Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts.
2023/10/27 12:14:34 fuzzer started
2023/10/27 12:14:35 dialing manager at 10.128.0.169:30013
[  149.238000][ T4991] cgroup: Unknown subsys name 'net'
[  149.378470][ T4991] cgroup: Unknown subsys name 'rlimit'
[  152.354058][ T1211] ieee802154 phy0 wpan0: encryption failed: -22
[  152.360722][ T1211] ieee802154 phy1 wpan1: encryption failed: -22
2023/10/27 12:15:20 syscalls: 3796
2023/10/27 12:15:20 code coverage: enabled
2023/10/27 12:15:20 comparison tracing: enabled
2023/10/27 12:15:20 extra coverage: enabled
2023/10/27 12:15:20 delay kcov mmap: enabled
2023/10/27 12:15:20 setuid sandbox: enabled
2023/10/27 12:15:20 namespace sandbox: enabled
2023/10/27 12:15:20 Android sandbox: /sys/fs/selinux/policy does not exist
2023/10/27 12:15:20 fault injection: enabled
2023/10/27 12:15:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2023/10/27 12:15:20 net packet injection: enabled
2023/10/27 12:15:20 net device setup: enabled
2023/10/27 12:15:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/10/27 12:15:20 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/10/27 12:15:20 NIC VF setup: PCI device 0000:00:11.0 is not available
2023/10/27 12:15:20 USB emulation: enabled
2023/10/27 12:15:20 hci packet injection: enabled
2023/10/27 12:15:20 wifi device emulation: enabled
2023/10/27 12:15:20 802.15.4 emulation: enabled
2023/10/27 12:15:20 swap file: enabled
2023/10/27 12:15:20 fetching corpus: 0, signal 0/2000 (executing program)
[  193.443785][ T4991] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
2023/10/27 12:15:20 fetching corpus: 50, signal 16063/19901 (executing program)
2023/10/27 12:15:20 fetching corpus: 100, signal 25446/31092 (executing program)
2023/10/27 12:15:20 fetching corpus: 150, signal 34168/41553 (executing program)
2023/10/27 12:15:20 fetching corpus: 200, signal 40258/49340 (executing program)
2023/10/27 12:15:20 fetching corpus: 250, signal 43900/54660 (executing program)
2023/10/27 12:15:20 fetching corpus: 300, signal 48292/60709 (executing program)
2023/10/27 12:15:20 fetching corpus: 350, signal 54009/68025 (executing program)
2023/10/27 12:15:20 fetching corpus: 400, signal 57319/72952 (executing program)
2023/10/27 12:15:21 fetching corpus: 450, signal 60268/77513 (executing program)
2023/10/27 12:15:21 fetching corpus: 500, signal 62136/81033 (executing program)
2023/10/27 12:15:21 fetching corpus: 550, signal 66169/86580 (executing program)
2023/10/27 12:15:21 fetching corpus: 600, signal 69043/90998 (executing program)
2023/10/27 12:15:21 fetching corpus: 650, signal 71423/94908 (executing program)
2023/10/27 12:15:21 fetching corpus: 700, signal 74234/99203 (executing program)
2023/10/27 12:15:21 fetching corpus: 750, signal 76479/102982 (executing program)
2023/10/27 12:15:21 fetching corpus: 800, signal 80140/108016 (executing program)
2023/10/27 12:15:21 fetching corpus: 850, signal 83159/112403 (executing program)
2023/10/27 12:15:21 fetching corpus: 900, signal 86613/117212 (executing program)
2023/10/27 12:15:21 fetching corpus: 950, signal 88470/120552 (executing program)
2023/10/27 12:15:21 fetching corpus: 1000, signal 89992/123550 (executing program)
2023/10/27 12:15:21 fetching corpus: 1050, signal 92107/127027 (executing program)
2023/10/27 12:15:21 fetching corpus: 1100, signal 93997/130308 (executing program)
2023/10/27 12:15:22 fetching corpus: 1150, signal 95644/133374 (executing program)
2023/10/27 12:15:22 fetching corpus: 1200, signal 97527/136601 (executing program)
2023/10/27 12:15:22 fetching corpus: 1250, signal 99499/139906 (executing program)
2023/10/27 12:15:22 fetching corpus: 1300, signal 102393/143984 (executing program)
2023/10/27 12:15:22 fetching corpus: 1350, signal 104258/147114 (executing program)
2023/10/27 12:15:22 fetching corpus: 1400, signal 105995/150204 (executing program)
2023/10/27 12:15:22 fetching corpus: 1450, signal 107294/152851 (executing program)
2023/10/27 12:15:22 fetching corpus: 1500, signal 109281/156070 (executing program)
2023/10/27 12:15:22 fetching corpus: 1550, signal 110635/158724 (executing program)
2023/10/27 12:15:22 fetching corpus: 1600, signal 112659/161964 (executing program)
2023/10/27 12:15:23 fetching corpus: 1650, signal 114416/164925 (executing program)
2023/10/27 12:15:23 fetching corpus: 1700, signal 115435/167287 (executing program)
2023/10/27 12:15:23 fetching corpus: 1750, signal 116303/169513 (executing program)
2023/10/27 12:15:23 fetching corpus: 1800, signal 118440/172774 (executing program)
2023/10/27 12:15:23 fetching corpus: 1850, signal 119386/175043 (executing program)
2023/10/27 12:15:23 fetching corpus: 1900, signal 120912/177795 (executing program)
2023/10/27 12:15:23 fetching corpus: 1950, signal 122248/180369 (executing program)
2023/10/27 12:15:23 fetching corpus: 2000, signal 124682/183849 (executing program)
2023/10/27 12:15:23 fetching corpus: 2050, signal 126355/186630 (executing program)
2023/10/27 12:15:23 fetching corpus: 2100, signal 127809/189249 (executing program)
2023/10/27 12:15:23 fetching corpus: 2150, signal 129682/192174 (executing program)
2023/10/27 12:15:23 fetching corpus: 2200, signal 130783/194500 (executing program)
2023/10/27 12:15:23 fetching corpus: 2250, signal 132180/197056 (executing program)
2023/10/27 12:15:24 fetching corpus: 2300, signal 133683/199662 (executing program)
2023/10/27 12:15:24 fetching corpus: 2350, signal 135136/202175 (executing program)
2023/10/27 12:15:24 fetching corpus: 2400, signal 136350/204493 (executing program)
2023/10/27 12:15:24 fetching corpus: 2450, signal 137731/206991 (executing program)
2023/10/27 12:15:24 fetching corpus: 2500, signal 138994/209372 (executing program)
2023/10/27 12:15:24 fetching corpus: 2550, signal 140252/211701 (executing program)
2023/10/27 12:15:24 fetching corpus: 2600, signal 141357/213891 (executing program)
2023/10/27 12:15:24 fetching corpus: 2650, signal 142204/215911 (executing program)
2023/10/27 12:15:24 fetching corpus: 2700, signal 143183/218006 (executing program)
2023/10/27 12:15:24 fetching corpus: 2750, signal 144486/220317 (executing program)
2023/10/27 12:15:24 fetching corpus: 2800, signal 146324/223025 (executing program)
2023/10/27 12:15:24 fetching corpus: 2850, signal 147736/225401 (executing program)
2023/10/27 12:15:24 fetching corpus: 2900, signal 148853/227567 (executing program)
2023/10/27 12:15:25 fetching corpus: 2950, signal 150378/230010 (executing program)
2023/10/27 12:15:25 fetching corpus: 3000, signal 151313/232016 (executing program)
2023/10/27 12:15:25 fetching corpus: 3050, signal 152979/234494 (executing program)
2023/10/27 12:15:25 fetching corpus: 3100, signal 153918/236522 (executing program)
2023/10/27 12:15:25 fetching corpus: 3150, signal 154835/238478 (executing program)
2023/10/27 12:15:25 fetching corpus: 3200, signal 157844/241901 (executing program)
2023/10/27 12:15:25 fetching corpus: 3250, signal 158999/244018 (executing program)
2023/10/27 12:15:25 fetching corpus: 3300, signal 160108/246104 (executing program)
2023/10/27 12:15:25 fetching corpus: 3350, signal 160935/247910 (executing program)
2023/10/27 12:15:25 fetching corpus: 3400, signal 161568/249577 (executing program)
2023/10/27 12:15:25 fetching corpus: 3450, signal 162466/251536 (executing program)
2023/10/27 12:15:25 fetching corpus: 3500, signal 163259/253377 (executing program)
2023/10/27 12:15:26 fetching corpus: 3550, signal 163964/255053 (executing program)
2023/10/27 12:15:26 fetching corpus: 3600, signal 165231/257114 (executing program)
2023/10/27 12:15:26 fetching corpus: 3650, signal 166233/258996 (executing program)
2023/10/27 12:15:26 fetching corpus: 3700, signal 167207/260894 (executing program)
2023/10/27 12:15:26 fetching corpus: 3750, signal 168263/262840 (executing program)
2023/10/27 12:15:26 fetching corpus: 3800, signal 168968/264542 (executing program)
2023/10/27 12:15:26 fetching corpus: 3850, signal 170563/266810 (executing program)
2023/10/27 12:15:26 fetching corpus: 3900, signal 171265/268557 (executing program)
2023/10/27 12:15:26 fetching corpus: 3950, signal 172078/270328 (executing program)
2023/10/27 12:15:26 fetching corpus: 4000, signal 172999/272107 (executing program)
2023/10/27 12:15:26 fetching corpus: 4050, signal 173507/273672 (executing program)
2023/10/27 12:15:26 fetching corpus: 4100, signal 174319/275386 (executing program)
2023/10/27 12:15:26 fetching corpus: 4150, signal 175180/277107 (executing program)
2023/10/27 12:15:26 fetching corpus: 4200, signal 175963/278786 (executing program)
2023/10/27 12:15:26 fetching corpus: 4250, signal 176720/280460 (executing program)
2023/10/27 12:15:27 fetching corpus: 4300, signal 177462/282125 (executing program)
2023/10/27 12:15:27 fetching corpus: 4350, signal 178796/284116 (executing program)
2023/10/27 12:15:27 fetching corpus: 4400, signal 179613/285811 (executing program)
2023/10/27 12:15:27 fetching corpus: 4450, signal 180104/287301 (executing program)
2023/10/27 12:15:27 fetching corpus: 4500, signal 180990/289013 (executing program)
2023/10/27 12:15:27 fetching corpus: 4550, signal 181588/290532 (executing program)
2023/10/27 12:15:27 fetching corpus: 4600, signal 182345/292188 (executing program)
2023/10/27 12:15:27 fetching corpus: 4650, signal 183193/293884 (executing program)
2023/10/27 12:15:27 fetching corpus: 4700, signal 183979/295516 (executing program)
2023/10/27 12:15:27 fetching corpus: 4750, signal 184760/297149 (executing program)
2023/10/27 12:15:27 fetching corpus: 4800, signal 185380/298680 (executing program)
2023/10/27 12:15:28 fetching corpus: 4850, signal 186148/300264 (executing program)
2023/10/27 12:15:28 fetching corpus: 4900, signal 186823/301803 (executing program)
2023/10/27 12:15:28 fetching corpus: 4950, signal 187330/303228 (executing program)
2023/10/27 12:15:28 fetching corpus: 5000, signal 188051/304773 (executing program)
2023/10/27 12:15:28 fetching corpus: 5050, signal 188833/306317 (executing program)
2023/10/27 12:15:28 fetching corpus: 5100, signal 189684/307896 (executing program)
2023/10/27 12:15:28 fetching corpus: 5150, signal 190615/309499 (executing program)
2023/10/27 12:15:28 fetching corpus: 5200, signal 191283/311027 (executing program)
2023/10/27 12:15:28 fetching corpus: 5250, signal 192084/312614 (executing program)
2023/10/27 12:15:28 fetching corpus: 5300, signal 192812/314144 (executing program)
2023/10/27 12:15:28 fetching corpus: 5350, signal 193373/315533 (executing program)
2023/10/27 12:15:28 fetching corpus: 5400, signal 193908/316924 (executing program)
2023/10/27 12:15:28 fetching corpus: 5450, signal 194525/318340 (executing program)
2023/10/27 12:15:28 fetching corpus: 5500, signal 195321/319844 (executing program)
2023/10/27 12:15:29 fetching corpus: 5550, signal 195814/321216 (executing program)
2023/10/27 12:15:29 fetching corpus: 5600, signal 196569/322710 (executing program)
2023/10/27 12:15:29 fetching corpus: 5650, signal 197345/324174 (executing program)
2023/10/27 12:15:29 fetching corpus: 5700, signal 197874/325497 (executing program)
2023/10/27 12:15:29 fetching corpus: 5750, signal 198608/326926 (executing program)
2023/10/27 12:15:29 fetching corpus: 5800, signal 199125/328298 (executing program)
2023/10/27 12:15:29 fetching corpus: 5850, signal 200566/330126 (executing program)
2023/10/27 12:15:29 fetching corpus: 5900, signal 201462/331569 (executing program)
2023/10/27 12:15:29 fetching corpus: 5950, signal 202131/332961 (executing program)
2023/10/27 12:15:29 fetching corpus: 6000, signal 202727/334336 (executing program)
2023/10/27 12:15:29 fetching corpus: 6050, signal 203322/335649 (executing program)
2023/10/27 12:15:29 fetching corpus: 6100, signal 204718/337275 (executing program)
2023/10/27 12:15:30 fetching corpus: 6150, signal 205539/338677 (executing program)
2023/10/27 12:15:30 fetching corpus: 6200, signal 205943/339947 (executing program)
2023/10/27 12:15:30 fetching corpus: 6250, signal 206953/341459 (executing program)
2023/10/27 12:15:30 fetching corpus: 6300, signal 207550/342789 (executing program)
2023/10/27 12:15:30 fetching corpus: 6350, signal 208466/344205 (executing program)
2023/10/27 12:15:30 fetching corpus: 6400, signal 209025/345493 (executing program)
2023/10/27 12:15:30 fetching corpus: 6450, signal 209674/346844 (executing program)
2023/10/27 12:15:30 fetching corpus: 6500, signal 210202/348095 (executing program)
2023/10/27 12:15:30 fetching corpus: 6550, signal 210736/349396 (executing program)
2023/10/27 12:15:30 fetching corpus: 6600, signal 211156/350552 (executing program)
2023/10/27 12:15:30 fetching corpus: 6650, signal 211614/351793 (executing program)
2023/10/27 12:15:31 fetching corpus: 6700, signal 212473/353164 (executing program)
2023/10/27 12:15:31 fetching corpus: 6750, signal 213530/354622 (executing program)
2023/10/27 12:15:31 fetching corpus: 6800, signal 214835/356169 (executing program)
2023/10/27 12:15:31 fetching corpus: 6850, signal 215540/357463 (executing program)
2023/10/27 12:15:31 fetching corpus: 6900, signal 215908/358623 (executing program)
2023/10/27 12:15:31 fetching corpus: 6950, signal 216420/359815 (executing program)
2023/10/27 12:15:31 fetching corpus: 7000, signal 217361/361139 (executing program)
2023/10/27 12:15:31 fetching corpus: 7050, signal 217948/362383 (executing program)
2023/10/27 12:15:31 fetching corpus: 7100, signal 218683/363680 (executing program)
2023/10/27 12:15:31 fetching corpus: 7150, signal 219314/364931 (executing program)
2023/10/27 12:15:31 fetching corpus: 7200, signal 219807/366093 (executing program)
2023/10/27 12:15:31 fetching corpus: 7250, signal 220506/367333 (executing program)
2023/10/27 12:15:32 fetching corpus: 7300, signal 221130/368494 (executing program)
2023/10/27 12:15:32 fetching corpus: 7350, signal 221571/369674 (executing program)
2023/10/27 12:15:32 fetching corpus: 7400, signal 222059/370845 (executing program)
2023/10/27 12:15:32 fetching corpus: 7450, signal 222559/372045 (executing program)
2023/10/27 12:15:32 fetching corpus: 7500, signal 223218/373233 (executing program)
2023/10/27 12:15:32 fetching corpus: 7550, signal 223783/374365 (executing program)
2023/10/27 12:15:32 fetching corpus: 7600, signal 224144/375480 (executing program)
2023/10/27 12:15:32 fetching corpus: 7650, signal 224511/376596 (executing program)
2023/10/27 12:15:32 fetching corpus: 7700, signal 224968/377712 (executing program)
2023/10/27 12:15:32 fetching corpus: 7750, signal 225352/378834 (executing program)
2023/10/27 12:15:32 fetching corpus: 7800, signal 225992/379984 (executing program)
2023/10/27 12:15:33 fetching corpus: 7850, signal 226526/381109 (executing program)
2023/10/27 12:15:33 fetching corpus: 7900, signal 227010/382234 (executing program)
2023/10/27 12:15:33 fetching corpus: 7950, signal 228298/383595 (executing program)
2023/10/27 12:15:33 fetching corpus: 8000, signal 228959/384716 (executing program)
2023/10/27 12:15:33 fetching corpus: 8050, signal 229454/385843 (executing program)
2023/10/27 12:15:33 fetching corpus: 8100, signal 229972/386961 (executing program)
2023/10/27 12:15:33 fetching corpus: 8150, signal 230391/388063 (executing program)
2023/10/27 12:15:33 fetching corpus: 8200, signal 231315/389200 (executing program)
2023/10/27 12:15:33 fetching corpus: 8250, signal 231779/390283 (executing program)
2023/10/27 12:15:33 fetching corpus: 8300, signal 232660/391432 (executing program)
2023/10/27 12:15:33 fetching corpus: 8350, signal 233115/392497 (executing program)
2023/10/27 12:15:34 fetching corpus: 8400, signal 233742/393608 (executing program)
2023/10/27 12:15:34 fetching corpus: 8450, signal 234086/394663 (executing program)
2023/10/27 12:15:34 fetching corpus: 8500, signal 234515/395745 (executing program)
2023/10/27 12:15:34 fetching corpus: 8550, signal 235280/396869 (executing program)
2023/10/27 12:15:34 fetching corpus: 8600, signal 235863/397858 (executing program)
2023/10/27 12:15:34 fetching corpus: 8650, signal 236386/398853 (executing program)
2023/10/27 12:15:34 fetching corpus: 8700, signal 237064/399957 (executing program)
2023/10/27 12:15:34 fetching corpus: 8750, signal 237785/400987 (executing program)
2023/10/27 12:15:34 fetching corpus: 8800, signal 238256/402021 (executing program)
2023/10/27 12:15:34 fetching corpus: 8850, signal 238989/403066 (executing program)
2023/10/27 12:15:34 fetching corpus: 8900, signal 239460/404029 (executing program)
2023/10/27 12:15:34 fetching corpus: 8950, signal 239945/405009 (executing program)
2023/10/27 12:15:34 fetching corpus: 9000, signal 240538/406110 (executing program)
2023/10/27 12:15:35 fetching corpus: 9050, signal 241103/407116 (executing program)
2023/10/27 12:15:35 fetching corpus: 9100, signal 241483/408107 (executing program)
2023/10/27 12:15:35 fetching corpus: 9150, signal 241792/409105 (executing program)
2023/10/27 12:15:35 fetching corpus: 9200, signal 242308/410145 (executing program)
2023/10/27 12:15:35 fetching corpus: 9250, signal 242773/411118 (executing program)
2023/10/27 12:15:35 fetching corpus: 9300, signal 243312/412087 (executing program)
2023/10/27 12:15:35 fetching corpus: 9350, signal 243790/413030 (executing program)
2023/10/27 12:15:35 fetching corpus: 9400, signal 244440/413994 (executing program)
2023/10/27 12:15:35 fetching corpus: 9450, signal 244701/414931 (executing program)
2023/10/27 12:15:35 fetching corpus: 9500, signal 245049/415872 (executing program)
2023/10/27 12:15:35 fetching corpus: 9550, signal 245749/416843 (executing program)
2023/10/27 12:15:35 fetching corpus: 9600, signal 246624/417839 (executing program)
2023/10/27 12:15:35 fetching corpus: 9650, signal 247163/418790 (executing program)
2023/10/27 12:15:36 fetching corpus: 9700, signal 247453/419678 (executing program)
2023/10/27 12:15:36 fetching corpus: 9750, signal 248021/420687 (executing program)
2023/10/27 12:15:36 fetching corpus: 9800, signal 248684/421649 (executing program)
2023/10/27 12:15:36 fetching corpus: 9850, signal 249024/422565 (executing program)
2023/10/27 12:15:36 fetching corpus: 9900, signal 249381/423474 (executing program)
2023/10/27 12:15:36 fetching corpus: 9950, signal 249781/424398 (executing program)
2023/10/27 12:15:36 fetching corpus: 10000, signal 250258/425288 (executing program)
2023/10/27 12:15:36 fetching corpus: 10050, signal 250678/426217 (executing program)
2023/10/27 12:15:36 fetching corpus: 10100, signal 251048/427101 (executing program)
2023/10/27 12:15:36 fetching corpus: 10150, signal 251436/428019 (executing program)
2023/10/27 12:15:37 fetching corpus: 10200, signal 251835/428900 (executing program)
2023/10/27 12:15:37 fetching corpus: 10250, signal 252204/429790 (executing program)
2023/10/27 12:15:37 fetching corpus: 10300, signal 252742/430669 (executing program)
2023/10/27 12:15:37 fetching corpus: 10350, signal 253643/431576 (executing program)
2023/10/27 12:15:37 fetching corpus: 10400, signal 254027/432430 (executing program)
2023/10/27 12:15:37 fetching corpus: 10450, signal 254361/433302 (executing program)
2023/10/27 12:15:37 fetching corpus: 10500, signal 254940/434195 (executing program)
2023/10/27 12:15:37 fetching corpus: 10550, signal 255358/435077 (executing program)
2023/10/27 12:15:37 fetching corpus: 10600, signal 255750/435923 (executing program)
2023/10/27 12:15:37 fetching corpus: 10650, signal 256170/436759 (executing program)
2023/10/27 12:15:37 fetching corpus: 10700, signal 256504/437640 (executing program)
2023/10/27 12:15:38 fetching corpus: 10750, signal 257306/438505 (executing program)
2023/10/27 12:15:38 fetching corpus: 10800, signal 257483/439373 (executing program)
2023/10/27 12:15:38 fetching corpus: 10850, signal 257870/440191 (executing program)
2023/10/27 12:15:38 fetching corpus: 10900, signal 258216/441027 (executing program)
2023/10/27 12:15:38 fetching corpus: 10950, signal 258838/441855 (executing program)
2023/10/27 12:15:38 fetching corpus: 11000, signal 259330/442705 (executing program)
2023/10/27 12:15:38 fetching corpus: 11050, signal 259822/443228 (executing program)
2023/10/27 12:15:38 fetching corpus: 11100, signal 260315/443228 (executing program)
2023/10/27 12:15:38 fetching corpus: 11150, signal 260743/443228 (executing program)
2023/10/27 12:15:38 fetching corpus: 11200, signal 261104/443228 (executing program)
2023/10/27 12:15:38 fetching corpus: 11250, signal 261578/443229 (executing program)
2023/10/27 12:15:38 fetching corpus: 11300, signal 262422/443229 (executing program)
2023/10/27 12:15:38 fetching corpus: 11350, signal 262860/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11400, signal 263172/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11450, signal 263633/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11500, signal 264089/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11550, signal 264488/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11600, signal 264812/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11650, signal 265280/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11700, signal 265630/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11750, signal 266042/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11800, signal 266372/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11850, signal 266711/443229 (executing program)
2023/10/27 12:15:39 fetching corpus: 11900, signal 267068/443229 (executing program)
2023/10/27 12:15:40 fetching corpus: 11950, signal 267379/443229 (executing program)
2023/10/27 12:15:40 fetching corpus: 12000, signal 267813/443229 (executing program)
2023/10/27 12:15:40 fetching corpus: 12050, signal 268174/443229 (executing program)
2023/10/27 12:15:40 fetching corpus: 12100, signal 268464/443229 (executing program)
2023/10/27 12:15:40 fetching corpus: 12150, signal 268810/443229 (executing program)
2023/10/27 12:15:40 fetching corpus: 12200, signal 269306/443229 (executing program)
2023/10/27 12:15:40 fetching corpus: 12250, signal 269677/443229 (executing program)
2023/10/27 12:15:40 fetching corpus: 12300, signal 270055/443229 (executing program)
[  213.814650][ T1211] ieee802154 phy0 wpan0: encryption failed: -22
[  213.821397][ T1211] ieee802154 phy1 wpan1: encryption failed: -22
2023/10/27 12:15:40 fetching corpus: 12350, signal 270382/443229 (executing program)
2023/10/27 12:15:40 fetching corpus: 12400, signal 270754/443229 (executing program)
2023/10/27 12:15:40 fetching corpus: 12450, signal 271150/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 12500, signal 271639/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 12550, signal 271996/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 12600, signal 272376/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 12650, signal 272808/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 12700, signal 273258/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 12750, signal 273685/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 12800, signal 273964/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 12850, signal 274482/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 12900, signal 274810/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 12950, signal 275306/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 13000, signal 275605/443229 (executing program)
