f00000000c0))
io_setup(0x5e0f, &(0x7f0000000280))
io_setup(0x100, &(0x7f0000000400))
io_setup(0x2, &(0x7f00000002c0))
io_setup(0x1, &(0x7f00000001c0))
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:21:36 executing program 3:
io_setup(0x401, &(0x7f00000000c0))
io_setup(0x5e0f, &(0x7f0000000280))
io_setup(0x100, &(0x7f0000000400))
io_setup(0x2, &(0x7f00000002c0))
io_setup(0x1, &(0x7f00000001c0))
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

08:21:36 executing program 0:
mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])

08:21:36 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
fsopen(0x0, 0x0)

08:21:36 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
fsopen(0x0, 0x0)

08:21:36 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
fsopen(0x0, 0x0)

08:21:36 executing program 0:
mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])

08:21:36 executing program 3:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2})

08:21:36 executing program 2:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2})

08:21:38 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="000000f9ffffffffffffff47a837086d987c3b812e28f5e34f456a667ccf16534b2716", 0x23}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x34)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)

08:21:38 executing program 1:
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0)

08:21:38 executing program 0:
mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0xb, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}])

08:21:38 executing program 2:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2})

08:21:38 executing program 4:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2})

08:21:38 executing program 3:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2})

08:21:38 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb780", 0x41}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x5)
tkill(r1, 0x1e)
ptrace$cont(0x18, r1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
exit_group(0x0)

08:21:38 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb780", 0x41}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x5)
tkill(r1, 0x1e)
ptrace$cont(0x18, r1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
exit_group(0x0)

08:21:38 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb780", 0x41}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x5)
tkill(r1, 0x1e)
ptrace$cont(0x18, r1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
exit_group(0x0)

08:21:38 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb780", 0x41}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x5)
tkill(r1, 0x1e)
ptrace$cont(0x18, r1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
exit_group(0x0)

08:21:38 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800001, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
set_mempolicy(0x0, &(0x7f0000000080), 0x7f)

08:21:38 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040))

08:21:41 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="000000f9ffffffffffffff47a837086d987c3b812e28f5e34f456a667ccf16534b2716", 0x23}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x34)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)

08:21:41 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800001, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
set_mempolicy(0x0, &(0x7f0000000080), 0x7f)

08:21:41 executing program 2:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2})

08:21:41 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040))

08:21:41 executing program 4:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2})

08:21:41 executing program 3:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1})
fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2})

08:21:41 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040))

08:21:41 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800001, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
set_mempolicy(0x0, &(0x7f0000000080), 0x7f)

08:21:41 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040))

08:21:41 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800001, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
set_mempolicy(0x0, &(0x7f0000000080), 0x7f)

08:21:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_timeval(r0, 0x1, 0x4, 0x0, &(0x7f0000000080))

08:21:41 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x4b2f, 0x8)

08:21:44 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="000000f9ffffffffffffff47a837086d987c3b812e28f5e34f456a667ccf16534b2716", 0x23}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x34)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)

08:21:44 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x4b2f, 0x8)

08:21:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_timeval(r0, 0x1, 0x4, 0x0, &(0x7f0000000080))

08:21:44 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x4, 0x3, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0)

08:21:44 executing program 4:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
truncate(&(0x7f0000000040)='./bus\x00', 0x0)

08:21:44 executing program 2:
sched_setaffinity(0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x10d082)
r1 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000)

08:21:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_timeval(r0, 0x1, 0x4, 0x0, &(0x7f0000000080))

08:21:44 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x4b2f, 0x8)

08:21:44 executing program 5:
r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0)

08:21:44 executing program 4:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
truncate(&(0x7f0000000040)='./bus\x00', 0x0)

08:21:44 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x4, 0x3, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0)

[   60.814202][ T5314] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
08:21:45 executing program 2:
sched_setaffinity(0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x10d082)
r1 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000)

08:21:45 executing program 4:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
truncate(&(0x7f0000000040)='./bus\x00', 0x0)

08:21:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_timeval(r0, 0x1, 0x4, 0x0, &(0x7f0000000080))

08:21:45 executing program 5:
r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0)

[   60.896032][ T5338] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
08:21:45 executing program 2:
sched_setaffinity(0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x10d082)
r1 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000)

08:21:45 executing program 4:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
truncate(&(0x7f0000000040)='./bus\x00', 0x0)

08:21:45 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x4b2f, 0x8)

08:21:45 executing program 1:
r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0)

08:21:45 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x4, 0x3, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0)

08:21:45 executing program 5:
r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0)

08:21:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x33fe0)
dup3(r0, r1, 0x0)

08:21:45 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x4, 0x3, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}]}]}, 0x44}}, 0x0)

08:21:45 executing program 1:
r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0)

[   61.018640][ T5363] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
08:21:45 executing program 5:
r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0)

08:21:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x33fe0)
dup3(r0, r1, 0x0)

08:21:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4)

[   61.082796][ T5379] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
08:21:45 executing program 2:
sched_setaffinity(0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x10d082)
r1 = memfd_create(&(0x7f0000001840)='\xbb\x02\xb1\xed\x97\xcb\xb1,\x116\xe0\x89]\xad\x01\xc3r%;\x99\xbck\xe7=\xfa\xf6HB\x00\x9e\xc0\xa9\xc9\x88\xc7\x82\x9a\x94g\xda\xa6q\x15\xf5\xe1\x86\x8e\x1d\xdf\x9d+,\x00\xd7h\xa4\x06jtl\x00\x00\x00\x00!\xf8\xac\xdc\x00\x00\x00\xd5\\\x01g\xfd\x92\x06\xb9|\x9d\xec\xdb\x9d\x94i`8t\xbd\xe8\xbfO\xb2\x1a\xfc\xff\xff\xff\xff\xff\xff\xff\x1a\xed\xaaqE\xa8\x01\x05\x00\x00\x00\x00\x00\x00\x00\x91l\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000)

08:21:45 executing program 1:
r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0)

08:21:45 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x49, &(0x7f0000000000)={0x200, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)

08:21:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x33fe0)
dup3(r0, r1, 0x0)

08:21:45 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000002c0)={0x2}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000200)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/193}, 0xc9, 0x2, 0x2000)

08:21:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4)

08:21:45 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x33fe0)
dup3(r0, r1, 0x0)

08:21:45 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x49, &(0x7f0000000000)={0x200, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)

08:21:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4)

08:21:45 executing program 1:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

08:21:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4)

08:21:45 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000002c0)={0x2}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000200)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/193}, 0xc9, 0x2, 0x2000)

08:21:45 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)

08:21:45 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x49, &(0x7f0000000000)={0x200, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)

08:21:45 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x7})

08:21:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4)

08:21:45 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000002c0)={0x2}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000200)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/193}, 0xc9, 0x2, 0x2000)

08:21:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4)

08:21:45 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x49, &(0x7f0000000000)={0x200, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)

08:21:45 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)

08:21:45 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x7})

08:21:45 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000002c0)={0x2}, 0x8, 0x0)
msgsnd(r0, &(0x7f0000000200)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/193}, 0xc9, 0x2, 0x2000)

08:21:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4)

08:21:45 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100081e670325132510000e67032510300000000002e2e202020202020202020100081e670325132510000e670325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200081e670325132510000e670325104001a040000", 0x80, 0x1600}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1800}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x1e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4400}], 0x0, &(0x7f0000010d00))

08:21:45 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
unshare(0x24000400)
ioctl$MON_IOCQ_URB_LEN(r0, 0x80089203)

08:21:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:21:45 executing program 0:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RLINK(r0, &(0x7f0000000040)={0xffffffffffffff1c}, 0x100000001)

08:21:45 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)

08:21:45 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
unshare(0x24000400)
ioctl$MON_IOCQ_URB_LEN(r0, 0x80089203)

08:21:45 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x7})

[   61.474646][ T5456] loop2: detected capacity change from 0 to 128
08:21:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
lseek(r1, 0x1ff, 0x0)

08:21:45 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)

08:21:45 executing program 0:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RLINK(r0, &(0x7f0000000040)={0xffffffffffffff1c}, 0x100000001)

08:21:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:21:45 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
unshare(0x24000400)
ioctl$MON_IOCQ_URB_LEN(r0, 0x80089203)

08:21:45 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:21:45 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x7})

08:21:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:21:45 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
unshare(0x24000400)
ioctl$MON_IOCQ_URB_LEN(r0, 0x80089203)

08:21:45 executing program 0:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RLINK(r0, &(0x7f0000000040)={0xffffffffffffff1c}, 0x100000001)

08:21:45 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0, 0x22}], 0x1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
getsockopt$inet6_int(r2, 0x29, 0x1f, 0x0, &(0x7f0000000080))

08:21:45 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:21:45 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec353", 0x5c}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x1e)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

08:21:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:21:45 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/netlink\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r1, r0, 0x0, 0x20000000000000d8)
fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb0020800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fb7bbfb}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c090}, 0x4044)
writev(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5)

08:21:45 executing program 0:
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
write$P9_RLINK(r0, &(0x7f0000000040)={0xffffffffffffff1c}, 0x100000001)

08:21:45 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="66530700ae897094e71b0fa1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec353", 0x5c}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x1e)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)