2023/10/27 12:15:41 fetching corpus: 13050, signal 275978/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13100, signal 276487/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13150, signal 277094/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13200, signal 277589/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13250, signal 277857/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13300, signal 278253/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13350, signal 278565/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13400, signal 278887/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13450, signal 279282/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13500, signal 279648/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13550, signal 280028/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13600, signal 280345/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13650, signal 280654/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13700, signal 280912/443229 (executing program)
2023/10/27 12:15:42 fetching corpus: 13750, signal 281314/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 13800, signal 281577/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 13850, signal 282018/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 13900, signal 282846/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 13950, signal 283194/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 14000, signal 283480/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 14050, signal 283721/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 14100, signal 284183/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 14150, signal 284563/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 14200, signal 285035/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 14250, signal 285325/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 14300, signal 285582/443229 (executing program)
2023/10/27 12:15:43 fetching corpus: 14350, signal 285930/443229 (executing program)
2023/10/27 12:15:44 fetching corpus: 14400, signal 286346/443229 (executing program)
2023/10/27 12:15:44 fetching corpus: 14450, signal 286755/443229 (executing program)
2023/10/27 12:15:44 fetching corpus: 14500, signal 287097/443230 (executing program)
2023/10/27 12:15:44 fetching corpus: 14550, signal 287419/443230 (executing program)
2023/10/27 12:15:44 fetching corpus: 14600, signal 287983/443230 (executing program)
2023/10/27 12:15:44 fetching corpus: 14650, signal 288358/443230 (executing program)
2023/10/27 12:15:44 fetching corpus: 14700, signal 288652/443230 (executing program)
2023/10/27 12:15:44 fetching corpus: 14750, signal 288867/443230 (executing program)
2023/10/27 12:15:44 fetching corpus: 14800, signal 289128/443230 (executing program)
2023/10/27 12:15:44 fetching corpus: 14850, signal 289373/443230 (executing program)
2023/10/27 12:15:44 fetching corpus: 14900, signal 289729/443230 (executing program)
2023/10/27 12:15:44 fetching corpus: 14950, signal 290034/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15000, signal 290276/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15050, signal 290670/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15100, signal 291361/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15150, signal 291666/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15200, signal 291916/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15250, signal 292219/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15300, signal 292656/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15350, signal 292930/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15400, signal 293217/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15450, signal 293510/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15500, signal 293794/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15550, signal 294118/443230 (executing program)
2023/10/27 12:15:45 fetching corpus: 15600, signal 294398/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 15650, signal 294786/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 15700, signal 295050/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 15750, signal 295586/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 15800, signal 295816/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 15850, signal 296167/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 15900, signal 296429/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 15950, signal 296733/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 16000, signal 296984/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 16050, signal 297324/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 16100, signal 297502/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 16150, signal 297931/443230 (executing program)
2023/10/27 12:15:46 fetching corpus: 16200, signal 298212/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16250, signal 298512/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16300, signal 298894/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16350, signal 299139/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16400, signal 299397/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16450, signal 299596/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16500, signal 299903/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16550, signal 300318/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16600, signal 300623/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16650, signal 300880/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16700, signal 301231/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16750, signal 301492/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16800, signal 302092/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16850, signal 302470/443230 (executing program)
2023/10/27 12:15:47 fetching corpus: 16900, signal 302723/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 16950, signal 303120/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 17000, signal 303475/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 17050, signal 303762/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 17100, signal 304031/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 17150, signal 304353/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 17200, signal 304719/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 17250, signal 304917/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 17300, signal 305345/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 17350, signal 305564/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 17400, signal 305811/443230 (executing program)
2023/10/27 12:15:48 fetching corpus: 17450, signal 306299/443232 (executing program)
2023/10/27 12:15:48 fetching corpus: 17500, signal 306486/443232 (executing program)
2023/10/27 12:15:48 fetching corpus: 17550, signal 306769/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 17600, signal 307127/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 17650, signal 307325/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 17700, signal 307618/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 17750, signal 307930/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 17800, signal 308225/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 17850, signal 308499/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 17900, signal 308684/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 17950, signal 309385/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 18000, signal 309929/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 18050, signal 310245/443232 (executing program)
2023/10/27 12:15:49 fetching corpus: 18100, signal 310526/443232 (executing program)
2023/10/27 12:15:50 fetching corpus: 18150, signal 310772/443232 (executing program)
2023/10/27 12:15:50 fetching corpus: 18200, signal 311343/443232 (executing program)
2023/10/27 12:15:50 fetching corpus: 18250, signal 311764/443232 (executing program)
2023/10/27 12:15:50 fetching corpus: 18300, signal 312020/443232 (executing program)
2023/10/27 12:15:50 fetching corpus: 18350, signal 312265/443232 (executing program)
2023/10/27 12:15:50 fetching corpus: 18400, signal 312517/443234 (executing program)
2023/10/27 12:15:50 fetching corpus: 18450, signal 312864/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 18500, signal 313230/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 18550, signal 313460/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 18600, signal 313739/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 18650, signal 314074/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 18700, signal 314376/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 18750, signal 314611/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 18800, signal 315571/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 18850, signal 315781/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 18900, signal 316033/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 18950, signal 316285/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 19000, signal 316657/443234 (executing program)
2023/10/27 12:15:51 fetching corpus: 19050, signal 316941/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19100, signal 317202/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19150, signal 317645/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19200, signal 318153/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19250, signal 318481/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19300, signal 318758/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19350, signal 318954/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19400, signal 319439/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19450, signal 319675/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19500, signal 319941/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19550, signal 320213/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19600, signal 320471/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19650, signal 320792/443234 (executing program)
2023/10/27 12:15:52 fetching corpus: 19700, signal 321088/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 19750, signal 321314/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 19800, signal 321541/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 19850, signal 321712/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 19900, signal 321948/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 19950, signal 322152/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 20000, signal 322366/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 20050, signal 322550/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 20100, signal 322853/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 20150, signal 323276/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 20200, signal 323650/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 20250, signal 323922/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 20300, signal 324250/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 20350, signal 324517/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 20400, signal 324750/443234 (executing program)
2023/10/27 12:15:53 fetching corpus: 20450, signal 324960/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 20500, signal 325139/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 20550, signal 325315/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 20600, signal 325632/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 20650, signal 325818/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 20700, signal 326086/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 20750, signal 326519/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 20800, signal 326722/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 20850, signal 326977/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 20900, signal 327313/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 20950, signal 327520/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 21000, signal 327816/443234 (executing program)
2023/10/27 12:15:54 fetching corpus: 21050, signal 328088/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21100, signal 328283/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21150, signal 328703/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21200, signal 328978/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21250, signal 329217/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21300, signal 329424/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21350, signal 329732/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21400, signal 330067/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21450, signal 330573/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21500, signal 330921/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21550, signal 331138/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21600, signal 331354/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21650, signal 331816/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21700, signal 332152/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21750, signal 332415/443234 (executing program)
2023/10/27 12:15:55 fetching corpus: 21800, signal 332873/443234 (executing program)
2023/10/27 12:15:56 fetching corpus: 21850, signal 333073/443234 (executing program)
2023/10/27 12:15:56 fetching corpus: 21900, signal 333380/443234 (executing program)
2023/10/27 12:15:56 fetching corpus: 21950, signal 333594/443234 (executing program)
2023/10/27 12:15:56 fetching corpus: 22000, signal 333816/443234 (executing program)
2023/10/27 12:15:56 fetching corpus: 22050, signal 334046/443234 (executing program)
2023/10/27 12:15:56 fetching corpus: 22100, signal 334485/443234 (executing program)
2023/10/27 12:15:56 fetching corpus: 22150, signal 334697/443234 (executing program)
2023/10/27 12:15:56 fetching corpus: 22200, signal 335052/443234 (executing program)
2023/10/27 12:15:56 fetching corpus: 22250, signal 335204/443234 (executing program)
2023/10/27 12:15:56 fetching corpus: 22300, signal 335432/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22350, signal 335663/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22400, signal 335921/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22450, signal 336162/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22500, signal 336436/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22550, signal 336682/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22600, signal 336926/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22650, signal 337118/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22700, signal 337457/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22750, signal 337706/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22800, signal 337940/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22850, signal 338156/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22900, signal 338384/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 22950, signal 338722/443234 (executing program)
2023/10/27 12:15:57 fetching corpus: 23000, signal 339018/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23050, signal 339199/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23100, signal 339421/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23150, signal 339671/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23200, signal 339900/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23250, signal 340280/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23300, signal 340491/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23350, signal 340714/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23400, signal 341073/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23450, signal 341464/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23500, signal 341700/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23550, signal 341933/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23600, signal 342220/443234 (executing program)
2023/10/27 12:15:58 fetching corpus: 23650, signal 342406/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 23700, signal 342578/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 23750, signal 342774/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 23800, signal 343106/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 23850, signal 343440/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 23900, signal 343743/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 23950, signal 343926/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 24000, signal 344238/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 24050, signal 344490/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 24100, signal 344764/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 24150, signal 344953/443234 (executing program)
2023/10/27 12:15:59 fetching corpus: 24200, signal 345110/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24250, signal 345309/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24300, signal 345551/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24350, signal 345786/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24400, signal 346036/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24450, signal 346260/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24500, signal 346599/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24550, signal 346849/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24600, signal 347068/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24650, signal 347326/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24700, signal 347591/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24750, signal 348032/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24800, signal 348235/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24850, signal 348497/443236 (executing program)
2023/10/27 12:16:00 fetching corpus: 24900, signal 348713/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 24950, signal 348913/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25000, signal 349057/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25050, signal 349396/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25100, signal 349601/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25150, signal 349778/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25200, signal 350029/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25250, signal 350365/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25300, signal 350634/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25350, signal 350921/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25400, signal 351118/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25450, signal 351303/443236 (executing program)
2023/10/27 12:16:01 fetching corpus: 25500, signal 351479/443236 (executing program)
2023/10/27 12:16:02 fetching corpus: 25550, signal 351707/443236 (executing program)
2023/10/27 12:16:02 fetching corpus: 25600, signal 351867/443236 (executing program)
2023/10/27 12:16:02 fetching corpus: 25650, signal 352102/443236 (executing program)
2023/10/27 12:16:02 fetching corpus: 25700, signal 352280/443236 (executing program)
2023/10/27 12:16:02 fetching corpus: 25750, signal 352486/443236 (executing program)
2023/10/27 12:16:02 fetching corpus: 25800, signal 352711/443236 (executing program)
2023/10/27 12:16:02 fetching corpus: 25850, signal 352883/443236 (executing program)
2023/10/27 12:16:02 fetching corpus: 25900, signal 353230/443236 (executing program)
2023/10/27 12:16:02 fetching corpus: 25950, signal 353495/443239 (executing program)
2023/10/27 12:16:02 fetching corpus: 26000, signal 353858/443239 (executing program)
2023/10/27 12:16:02 fetching corpus: 26050, signal 354078/443239 (executing program)
2023/10/27 12:16:02 fetching corpus: 26100, signal 354264/443239 (executing program)
2023/10/27 12:16:02 fetching corpus: 26150, signal 354539/443239 (executing program)
2023/10/27 12:16:02 fetching corpus: 26200, signal 354844/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26250, signal 355358/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26300, signal 355783/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26350, signal 356062/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26400, signal 356291/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26450, signal 356544/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26500, signal 356752/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26550, signal 356916/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26600, signal 357107/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26650, signal 357324/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26700, signal 357675/443239 (executing program)
2023/10/27 12:16:03 fetching corpus: 26750, signal 357886/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 26800, signal 358086/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 26850, signal 358314/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 26900, signal 358528/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 26950, signal 358757/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 27000, signal 358949/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 27050, signal 359206/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 27100, signal 359462/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 27150, signal 359670/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 27200, signal 359846/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 27250, signal 360053/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 27300, signal 360202/443239 (executing program)
2023/10/27 12:16:04 fetching corpus: 27350, signal 360439/443239 (executing program)
2023/10/27 12:16:05 fetching corpus: 27400, signal 360667/443239 (executing program)
2023/10/27 12:16:05 fetching corpus: 27450, signal 360866/443239 (executing program)
2023/10/27 12:16:05 fetching corpus: 27500, signal 361026/443239 (executing program)
2023/10/27 12:16:05 fetching corpus: 27550, signal 361347/443239 (executing program)
2023/10/27 12:16:05 fetching corpus: 27600, signal 361590/443239 (executing program)
2023/10/27 12:16:05 fetching corpus: 27650, signal 361804/443239 (executing program)
2023/10/27 12:16:05 fetching corpus: 27700, signal 361961/443243 (executing program)
2023/10/27 12:16:05 fetching corpus: 27750, signal 362180/443243 (executing program)
2023/10/27 12:16:05 fetching corpus: 27800, signal 362404/443243 (executing program)
2023/10/27 12:16:05 fetching corpus: 27850, signal 362803/443243 (executing program)
2023/10/27 12:16:05 fetching corpus: 27900, signal 363035/443243 (executing program)
2023/10/27 12:16:05 fetching corpus: 27950, signal 363192/443243 (executing program)
2023/10/27 12:16:05 fetching corpus: 28000, signal 363414/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28050, signal 363619/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28100, signal 363871/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28150, signal 364098/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28200, signal 364268/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28250, signal 364493/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28300, signal 364737/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28350, signal 364962/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28400, signal 365161/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28450, signal 365409/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28500, signal 365660/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28550, signal 365955/443243 (executing program)
2023/10/27 12:16:06 fetching corpus: 28600, signal 366156/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 28650, signal 366390/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 28700, signal 366647/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 28750, signal 366825/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 28800, signal 366999/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 28850, signal 367202/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 28900, signal 367423/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 28950, signal 367609/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 29000, signal 367864/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 29050, signal 368047/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 29100, signal 368190/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 29150, signal 368399/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 29200, signal 368614/443243 (executing program)
2023/10/27 12:16:07 fetching corpus: 29250, signal 368947/443243 (executing program)
2023/10/27 12:16:08 fetching corpus: 29300, signal 369221/443243 (executing program)
2023/10/27 12:16:08 fetching corpus: 29350, signal 369537/443243 (executing program)
2023/10/27 12:16:08 fetching corpus: 29400, signal 369723/443243 (executing program)
2023/10/27 12:16:08 fetching corpus: 29450, signal 370003/443243 (executing program)
2023/10/27 12:16:08 fetching corpus: 29500, signal 370199/443243 (executing program)
2023/10/27 12:16:08 fetching corpus: 29550, signal 370407/443243 (executing program)
2023/10/27 12:16:08 fetching corpus: 29600, signal 370631/443243 (executing program)
2023/10/27 12:16:08 fetching corpus: 29650, signal 370800/443243 (executing program)
2023/10/27 12:16:08 fetching corpus: 29700, signal 370959/443243 (executing program)
2023/10/27 12:16:08 fetching corpus: 29750, signal 371166/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 29800, signal 371372/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 29850, signal 371529/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 29900, signal 371739/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 29950, signal 371924/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30000, signal 372172/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30050, signal 372373/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30100, signal 372547/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30150, signal 372801/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30200, signal 373102/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30250, signal 373304/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30300, signal 373493/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30350, signal 373635/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30400, signal 374038/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30450, signal 374272/443243 (executing program)
2023/10/27 12:16:09 fetching corpus: 30500, signal 374473/443243 (executing program)
2023/10/27 12:16:10 fetching corpus: 30550, signal 374692/443243 (executing program)
2023/10/27 12:16:10 fetching corpus: 30600, signal 374941/443243 (executing program)
2023/10/27 12:16:10 fetching corpus: 30650, signal 375116/443243 (executing program)
2023/10/27 12:16:10 fetching corpus: 30700, signal 375371/443243 (executing program)
2023/10/27 12:16:10 fetching corpus: 30750, signal 375598/443243 (executing program)
2023/10/27 12:16:10 fetching corpus: 30800, signal 375770/443243 (executing program)
2023/10/27 12:16:10 fetching corpus: 30850, signal 376042/443243 (executing program)
2023/10/27 12:16:10 fetching corpus: 30900, signal 376269/443243 (executing program)
2023/10/27 12:16:10 fetching corpus: 30950, signal 376431/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31000, signal 376596/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31050, signal 376758/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31100, signal 376946/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31150, signal 377122/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31200, signal 377359/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31250, signal 377565/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31300, signal 377715/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31350, signal 378109/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31400, signal 378487/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31450, signal 378708/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31500, signal 378999/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31550, signal 379160/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31600, signal 379330/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31650, signal 379531/443243 (executing program)
2023/10/27 12:16:11 fetching corpus: 31700, signal 379821/443243 (executing program)
2023/10/27 12:16:12 fetching corpus: 31750, signal 379993/443243 (executing program)
2023/10/27 12:16:12 fetching corpus: 31800, signal 380166/443243 (executing program)
2023/10/27 12:16:12 fetching corpus: 31850, signal 380449/443243 (executing program)
2023/10/27 12:16:12 fetching corpus: 31900, signal 380633/443243 (executing program)
2023/10/27 12:16:12 fetching corpus: 31950, signal 380815/443243 (executing program)
2023/10/27 12:16:12 fetching corpus: 32000, signal 380968/443244 (executing program)
2023/10/27 12:16:12 fetching corpus: 32050, signal 381154/443244 (executing program)
2023/10/27 12:16:12 fetching corpus: 32100, signal 381337/443244 (executing program)
2023/10/27 12:16:12 fetching corpus: 32150, signal 381500/443244 (executing program)
2023/10/27 12:16:12 fetching corpus: 32200, signal 381712/443244 (executing program)
2023/10/27 12:16:12 fetching corpus: 32250, signal 381851/443244 (executing program)
2023/10/27 12:16:12 fetching corpus: 32300, signal 382058/443244 (executing program)
2023/10/27 12:16:12 fetching corpus: 32350, signal 382201/443244 (executing program)
2023/10/27 12:16:12 fetching corpus: 32400, signal 382460/443244 (executing program)
2023/10/27 12:16:12 fetching corpus: 32450, signal 382620/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 32500, signal 382784/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 32550, signal 383040/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 32600, signal 383208/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 32650, signal 383425/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 32700, signal 383563/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 32750, signal 383754/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 32800, signal 383913/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 32850, signal 384080/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 32900, signal 384325/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 32950, signal 384452/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 33000, signal 384611/443244 (executing program)
2023/10/27 12:16:13 fetching corpus: 33050, signal 384776/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33100, signal 385065/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33150, signal 385282/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33200, signal 385470/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33250, signal 385612/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33300, signal 385768/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33350, signal 385954/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33400, signal 386087/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33450, signal 386261/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33500, signal 386405/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33550, signal 386619/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33600, signal 386814/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33650, signal 386941/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33700, signal 387089/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33750, signal 387262/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33800, signal 387418/443244 (executing program)
2023/10/27 12:16:14 fetching corpus: 33850, signal 387594/443244 (executing program)
2023/10/27 12:16:15 fetching corpus: 33900, signal 387763/443244 (executing program)
2023/10/27 12:16:15 fetching corpus: 33950, signal 387955/443244 (executing program)
2023/10/27 12:16:15 fetching corpus: 34000, signal 388127/443244 (executing program)
2023/10/27 12:16:15 fetching corpus: 34050, signal 388625/443244 (executing program)
2023/10/27 12:16:15 fetching corpus: 34100, signal 388768/443244 (executing program)
2023/10/27 12:16:15 fetching corpus: 34150, signal 388928/443247 (executing program)
2023/10/27 12:16:15 fetching corpus: 34200, signal 389088/443247 (executing program)
2023/10/27 12:16:15 fetching corpus: 34250, signal 389290/443247 (executing program)
2023/10/27 12:16:15 fetching corpus: 34300, signal 389607/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34350, signal 389747/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34400, signal 389931/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34450, signal 390096/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34500, signal 390276/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34550, signal 390414/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34600, signal 390547/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34650, signal 390746/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34700, signal 391053/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34750, signal 391209/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34800, signal 391532/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34850, signal 391694/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34900, signal 391828/443247 (executing program)
2023/10/27 12:16:16 fetching corpus: 34950, signal 392001/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35000, signal 392128/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35050, signal 392452/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35100, signal 392607/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35150, signal 392732/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35200, signal 393334/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35250, signal 393548/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35300, signal 393865/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35350, signal 394129/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35400, signal 394269/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35450, signal 394473/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35500, signal 394610/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35550, signal 394821/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35600, signal 394991/443247 (executing program)
2023/10/27 12:16:17 fetching corpus: 35650, signal 395133/443247 (executing program)
2023/10/27 12:16:18 fetching corpus: 35700, signal 395329/443247 (executing program)
2023/10/27 12:16:18 fetching corpus: 35750, signal 395544/443247 (executing program)
2023/10/27 12:16:18 fetching corpus: 35800, signal 395703/443247 (executing program)
2023/10/27 12:16:18 fetching corpus: 35850, signal 395873/443247 (executing program)
2023/10/27 12:16:18 fetching corpus: 35900, signal 396213/443247 (executing program)
2023/10/27 12:16:18 fetching corpus: 35950, signal 396459/443247 (executing program)
2023/10/27 12:16:18 fetching corpus: 36000, signal 396643/443247 (executing program)
2023/10/27 12:16:18 fetching corpus: 36050, signal 396763/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36100, signal 396904/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36150, signal 397169/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36200, signal 397314/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36250, signal 397640/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36300, signal 397805/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36350, signal 397974/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36400, signal 398134/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36450, signal 398386/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36500, signal 398511/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36550, signal 398698/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36600, signal 398822/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36650, signal 398976/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36700, signal 399147/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36750, signal 399278/443247 (executing program)
2023/10/27 12:16:19 fetching corpus: 36800, signal 399482/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 36850, signal 399592/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 36900, signal 399765/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 36950, signal 399911/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37000, signal 400153/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37050, signal 400326/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37100, signal 400529/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37150, signal 400690/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37200, signal 400850/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37250, signal 400979/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37300, signal 401181/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37350, signal 401360/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37400, signal 401554/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37450, signal 401687/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37500, signal 401811/443247 (executing program)
2023/10/27 12:16:20 fetching corpus: 37550, signal 401999/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 37600, signal 402188/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 37650, signal 402369/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 37700, signal 402567/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 37750, signal 402703/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 37800, signal 402857/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 37850, signal 403015/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 37900, signal 403211/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 37950, signal 403341/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 38000, signal 403552/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 38050, signal 403718/443247 (executing program)
2023/10/27 12:16:21 fetching corpus: 38100, signal 403858/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38150, signal 404018/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38200, signal 404190/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38250, signal 404341/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38300, signal 404501/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38350, signal 404859/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38400, signal 405012/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38450, signal 405149/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38500, signal 405291/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38550, signal 405498/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38600, signal 405663/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38650, signal 405888/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38700, signal 406020/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38750, signal 406121/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38800, signal 406247/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38850, signal 406364/443247 (executing program)
2023/10/27 12:16:22 fetching corpus: 38900, signal 406567/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 38950, signal 406797/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39000, signal 406944/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39050, signal 407127/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39100, signal 407276/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39150, signal 407400/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39200, signal 407528/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39250, signal 407682/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39300, signal 407846/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39350, signal 408086/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39400, signal 408236/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39450, signal 408377/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39500, signal 408539/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39550, signal 408694/443247 (executing program)
2023/10/27 12:16:23 fetching corpus: 39600, signal 408836/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 39650, signal 409025/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 39700, signal 409187/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 39750, signal 409358/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 39800, signal 409559/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 39850, signal 409686/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 39900, signal 409829/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 39950, signal 410026/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 40000, signal 410148/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 40050, signal 410291/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 40100, signal 410429/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 40150, signal 410599/443247 (executing program)
2023/10/27 12:16:24 fetching corpus: 40200, signal 410770/443247 (executing program)
2023/10/27 12:16:25 fetching corpus: 40250, signal 410924/443247 (executing program)
2023/10/27 12:16:25 fetching corpus: 40300, signal 411143/443247 (executing program)
2023/10/27 12:16:25 fetching corpus: 40350, signal 411303/443247 (executing program)
2023/10/27 12:16:25 fetching corpus: 40400, signal 411468/443247 (executing program)
2023/10/27 12:16:25 fetching corpus: 40450, signal 411573/443248 (executing program)
2023/10/27 12:16:25 fetching corpus: 40500, signal 411728/443248 (executing program)
2023/10/27 12:16:25 fetching corpus: 40550, signal 411853/443248 (executing program)
2023/10/27 12:16:25 fetching corpus: 40600, signal 412042/443248 (executing program)
2023/10/27 12:16:25 fetching corpus: 40650, signal 412214/443248 (executing program)
2023/10/27 12:16:25 fetching corpus: 40700, signal 412381/443248 (executing program)
2023/10/27 12:16:25 fetching corpus: 40750, signal 412567/443248 (executing program)
2023/10/27 12:16:25 fetching corpus: 40800, signal 412745/443248 (executing program)
2023/10/27 12:16:25 fetching corpus: 40850, signal 412878/443248 (executing program)
2023/10/27 12:16:25 fetching corpus: 40900, signal 413012/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 40950, signal 413161/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41000, signal 413283/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41050, signal 413385/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41100, signal 413530/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41150, signal 413668/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41200, signal 413843/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41250, signal 413994/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41300, signal 414437/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41350, signal 414609/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41400, signal 414736/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41450, signal 414883/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41500, signal 415043/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41550, signal 415168/443248 (executing program)
2023/10/27 12:16:26 fetching corpus: 41600, signal 415269/443248 (executing program)
2023/10/27 12:16:27 fetching corpus: 41650, signal 415426/443248 (executing program)
2023/10/27 12:16:27 fetching corpus: 41700, signal 415555/443248 (executing program)
2023/10/27 12:16:27 fetching corpus: 41750, signal 415727/443248 (executing program)
2023/10/27 12:16:27 fetching corpus: 41800, signal 415894/443248 (executing program)
2023/10/27 12:16:27 fetching corpus: 41850, signal 416011/443248 (executing program)
2023/10/27 12:16:27 fetching corpus: 41900, signal 416135/443248 (executing program)
2023/10/27 12:16:27 fetching corpus: 41950, signal 416256/443248 (executing program)
2023/10/27 12:16:27 fetching corpus: 42000, signal 416416/443248 (executing program)
2023/10/27 12:16:27 fetching corpus: 42050, signal 416551/443248 (executing program)
2023/10/27 12:16:27 fetching corpus: 42100, signal 416686/443248 (executing program)
2023/10/27 12:16:28 fetching corpus: 42125, signal 416804/443248 (executing program)
2023/10/27 12:16:28 fetching corpus: 42125, signal 416804/443248 (executing program)
2023/10/27 12:16:31 starting 6 fuzzer processes
12:16:31 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002140)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0)

12:16:31 executing program 1:
request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='@^!\'[[,\x00', 0xfffffffffffffffe)

12:16:31 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x18}, 0x48)

12:16:31 executing program 3:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@map=0x1, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20)

[  264.839170][ T4986] syz-fuzzer[4986]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
12:16:31 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@generic], 0x0}, 0x90)

12:16:31 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x90)

[  265.648606][ T5014] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  265.672635][ T5014] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  265.692320][ T5014] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  266.147172][   T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  266.162731][ T5024] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  266.172972][ T5024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  266.180890][ T5024] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  266.189422][ T5024] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  266.200296][ T5026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  266.208392][ T5024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  266.218264][ T5027] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  266.227178][ T5024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  266.235360][ T5026] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  266.245883][ T5027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  266.257091][ T5027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  266.265904][ T5028] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  266.272289][ T5027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  266.277572][ T5028] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  266.281468][ T5026] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  266.288763][ T5028] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  266.302146][ T5027] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  266.313591][ T4383] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  266.314732][ T5027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  266.323133][ T4383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  266.464974][ T5028] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  266.572550][ T5028] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  266.590575][ T5028] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  266.681920][ T5028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  266.716477][ T5028] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  266.774676][ T5028] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  266.952432][ T5028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  266.961689][ T5028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  266.970565][ T5028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  267.006773][ T5028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  267.022576][ T5028] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  267.031572][ T5028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  268.006325][ T5020] chnl_net:caif_netlink_parms(): no params data found
[  268.421299][ T5028] Bluetooth: hci1: command 0x0409 tx timeout
[  268.431396][ T5028] Bluetooth: hci3: command 0x0409 tx timeout
[  268.438155][ T4383] Bluetooth: hci2: command 0x0409 tx timeout
[  268.444570][ T5027] Bluetooth: hci0: command 0x0409 tx timeout
[  268.491523][ T5011] chnl_net:caif_netlink_parms(): no params data found
[  268.509963][ T5017] chnl_net:caif_netlink_parms(): no params data found
[  268.755222][ T5021] chnl_net:caif_netlink_parms(): no params data found
[  268.823284][ T5028] Bluetooth: hci4: command 0x0409 tx timeout
[  268.939049][ T5030] chnl_net:caif_netlink_parms(): no params data found
[  269.062496][ T5028] Bluetooth: hci5: command 0x0409 tx timeout
[  269.099560][ T5033] chnl_net:caif_netlink_parms(): no params data found
[  269.229116][ T5020] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.236945][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.245018][ T5020] bridge_slave_0: entered allmulticast mode
[  269.254284][ T5020] bridge_slave_0: entered promiscuous mode
[  269.291215][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.298973][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.307370][ T5020] bridge_slave_1: entered allmulticast mode
[  269.316852][ T5020] bridge_slave_1: entered promiscuous mode
[  269.589297][ T5020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.648167][ T5020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.942849][ T5020] team0: Port device team_slave_0 added
[  270.108697][ T5020] team0: Port device team_slave_1 added
[  270.116742][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.127192][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.135006][ T5017] bridge_slave_0: entered allmulticast mode
[  270.143998][ T5017] bridge_slave_0: entered promiscuous mode
[  270.357902][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.367945][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.375668][ T5017] bridge_slave_1: entered allmulticast mode
[  270.384694][ T5017] bridge_slave_1: entered promiscuous mode
[  270.449943][ T5011] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.457810][ T5011] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.465502][ T5011] bridge_slave_0: entered allmulticast mode
[  270.473702][ T5011] bridge_slave_0: entered promiscuous mode
[  270.487492][ T5020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.494802][ T5020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.521372][ T5020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.528331][ T5028] Bluetooth: hci2: command 0x041b tx timeout
[  270.538299][ T5028] Bluetooth: hci0: command 0x041b tx timeout
[  270.551280][ T5028] Bluetooth: hci1: command 0x041b tx timeout
[  270.557493][ T5028] Bluetooth: hci3: command 0x041b tx timeout
[  270.645837][ T5011] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.653643][ T5011] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.661361][ T5011] bridge_slave_1: entered allmulticast mode
[  270.670265][ T5011] bridge_slave_1: entered promiscuous mode
[  270.683668][ T5020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.690879][ T5020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.717270][ T5020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.793253][ T5021] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.800926][ T5021] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.808807][ T5021] bridge_slave_0: entered allmulticast mode
[  270.817806][ T5021] bridge_slave_0: entered promiscuous mode
[  270.839362][ T5017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.911330][ T5027] Bluetooth: hci4: command 0x041b tx timeout
[  270.971209][ T5033] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.978900][ T5033] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.986901][ T5033] bridge_slave_0: entered allmulticast mode
[  270.995857][ T5033] bridge_slave_0: entered promiscuous mode
[  271.016104][ T5011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.025898][ T5033] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.033608][ T5033] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.041360][ T5033] bridge_slave_1: entered allmulticast mode
[  271.050167][ T5033] bridge_slave_1: entered promiscuous mode
[  271.070974][ T5017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.089565][ T5011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.134354][ T5021] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.142345][ T5021] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.149958][ T5021] bridge_slave_1: entered allmulticast mode
[  271.159126][ T5021] bridge_slave_1: entered promiscuous mode
[  271.165949][ T5027] Bluetooth: hci5: command 0x041b tx timeout
[  271.205903][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.213577][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.221187][ T5030] bridge_slave_0: entered allmulticast mode
[  271.230241][ T5030] bridge_slave_0: entered promiscuous mode
[  271.252999][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.260668][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.268453][ T5030] bridge_slave_1: entered allmulticast mode
[  271.277359][ T5030] bridge_slave_1: entered promiscuous mode
[  271.365428][ T5033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.614239][ T5017] team0: Port device team_slave_0 added
[  271.635152][ T5033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.686974][ T5011] team0: Port device team_slave_0 added
[  271.742797][ T5021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.758664][ T5033] team0: Port device team_slave_0 added
[  271.809744][ T5030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.860127][ T5017] team0: Port device team_slave_1 added
[  271.874966][ T5011] team0: Port device team_slave_1 added
[  271.924628][ T5033] team0: Port device team_slave_1 added
[  271.973198][ T5021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.984729][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.991939][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.018211][ T5017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.039280][ T5030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.093468][ T5020] hsr_slave_0: entered promiscuous mode
[  272.103977][ T5020] hsr_slave_1: entered promiscuous mode
[  272.281407][ T5017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.288551][ T5017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.314899][ T5017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.433769][ T5011] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.440930][ T5011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.467855][ T5011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.482226][ T5033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.489355][ T5033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.515595][ T5033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.570659][ T5021] team0: Port device team_slave_0 added
[  272.588076][ T5030] team0: Port device team_slave_0 added
[  272.596118][ T5027] Bluetooth: hci3: command 0x040f tx timeout
[  272.603768][ T5028] Bluetooth: hci1: command 0x040f tx timeout
[  272.609970][ T5028] Bluetooth: hci0: command 0x040f tx timeout
[  272.617367][ T5028] Bluetooth: hci2: command 0x040f tx timeout
[  272.621444][ T5011] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.630609][ T5011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.657093][ T5011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.708607][ T5033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.715850][ T5033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.742236][ T5033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.762614][ T5021] team0: Port device team_slave_1 added
[  272.789213][ T5030] team0: Port device team_slave_1 added
[  273.001340][ T5027] Bluetooth: hci4: command 0x040f tx timeout
[  273.051791][ T5021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.058952][ T5021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.085468][ T5021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.193798][ T5017] hsr_slave_0: entered promiscuous mode
[  273.203373][ T5017] hsr_slave_1: entered promiscuous mode
[  273.211504][ T5017] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.219173][ T5017] Cannot create hsr debugfs directory
[  273.238743][ T5033] hsr_slave_0: entered promiscuous mode
[  273.239611][ T5027] Bluetooth: hci5: command 0x040f tx timeout
[  273.252724][ T5033] hsr_slave_1: entered promiscuous mode
[  273.262417][ T5033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.270096][ T5033] Cannot create hsr debugfs directory
[  273.282105][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.289242][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.315662][ T5030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.369388][ T5021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.376689][ T5021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.402992][ T5021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.503504][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.510651][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.537065][ T5030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.696944][ T5011] hsr_slave_0: entered promiscuous mode
[  273.707705][ T5011] hsr_slave_1: entered promiscuous mode
[  273.716324][ T5011] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.724331][ T5011] Cannot create hsr debugfs directory
[  273.976290][ T5030] hsr_slave_0: entered promiscuous mode
[  273.986586][ T5030] hsr_slave_1: entered promiscuous mode
[  273.995163][ T5030] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  274.003419][ T5030] Cannot create hsr debugfs directory
[  274.128634][ T5021] hsr_slave_0: entered promiscuous mode
[  274.142278][ T5021] hsr_slave_1: entered promiscuous mode
[  274.154977][ T5021] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  274.162778][ T5021] Cannot create hsr debugfs directory
[  274.661240][ T5027] Bluetooth: hci3: command 0x0419 tx timeout
[  274.667539][ T5028] Bluetooth: hci0: command 0x0419 tx timeout
[  274.673898][ T5027] Bluetooth: hci2: command 0x0419 tx timeout
[  274.680107][ T5027] Bluetooth: hci1: command 0x0419 tx timeout
[  274.764610][ T5020] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  274.903957][ T5020] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  275.035974][ T5020] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  275.061506][   T47] Bluetooth: hci4: command 0x0419 tx timeout
[  275.070927][ T5020] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  275.243095][ T1211] ieee802154 phy0 wpan0: encryption failed: -22
[  275.249739][ T1211] ieee802154 phy1 wpan1: encryption failed: -22
[  275.301377][   T47] Bluetooth: hci5: command 0x0419 tx timeout
[  275.760292][ T5033] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  275.832008][ T5033] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  275.877726][ T5033] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  275.972066][ T5033] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  276.085867][ T5017] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  276.135352][ T5017] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  276.179495][ T5017] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  276.249839][ T5017] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  276.633805][ T5021] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  276.744462][ T5021] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  276.772630][ T5021] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  276.922196][ T5021] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  276.963292][ T5011] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  277.114691][ T5011] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  277.219518][ T5020] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.277062][ T5011] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  277.316583][ T5011] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  277.525547][ T5033] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.557277][ T5030] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  277.668083][ T5020] 8021q: adding VLAN 0 to HW filter on device team0
[  277.705692][ T5030] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  277.772918][ T5030] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  277.817189][ T5030] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  277.852568][ T5033] 8021q: adding VLAN 0 to HW filter on device team0
[  277.920087][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.927815][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.025883][ T5017] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.064054][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.071722][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.087706][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.095351][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.299535][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.307190][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.385081][ T5017] 8021q: adding VLAN 0 to HW filter on device team0
[  278.725090][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.732954][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.875272][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.883040][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.059506][ T5021] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.168720][ T5011] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.379451][ T5021] 8021q: adding VLAN 0 to HW filter on device team0
[  279.492229][ T5030] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.533083][ T5011] 8021q: adding VLAN 0 to HW filter on device team0
[  279.584400][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.592167][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.786041][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.793771][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.808754][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.816447][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.934449][ T5030] 8021q: adding VLAN 0 to HW filter on device team0
[  280.100160][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.107892][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.170425][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.178178][ T5078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.204344][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.212392][ T5078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.329462][ T5021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  280.340196][ T5021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  280.439482][ T5011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  280.452181][ T5011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  281.069435][ T5020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.255949][ T5033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.706061][ T5020] veth0_vlan: entered promiscuous mode
[  281.758499][ T5017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.868867][ T5020] veth1_vlan: entered promiscuous mode
[  282.295692][ T5020] veth0_macvtap: entered promiscuous mode
[  282.390565][ T5017] veth0_vlan: entered promiscuous mode
[  282.404484][ T5020] veth1_macvtap: entered promiscuous mode
[  282.548636][ T5021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.576924][ T5017] veth1_vlan: entered promiscuous mode
[  282.609875][ T5011] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.704268][ T5020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.783231][ T5020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.953160][ T5030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.992003][ T5017] veth0_macvtap: entered promiscuous mode
[  283.005285][ T5020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.014434][ T5020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.025107][ T5020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.034253][ T5020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.092011][ T5017] veth1_macvtap: entered promiscuous mode
[  283.314382][ T5021] veth0_vlan: entered promiscuous mode
[  283.334421][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.346270][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.360912][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.431898][ T5021] veth1_vlan: entered promiscuous mode
[  283.547816][ T5011] veth0_vlan: entered promiscuous mode
[  283.584915][ T5017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.596933][ T5017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.613685][ T5017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.729126][ T5011] veth1_vlan: entered promiscuous mode
[  283.804161][ T5017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.815507][ T5017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.825592][ T5017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.834819][ T5017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.039009][ T5021] veth0_macvtap: entered promiscuous mode
[  284.146935][ T5021] veth1_macvtap: entered promiscuous mode
[  284.353710][ T5011] veth0_macvtap: entered promiscuous mode
[  284.399558][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.411596][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.423317][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.435837][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.452067][ T5021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.488366][ T5011] veth1_macvtap: entered promiscuous mode
[  284.565974][ T5033] veth0_vlan: entered promiscuous mode
[  284.726841][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.738341][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.752115][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.763657][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.778440][ T5021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.793003][ T5033] veth1_vlan: entered promiscuous mode
[  284.843255][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.854053][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.864178][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.874838][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.885119][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.895825][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.914221][ T5011] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.017565][ T5021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.028588][ T5021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.039875][ T5021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.048988][ T5021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.115259][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.126398][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.136480][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.148515][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.159338][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.170118][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.184703][ T5011] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.209718][ T5033] veth0_macvtap: entered promiscuous mode
[  285.277571][ T5033] veth1_macvtap: entered promiscuous mode
[  285.454210][ T5033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.467852][ T5033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.478456][ T5033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.489180][ T5033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.499307][ T5033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.510046][ T5033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.520114][ T5033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.530955][ T5033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.547944][ T5033] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.581697][ T5011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.590735][ T5011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.599967][ T5011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.609076][ T5011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.948666][ T5033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.959537][ T5033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.971144][ T5033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.981860][ T5033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.992012][ T5033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.002837][ T5033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.013003][ T5033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.023781][ T5033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.038773][ T5033] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.363763][ T5033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.372937][ T5033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.382283][ T5033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.391437][ T5033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.814814][ T5030] veth0_vlan: entered promiscuous mode
[  286.962302][ T5030] veth1_vlan: entered promiscuous mode
[  287.467524][ T5030] veth0_macvtap: entered promiscuous mode
[  287.577942][ T5030] veth1_macvtap: entered promiscuous mode
[  287.856326][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.868042][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.878332][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.889069][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.899180][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.909906][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.920005][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.930712][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.941214][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.951993][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.967561][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.097859][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.111205][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.121977][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.132771][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.142884][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.153687][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.163763][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.174441][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.186526][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.198913][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.214398][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.471913][ T5030] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.480981][ T5030] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.492373][ T5030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.502704][ T5030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.165370][ T3790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.173470][ T3790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.319264][ T3790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.327938][ T3790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.450010][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.459020][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.656233][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.666801][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.640089][ T3130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.648294][ T3130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:17:00 executing program 3:
symlink(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./file0\x00', 0x0)

12:17:00 executing program 2:
mount$tmpfs(0x21000000, 0x0, 0x0, 0x0, 0x0)

[  293.836667][ T3790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.844925][ T3790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.072419][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.080466][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.491216][ T3790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.499388][ T3790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:17:01 executing program 3:
fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0)

[  294.720585][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.730010][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:17:01 executing program 2:
syz_mount_image$fuse(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f0000000780)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}, 0x0, 0x0, 0x0)

[  295.051914][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.059981][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:17:01 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200))
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0))

12:17:02 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})

[  295.460268][ T5246] fuse: Bad value for 'fd'
12:17:02 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1c"], 0x120}}], 0x1, 0x0)

12:17:02 executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x10, 0x0)

12:17:02 executing program 1:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], [], 0x22})

12:17:02 executing program 3:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}})

[  296.386828][ T5261] tmpfs: Unknown parameter '"'
[  296.695707][ T5265] 9pnet_fd: Insufficient options for proto=fd
[  297.010296][ T2459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.019025][ T2459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.082772][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.090822][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:17:04 executing program 5:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='msdos\x00', 0x0, 0x0)

12:17:04 executing program 2:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[])

12:17:04 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0)

12:17:04 executing program 1:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=virtio,', {[{@msize}], [{@obj_type={'obj_type', 0x3d, '(\xbf'}}]}})

12:17:04 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1c"], 0x120}}], 0x1, 0x0)

12:17:04 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891f, &(0x7f00000003c0)={'batadv_slave_0\x00'})

12:17:04 executing program 1:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='h'])

12:17:04 executing program 3:
syz_open_procfs$namespace(0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000025c0))

12:17:04 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5421, &(0x7f00000003c0)={'batadv_slave_0\x00'})

12:17:04 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1c"], 0x120}}], 0x1, 0x0)

12:17:04 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x1, 0x0)

[  297.904508][ T5280] FAT-fs (nullb0): bogus number of reserved sectors
[  297.912043][ T5280] FAT-fs (nullb0): Can't find a valid FAT filesystem
12:17:04 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})

12:17:04 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r0, &(0x7f0000002a00)=@file={0x0, './file0\x00'}, 0x6e)

12:17:05 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000140)="9079da181345293440711ca100c413da72d34afd89af7673510fd6f5304b8e07986572ca8242b3dec44edd06e6373c8d51a088c172c765f912673e27eeda8b0866edfeefc72b2fae80e71018ffe07c15660a69e47e66990d01a7292253953682c0168c482277be1f4a9effc872eb1678097748f6f7208d3fe6b835bf026054d5b5a0b075d2e97decad8a741cf1404b8f9e4a89b48a062d7e7ebcf1b0159e4b678af6ce4fb13840464f8a687e7a00f0a8391bff3b27667d67", 0xb8}, {&(0x7f0000000200)="87c63575c9870212b3189a7699cd34a8ae582092c701b71c44d79eccfddb4816f79bbf602f584f4cee7ed5a9298e125e380e2b078dd1c26641535d64a63378a24680558ce34795de88979d6d933ac3ca808671c8ecb4decc725ed318b87e9e6f85b7b5433470c1295dcaaa26e07de0f7dddb725eeb06a412308b449d02f4be3cabab90665db25cbec167c59646911e199897e271fa2ae40cb3cd48b1d667fcfecd194c", 0xa3}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="0b677a9acee48c967f7a5c2012500b6b62907784e2ee58291f414e68a777090aa1f210b1110650c10e3b26b21d253278b6cdb08ebddf7959b5bc0d4c45cf1dfc18051b5b101af8ae8b11a081044b3759ae31ad6d4c5e82e1dc941698e2fbbd8d904cd90144ac900e0e977f29c249b6bd569aa8d1f69022e335e2c48752ab1d29c487ff2276e8213b8a83546a610c4f0b6840330e3951fa6dcab8c4b18a79f6817e6599410b7ec460f687e6a44950082ae617b8d51f6bdee6ef277c2925bb0aa715a9fc6ce29f100a8470d1aff1f2f708cdd671f8b650c37f8ec079f8c226a9", 0xdf}, {&(0x7f0000000400)="305e7d1de009c1dcde748662339751daa3ef112b0cf88fdc9b027405fd20f9f67df148849efe912c2605c6d37f8d8f81dbcbaaa4dabde10e81f586851a8eae166f3cd2bff43e605cce9f0830387bd207ec2219502e3e9b9a438c9f1b15f9a3e57b3175cdf8793931d17457aeb39c63b2121c03393d4b43c194609790935ad06c50f80b", 0x83}, {&(0x7f00000004c0)="ccf20c200f2bf1b4ae1d8cbfb9796c926e626d35ca73be88a7d487565c6aac1424807162d1dc60a82ff1057edf689937dad5eadf602f5b0144a9868398a2d0746eba61fdcd8ab41ee8fccd4102af068b966b506da65c0320c55db18609c719360782ee7de04100e145e1a6d8b4f897acc9e5a02aff3de075de76ffff0b1489d1aa964d4aba2968fc4a5c2a64d71f63615e4ec0260964eaca35be6dddb3dcac926a58c84fe040785cf311affc90b70955b4d46197c6f0314938b56258aba282b5303ff9889a98b6a5d24b1864fb0f6ba0cfc7ba81fcc7f1a041694d7e4032e8c5200d946e71abcee34254bce32e739a12c6cd235bf55b8ebf04de4de10190d0bcc6a0e2a7b0a3fbf6eb48f133e6647546361a5bb497183593a7bece9dc6093b7bce94148a5bfceb755558634435d5c361d031ccb732efd978ad4a4d1698d71624497a57ef2a98880a32f116d2e11b83ac09845343f88a18456bc1fd11ed92bd1422159513b75c195abb6d2ea7162cab4f19cb094129fe6ac46845041cc0d63421301e5001374e4948b6128439510582548a6f47d7c4b1aae762e39e35e29c805ae844f20976128fd0e2ed938d4892c39bb9e682ed0bebe88d05f07e919ba1c18dc686845289bef8fe20a9ae18a86e211075a937bcaf4385ae2903aa9681dc182d7cad3b40e32f5e437ae4595fa94d2b77a1bb0f08746ecbc7dabf460467cc722c3fecd2ea2f75e81d41dfa9f785db4db1ca4796682dcb31a90c5b85c3f2daa2d6a304ba64e4cf93079a94e1e7edf548d6151220b3a570f68e5bd18ad8112e4ffd92a2a52465e68c3d2bc067514fd5235ae6dddbee7fbef3597683e9221f08104f9f15a5626eea3fc662f781b78a5a252c778f4a608676e5c12f42c38b12c340d0cf8b2eda1d89a699b66ec3e384590d0ff71bfdb13093508df23c951ddb2179f00eeb6d146178cf92e32f24a0e4e82716c639b299657933542e94749d5562c9ca1ea863632e0ccc2e6eabc8338a324e8b7366b083906a34d6751fa9b92c3240cba7c2f4f2e51740cf0b536782b6e53e777b3cd445a4cdfa9301e7c10c3b56e095d06a0bf049eccbbfd989bbd6bb70222601a08499da60bf21d3a337559908917ef1c3cf3100e37104f525bf80d25e7b719e5d85b62bd66fd470e812221ad6ba68e4a980915f745438e317b4b84cac4015cab6fe9b7ff3a5901b78a168e12092e9fbc8858c927bb5dfa167b6d086954f466afbca3c7ba37ee685319548c0c5d5f4c08b19a65d71ec3a199286f961d52511019c4260caf70254e404845bba9b7d568a4e0a284ab99d837f090f76395ece8275622f669f79bd3a54e0401233a2fd4a2c5c4d6af67fd3eec15c3b8bc900b1e29527e98c6299d0357373c88809bf547eaac368e8d2d9b3eae8fa59fbbeaf86cb3bee9ab8a390fea2b2aa884a1f363f27bb6e464a58349edd8195750a9ffef29a7b525717db3279d0af581b57777dfee8ad85f30e57d35fdfcb81bce0c4ba190627297f7e7585929a08a0bb415deb8bf71fd99d69e58a19eab9c947bb70464e5c24f3b2f5002b3c2ef8291b1b85bed87f029da12d116811e76fc56f27442fd25c309230b258c325c23a262ba8ab296bf24b245fae0c0fab187a6619833d089cea06e13fbf165300470ca46a9827b0d3b8b4a7c0a84756342d154c55d431def66434653d89e73d131406692c2e7f49ae6e981ac49d51de402032d698cb6c59ce74d977bcd3e1db41023185e74d4f09d0816ec4010716093387a436564de117ce4b9aa875987b2366a5267e17341d389f95b7a903fc317323e2d1d74a6d33464c05606e07abc38b88cc71f632ca6d68c81043dfb68623a860e87c778ba689c508714f5e0983788caad4ff743be8120586c0c91b1b6596b5549eed6f2371269b620633f31f4237df1e1bd27bd6821150db1ec730e4fce1cbea15b8b3ffd68ca7e5d92086367c8ed089e48ba61a0930d5adc32000c33195c9c81ae7f9a7fe06269a0a4fd1da8b857be31c018d893359f871809486739f336b8ce35ec05cb74468c69d6fb242409cece64fa5b7b437f4c3c8f22cb9f1cf059c1cb47cbc39b2c4ce90186962563f41cfc5c551c71e5891414d8f00f31d1a45cd165b95b77e4923751bd21db025ccff185d188b299211e95f6e599aa4d0bf5219a6e6ae36f45093ecbb14f7e60fa275efad77c211e97e1030907962add9fd2b977a4a29ac81fccb1f4a5e372c6c1820f3ded45b45ff9565de44b235b746dc5c2b7693ce5870fa9798d1c2af64d4bff59458074876ba42a766c21e74793d7776d5bda0b04785758003eb57701f47bf2e5b9c996ed40b77538a90925f13958e4fedaf54654786dfc449dcd5eca07e39b62864d0bba23a04ea921db9e4ed3ac0169e669de64849f979a7559674477c74ca6f99840c79dce2751de7c83b11df53a8add4551415def966c620f8855c6b49932a5e56dba865e5db30c0db3cc911624eede7402c6a4a5c612d2c537040b2346d451422ffff4fa6f9f62dcf79dd586c2233467364e1fdc4efe0c3a2bed82eb7fd652dad4fdb64739a415a542ebb846081b60fe04e5bdd56d7dea46af01e81bad96c9aabcf11fad1059ba0b82238348321537b820ab192e1ac342ade5aab50c200c3d09d11e68d8d32372d886bb2600532187629de93e4ed88f46c238d7c250103ffa22e96e311f3dd49142e3726a56a688f431810f97a943d5cfce0f069960d1afac1afc9a02f98e54b0aa6f0080615ee0bc65240de13619f4c9851ad032f71a034b93818bccb5b4a55c51cc658435d3fb58552380c50688a5bf7074f718d6e2432915ffc2f1f0fce148a41f9488d01135c45455082a76c0b763a10ac175496de3209e8cdb59ea454d3aec0dae3dfe69ffa2872e35cb7940ebf949d81bb1df5590983ec2a1918f287b7d2f05bb0a83354191aaa69898d29412a59c4b685fbc52f467b61a76cb36e98246da55e0e38c687f0c82f634e5a1d46216ebd694705339c7f6c07ab9dc37b401a8dc4832b6aa3dba6a97fd306372079ee4c256e7a55d5f4e090393bc811f41e196dced1667a51997d49ccdb18dfdc1228a74b5ba43fc65e46639f5e108edf73820f32983746f338908d9007399ac731b60db90ac5c8fba947130ec9fa20bbc7626a0dcaea7ba5475dd56a7f9e324c5f36ad363b0d1872b8dc4ff3264384a4f21bee571be4ffdd5bd386f7a6820fe358abe977e278814429782c00e88b8791fe29301efde7d76b3544d0ef3116af184ba96a23085657aa55397e35ecbf3e2db1f688cfae610fc6a22d5e970209127fb9a8b0574dc7fa3c5db270f653cf6e69590205958dc8e84ab31787a7ccf2c8159bc477dde51142a60b9b12c72fb3f5541374f0e79bc2b32767e2f2d0e8a961b25b04bd4b9db1e367090954f95a3879d161d3427be0f3dbd68b04c0de94181fe8d3c3845eed522053bd332919ded5e9e578b3e1c9849027601ad9c96e51f0f13b149d606adde8f946b7092d9f7694c6cdff5f3e786c6acbfb142071f2a1ade8a9b03385f889f0ec7fa4ea8c6b4e919110957365e45de1788102fcf560eda0d8c100effbdfc0b2f21ad71c825097d61bf42e6251da80e88d7050f0cb6cdffcec27dd977add212c59789fef7ce8acfc71f96e11c6307c4cb39760db8cb6423d27c888a8fed7413ccf33f8338c5ac72118e09343eaaaa0dbc90e98a2f8c178fa3b79e09312b2ade25fc67dbc00545d6a971de94a8552c1c5f7e2a0340ef523e6470313a81172a3b8b70c30eacf1ce9019ce96a2ef519fc45e5378123b4bd82e861bbfbbb98f900dcb90b1d0765684b4887b70d4068e36c2619a84385638c6738f23006e6704a1189c3c3e086e1750c146c3256a162e395488cd5ed618901a5adb440bb4b84adf3c140bfdca55aacbab3a206c31e01575e034185fceeb667842d6da4383cbec0899ca7d6c7659c53707b804b430f21931606a52baa65ad8a89329e4dab3c1c5b9f48e437b763ff9467ffb8b38948a445c89dd2a1d6745afc86df48d02f1b48023e95be6c74afcfb2fac6e11ae376ff19bc41192a077f2a33ddd605708b7dbbcc222220f386c5a3e14c008b3aa210b10f9a854d940b4dac316b0c83e3c7536d8da8196f4d1b1f69fbb56213f8f99b77bfd3b37f593a8f81d126fb8155921b8642e0f68142e9f219078df052babe015025c1e8276c22a5af315b145e227c841e4ef4afcc2444564d923f5c8c06a4f7ce0b0cc5b02ba6d256c91e6dc7c83713edff9578b095de415ae4391e7f1613fec765a0cf98ccc39d84eec5da9c75ca487cefaa7f57ffb92607943c6e13e6571a064251b0fdc1b091d4ed4462b794e8a47aff7c104c5d34d804231e50009eaceab588c56a44f9572855a14250a968e70f402e35b41c778b62e0a88d18efdd439500a6e3b616c169690fbc53d288e109df56c0cbae5bf1478acfc20af9cb34d3dc573bb5b09370e3513182dd392769d11deed33cf4fded848836582edd06f2f48d83ead95cb1cf28a8d6ac38dc2a9ca1f773b8fca3e6778dc7ea49f23edc15997cc5261ea9041ae5e2b49201c869334dd0b4fe0820afa42823fa0c9cf231476d01d7e013eb916d59524c70798660a0afb56972c4c4d1e11575ef3fcbbb5732f72c2ce9457aaf32b892ffdccd9ada7ad1acf7c74259dab6d32905d0374c91a9b5322be915c3279b851cb26ecd2f9e1acdc86418cb1574de479106e002b0940d354b880f4808e53abebedaa9d1d390bbea3198a94a052a209fb2d51054e4566d86e9679f327739196542c965d6fbbd281a025689428b8cdd2705bc7f38d31eccf12b736cc771d90657f41459f5a9467670ef38f78399e74ad4e2e6998295ecb1b27662b6700f95d362de84bd3876ae360e3d90c17f98c8257ff75ad07219f60e13a1112ff915ceeef7b8fac71ff8af68925448e8483e9c8bdf89c301928d030c44fee04f8355b5baf2d555651820d5f99bdb8f7ff98338ad8dc24e01d28c7f5a3c27753d25431d0b719646163b4c10e94d7d6e0cdfc6bd9925d29a8ccc2054987c22d1b8b069c6fd5b825b61e4956f0d2ed4811f98e2e86cf2d2aef2cb5a3642119cd371dd7c401ab19d5b254eca79cb20224a1d88f89dc47b18a213c850eaa4bab1963878e2d1eebd23a19beaf05a21b503d8111f8976f23f6dd706d3eae214422144a73a404c3d6efbf301e1ef6807716c2bf07c14ce0edf5c1833a9f547f3612578fd61c8933f73298428e92bfed4c0f2a5986a8c862136438612d52754f1cb0ee373789559328e8eb4aea3fbfb00ee6962dcdd55071578c67b05c1eb2c8244e98ffe98dcae80dd110ba13abaf6d52932d11d4381433942282e83431f12ca861fc568dbaa536155636f86ddfd292152afdf71e10bbbabd25bdf39541761aa6513a38cb6e4e0a27cd9659b553653a1693120d9d95f0eee20558ff75316dddd0f05b4940a2a5041bf3e4327792bfae5f87b0e9835af5e558fa0dd26e0a5fc70f74c0c9097382b56577af46fada3cbbb50b179d8925399a517c3f4d8e87c9a1054e0ecedd44725fb0ff2dba5367204afdca73910bcae1e94cf75dcf5b276fc9d52f97b73f8624e8cccb906e9073ab13124f9cec2038ce832f1493ad80d409884bd2892d70fa4a6ec6300a85d0e924f6ff3219826ff057380374b0eec81c1c7ed2c61d5294db75b5e0a8d2071ae07629d727de113987f268263c3aa8d37266ba84c8ce9422cd855a517c7e566faf155200717e14501a4d0d259b034e29fd40b3cc363ded9", 0xffffffffffffff82}, {&(0x7f00000014c0)="b263cd23ff31037ff3feaefbeccb5270c02c40daf828584297a04a80a32f8f1900c476bba817290f79b89e84ad1743d7dd040d3f15b4f985360c6eb933dc53bacfecd6b61873f08f4aed6659ec5754d25029f106c18f023c47dd226a29415950f4277224d96e588ac8e4d50084cfbcb317cdbee5a7ff6cb4164cb019178cfdc8cf322a9a2bbf2b411dc09d17046c9626c9a56eccce39f1de6be2bb3247a5d47aa55693e425c967614e879539b1618697e6593b067c47f0a7929038c8d2664c42e27c2a4df0dce9c839595751523d1cc53aba22c1c966f5fbc3c2eb7a42db2bbf9aace7eb94b935fb2c9bf12453ceb3f98be89ed9bb8d4ee2202feb8a59da5ad65f600d5ed7dd9ad5f9a5253fbc2f8ec57279ded2e4ea5e86c4dd8eac94c879d24dd137e114b21e2d6cca7267c32573c85c29f2f9fec72af496987e075f586aa52d4073931d13dd1ad7e6ece09a3e97fe8d2acc0f0b30d49af45d91f30fd138f74e298e8c5bf7e3a4a579fefc43885047714ab76a78ef4c3599cd98690aaf1ffd725510e55ed3fa52ad925a494ec6ea52577010517ad0bb9c396acd2dae3c97ed7d4399de7a7205ac2e1d5b93c59a3f7992694b6bcda16377b52f74820df88681a6d835e03cee4ca08439ca48858185e012575820ff66d8871b32d4cb4ab48ba891f3c00cc80318271fbc91ae7dcfc45eb1e4e7c0f9d452bab8542dc934f875a05d8b91fbe74eddbed641c811895e4dda0dab6efae099a587015b7b4e8d738aeccfff995080ec4cfbf941bea24413effc35117bc5193b1dc77af8b3b4949c7a18e0230e58f4ef1c4bfbad79c30804293cfedd755533f21f1add3bc4c66749384a625b4dcb410eb0c899a3597ebe6241f8238e0486b5b33a7b44eff9a22cd2a2500ce7055f82a2ffc5ee385246814e86fc027f95269a5758315e1b4b8d25a281ba3f2e2729c56a60068aa0c3b984030ee7176e495b6e7cae4d8a518785d51eea33a1058e24da252b2b5c8a2ff952caab9e4f64bddddfa9a362ec3552e1d4824955133df183df2ba8f648b849d937e1da544d00c08f46bae28409daeed853524a6ab444c90c896036a1424d8dde2aba905bfa99920d43d7f6704f0f0a9b78d5a12f5738f85fd6c962dee059accd8ba939c5a7f2c063b676e70fbee4bc017e70d38aa81dfd0f7f4f3649626b1d0782479505017efdcae643d23d7ae738d29e63da889d0c3b4d32cdc819bf027b81f5f50eaac3412d31b69f9574a6274fed4638358ec95b701939d4e1a645b656bcc79f9bff7afee10427ac96965d6c3fb29febf3b43d7512b33a787230174bfbe5ccbca10ee40b3d32599a0554641b94d38abcfb5d11a6fba553522053c6884dcb0d25665c7e58700714275bc4f9f4f43aa871c81df3604a1cb0dafb50f4467ea1a8bfd5a1c5238f6b549bc7e26015e5f816cece5898e7df3a014b6611a2656eb37292ccddd3ffaf96adedd8ebd0b6cf9bd7b13c37332f79cefb8f787aa91957901cfdb6b387af58f7c5af517d11b524f7821652cbb967ff8967cf9d06cc4f9239d042ce846e8fddf6e4d109ee9d90355200f8e7f391927ae418c401a97e42f8c231eb3ee8330c061ce6d855ca743b5108f47fe2deaa5c91ae1e039b8eb664ca940136346ba044208955569b5b9ff96aeb5841b77b228956d5f443f79244d73048b6c828f291b2ca45a659924f6bdb11632f0406036932d77e410a639ff7bd995335cbb51feb162db0598dcd6443bf2a799db076724484b8f2a913ec49fd4b3b75882f6eca9d8987e573090b596c40d3a444297a14cfed4c54d6b4a1518223ce6afc25b6e6c6e2434db6b098f16229ea44d25dc66de261248abbd8193476ffaf2165824f8b9bf10c59779ef264b0fcfb2c126553c9f0783337226ea599355a8f5bd85d6ba0cb79f745434954a7e1bb28e68c1bac83c8379c67571a734b3c2b6e5f0c9053e18c23a0bebc0e3450b889dd7098d21b95202b6bdde648b636232109dcb22e4589d16ac048240513597372664804d4c0dd889d54a0d88ba0fec7bd01ed32ee46b9fa20533d18c68072797ca9ceab9050c6fecdfffd136e725252e75d06593eafca4597648d1ed77e09c747abe08b6b5a7e7b5b2f66843b34131b9a7cf11839aff1702688df9f40aa4ab63dfdda617ce3ac3fb03dc15de53a22a468269f60e5385f1f0d20a6eedc09056d17f75927f882c78cc187969fd6045e79aff4f86a38ba44c6536938b1169d12296b3957932ea043ece60ebd3372efe7aa2f9da4ece80719ed7fe388d3ea5005af1b53a52aa7b50388abb3f891aa5af60c506f9a7958f8808278ce49542f0543010bc6461149c7861106f29b4d3589dd6a0f19f96e4f85a2457823318c37c6c7ec48198bf305f9fef1d0f32718c10cdfa905ac378bd2582f6d65933872e17a3e8efc0f01e51ae2d84c74056b011a70ffb5723fdabae97883d205e9e6d56938e78da4f051863c1d5927d6458290b965356e91dbac17bfd6fac39ce484bd1f96d40c8685d432d0b4d27ac7fb7c2397d2ee21e685b3a28a6e745f0af6e31bf035a6feb6cc56a467e8a191f78b62b0527b01c3076a2c25dc186dddba72e0236d3b471ea42992a9e1aafec97f46124c9d609b5e64e1c28602f83dcd73cc81c63ecc5b277ed3e1cd66fcd7063ad4ba3d743bd3297e8650cae08d7ce5cbf86aa9299bbd20f79441f840c6dbe2a70289226d647c42b12d2cc860d463781e5f6a3a409939da663c2c5fc118761b78b0469f31d1fc227ca3f1e85ea6c477e81636716c69ed9ad1ec38523855216609ccea52e52db769fd5c1c9138fc6efbec33c27a356a288892e2d7add57e98af3ee2cf2f8ca05c099680a37fcbc6eec4e71e6a87a313d8a8d4dadf81d79d5e98173cbd105d1e5e910d73b8c37989aff2cd041443a30a4c6bcbb43144f3506d425e080a528e43888d5bbd259453322e39f684aa392f5b42486ee7f598805a93c90d20f61b588056e29a9641cb58d21b24515ee653f6e816d85b3f433f69ae38ee0a342a67006071c44e1e34c705c51ce427e1c396467aa8ea20d7ad484ca81a3d6c619840ad88156d14f0ff79b2858c2e4bdfb3a0c0808ee77c08c15b69a3c04a86db92dc29274468780a281467da06f6fe008330ef3780177521ce989e612e6f2be1a7e1cb63753e096c65914ab8d8993452211a58282fc330436d6559bf0e74ee8880f70313d438a28c51273378c411d26f6e07f5538da4222274a879cab7bfb70f372c9483bcde540b66b1da070ac42b50ae9f8b9bac5aa10f59d2a552d623f739052eb3a3bfbeaaa56e1abc7622732c45dd738b75d02c7dad4361b1ac59047e7915649f65c9d3241afeb56e7b1d2fae92dd16b22c8ddc676fc912802b4ce220ce827d26e409fc5d0fe1cdadde0d43e4ee501a9da65f2790a4c29cb0a757137089911511473db0544dfc8a60ba86d4b04d84067cf5a6b996a799e024b14e0c755e2b51015bdef3c93f8fc453a770341608a2d0a9854ec23c59d78e113ee140cbb93df86bc361fe9ec5ecae261a47f968958ad17c89836dd34a64a657269b7f9bbe758f7fd46be0f05d0cce3abc382cd358c2c0903ded3b75ceec1240a9933cc1180ea0d9f2760948130bd24e3d41a0d5ee80a395811d8eca8d5e9e07fb6d149116a293cc4205a9b7bda192cf144dc256b9b33a99dc2c52a18253449955266155fc746a14e77f67ad202d0f27a0704023e800b877770d9eae039cd652cd13356b6ba33b3411bd9b501f32439c2f1e19e6351225887250d4b08e53d51e1b216c4bee40de5d2633bae4b53815cedee04d981ac2c1715490ab974ae67ce5f48393f4a669dc86d3d7414fd873f2b23fd6a06b5bb1223a17333a320c7ef9728c957b694070a3311a4a9ce17021dd542e2208218e4f847214ad81d64c0e38574058b35a01d6385a91f6985ed2c4172be454e65f4f5f350f0dbce8e9b2b87571fb07be086635ece7d4a665459de353ed46a0923d4549fed85a09ec2b16aca9347cad6c827ccf4c070ac027fa301ea857df94a267b230fabcfc0536ec2423fa52dd883b4bd7b1b74d6e15cedff2a986bc5d66f9d0c4046abea18ba18922c9a6d9df5f284f5a15943c345661a914b576dd5d913e851a0a2ed7e06c5eaaaaf2d79572531553ec64c6c94731fb7a1fa90f4c408e4eb22962cc542e53b1682817eac227e25fc6ad7e61263a27b4c696ff54f702233126d2bd1b0914af3fb018eaf31dfe21f66eedd9d8064313914914da2cd880cf7969b95b0e499042da40a30cd184ab429291b3a461ccafc402cfd2d66ff3dd150801df07522d014b8d3ff7b2e8c879f0ca458aa16090ee00862779760c1de22f1dc7ab37de723697e2bf1d2cf492ce876b4b7b3db5c23958a8b217c5d3c37c7616020d4e4cd58b7893725fd676cff25e3061dc41afcf27dcf693f8f25eb78a0a5c940d9841f43ba98a9ccb04ea30509a2812df65dd5c34abd3b594f517e41b7f3417d0feaa1659c220ef08b2bc714b72235427aed771dc8a231c4b3dc1ebe235aacf0627fda2f599d27ecd63436572a2e44a269376b3d39501d195383e8a33680547c766f6d933d9d6b8626d52220a388f9dc90ef22cc6af005ee25b86233b18082c8012614a5718c4209de9f847faed1b68aa97b9347d4b279079b9daaf65f8daad547515b55d5b5c4cb54fbb6376710aaf6abc8e2505429b65b2ea65279e195b25f7acdb78c4293292a672e998b25e985e374e68f9bcd37852e0fa8022b4d6a8fa9bffafca6fbb2ff4c0501c141c2fd018d845a8ddcc23d6663676025a24d9bd7fc11251bc8c10c6a94c6d645abe4913c3c9fa80169aa0ef287f1ff230d1e3d86d5bde3d376620d6ea623d2994928801b1e71c05b5d780bc510eb10a9b05eed9d585226ad47713764840468f9f741e808280be756cb8c378c4285420a1cb6b72a94e9151183f741f239a3b121ee95bb8605c5ca22a2f9583ea6dd94ab0b349bda9a8f8e5d398255aab51baf1f976516bf59046dca87c5292e4c9ad3539d6489f44ca76ebe7872fb350a7647c0292c4bf882cb59b50dd1121f34c0a47be86a897dd6c86c5a2d544f2b450a6076448958848fecfb31f8c5572476cd24a6a682cc752b94598f93c97141c5eb17f2c6447685c9efccc5e8f728a01ca3043fa292431b0202b73a9295962ce191e3f7c4aee1e482122a33fbd12383f20588b478adc11befaa76cb7ae7c5f0c5574b1c0b73c2e53aa10a076900ed2edb03501a60aa98a0fff33f1902d6af21c288480fcfa3650b51734f292b16ea66f3b9ffd1aaad1b28d1ac2b2b015436044c91284713bf47d510e2bee86c3132ab318b2202e9d1e73885e0773fced50858b9d294a9622d79ee5578069c25dbc42a6e813a6d42e2121721c8ee9d1424ed060470d12a8dbba92c6d8412abe7d89004989e6eeaf6b980c86ee228ecf29b3c984609e2c51f6164660eb5fb38c52d6a2d50fd7c9437d51c1095b5f1a0a3750751030641a4458849472e9727a164563278ed53961e4253ff4bcd1b4b129b9ebbe40518693ba6b34d49b6daf5178ebc4bf15b87e45de96a61315f5fd9a6768f0a4deb20af13da5233a480d63a1298a26cf3f06d59666976037c95359da0f31bf03933dcd491ed6dbc16354a711bdb304d129932adea4d5b8b611c868f17ea27717f2dd9ff9bc64bd957c889bd84d50056bdf64bb4255541361d92f4c6354a79afd8cf14247b2b69fcf5aa463bc4a7daaa1933ca7c55085fbac2308c254e0d5d30483ec78b21bf2ae", 0x1000}], 0x7, &(0x7f0000002600)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}], 0x38}}], 0x2, 0x0)

[  298.618190][ T5290] tmpfs: Unknown parameter 'h'
12:17:05 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1c"], 0x120}}], 0x1, 0x0)

12:17:05 executing program 4:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@subj_type={'subj_type', 0x3d, '\','}}]}})

12:17:05 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x40}}], 0x2, 0x0)

12:17:05 executing program 5:
syz_open_dev$vcsa(&(0x7f0000006000), 0xffffffffffffffff, 0x612201)

12:17:05 executing program 1:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.incfs.size\x00', 0x0, 0x0)

12:17:06 executing program 3:
r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpgid(0x0)
sendmmsg$unix(r1, &(0x7f0000003200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}}], 0x1, 0x20001)

12:17:06 executing program 2:
socketpair(0x0, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x6, &(0x7f0000000400))

[  299.518973][ T5305] 9pnet_fd: Insufficient options for proto=fd
12:17:06 executing program 0:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8921, &(0x7f00000003c0)={'batadv_slave_0\x00'})

12:17:06 executing program 4:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x0, 0x0, 0x0, 0x0, 0x8, "86169d2e345a33e0"}, 0x11, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x8, 0x0)
write$P9_RREADLINK(r0, &(0x7f00000001c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10)

12:17:06 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpid()
sendmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x0)

12:17:06 executing program 1:
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

12:17:06 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = getpgrp(0xffffffffffffffff)
sendmmsg$unix(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}], 0x1, 0x0)

12:17:06 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x4)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x2, 0x0, 0x0, @private1}, 0x80)

12:17:07 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x4)
sendto(r0, 0x0, 0x2000000, 0x0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private1}, 0x80)

12:17:07 executing program 4:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000200)=@v3, 0x18, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

12:17:07 executing program 5:
socketpair(0x5c, 0x0, 0x0, &(0x7f00000002c0))

12:17:07 executing program 1:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='noprefix'])

12:17:07 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8923, &(0x7f00000003c0)={'batadv_slave_0\x00'})

12:17:07 executing program 0:
r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000080)='\x00', &(0x7f0000000140)='./file0\x00', r1)

12:17:07 executing program 2:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_xen(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={'trans=xen,', {[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}})

12:17:07 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

12:17:07 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8931, &(0x7f00000003c0)={'batadv_slave_0\x00'})

[  301.173810][ T5333] cgroup: noprefix used incorrectly
12:17:08 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "0656ea", 0xc, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

12:17:08 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8941, 0x0)

12:17:08 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)

[  301.700723][ T5343] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
12:17:08 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x2d8, 0x420, 0x420, 0x1d8, 0x0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x8000000, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vcan0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'dvmrp1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)

12:17:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getpeername(r0, 0x0, &(0x7f0000000280))

12:17:08 executing program 3:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x0)
removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.size\x00')

12:17:08 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "0656ea", 0xc, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

[  302.300869][ T5345] 9pnet: Could not find request transport: xen
12:17:09 executing program 2:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x312500a, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x200a2, 0x0)

12:17:09 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @link_local}, 0x10)

12:17:09 executing program 5:
r0 = getpgid(0x0)
rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x1})

12:17:09 executing program 4:
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x0, 0x8}}}}}, 0x0)

12:17:09 executing program 3:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x0, &(0x7f00000016c0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, ']*#-@*\x9d'}}]})

12:17:09 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "0656ea", 0xc, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

12:17:09 executing program 2:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
getxattr(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)=@known='system.posix_acl_default\x00', 0x0, 0x0)

12:17:09 executing program 0:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
removexattr(&(0x7f0000000280)='./file0\x00', 0x0)

12:17:10 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8902, &(0x7f00000003c0)={'batadv_slave_0\x00'})

12:17:10 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x230001, 0x0)
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000100)='syz\x00', &(0x7f0000000140)='./file0/file0\x00', r0)

[  303.536378][ T5371] cgroup: Unknown subsys name 'smackfstransmute'
12:17:10 executing program 3:
rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x7fff})

12:17:10 executing program 0:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), 0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x8, 0x0)

12:17:10 executing program 1:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "0656ea", 0xc, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

12:17:10 executing program 2:
socketpair(0x18, 0x0, 0x1, &(0x7f0000006100))

12:17:10 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x202000)
write$P9_RREADDIR(r0, 0x0, 0x0)

12:17:10 executing program 5:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), 0x0, 0x0, 0x0)

12:17:11 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x10001)

12:17:11 executing program 0:
getxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

12:17:11 executing program 2:
socketpair$unix(0x2, 0x1, 0x0, &(0x7f0000000200))

12:17:11 executing program 5:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x7, 0x0)

12:17:11 executing program 4:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6402, 0x0)

12:17:11 executing program 1:
pselect6(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x5}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={[0xd98]}, 0x8})

12:17:12 executing program 3:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@subsystem='net_cls'}]})

12:17:12 executing program 0:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x0, 0x0)

12:17:12 executing program 1:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x312500a, 0x0)
lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@random={'security.', '\\*@\x00'}, 0x0, 0x0)

[  305.685378][   T27] audit: type=1800 audit(1698409032.386:2): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1949 res=0 errno=0
12:17:12 executing program 2:
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0)
mount$tmpfs(0x20000000, 0x0, 0x0, 0x0, 0x0)

12:17:12 executing program 5:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@random={'security.', '\x00'}, 0x0, 0x0)

12:17:12 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0)

12:17:12 executing program 0:
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x126c6987bee78feb)

12:17:13 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="290f9ef47eb2"}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'wg2\x00', 'veth1_to_batadv\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)

12:17:13 executing program 1:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x0, &(0x7f00000016c0))

12:17:13 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b1, &(0x7f00000003c0)={'batadv_slave_0\x00'})

12:17:13 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x4)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40002061)

12:17:13 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20001)

12:17:13 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[@rights={{0x10}}], 0x10}}], 0x1, 0x20001)

12:17:13 executing program 1:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@nr_inodes={'nr_inodes', 0x3d, [0x4d]}}]})

12:17:13 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0189436, 0x0)

12:17:14 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000004640)=@base={0xc}, 0x48)

12:17:14 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000000140)="4856d9b82c76675416311fd10b1e82b7", 0x10}, {&(0x7f0000000240)="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", 0xff0}, {0x0}, {&(0x7f0000004480)="f8", 0x1}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)

12:17:14 executing program 3:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x5000684)

12:17:14 executing program 2:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3125010, 0x0)
mount$9p_virtio(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0)

12:17:14 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x2a8, 0x1c8, 0xffffffff, 0x0, 0x2a8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@multicast1, @loopback, 0x0, 0x0, 'macvtap0\x00', 'hsr0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@empty, @gre_key}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv6=@mcast1, @gre_key, @icmp_id}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'xfrm0\x00', 'wg1\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "479130132310f7586521a92245cc1395c923ec6404b1d5de37b07fa9f812"}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @local, @icmp_id, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)

12:17:14 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000000140)="4856d9b82c76675416311fd1", 0xc}, {&(0x7f0000000240)="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", 0xe75}], 0x2}}], 0x1, 0x0)

12:17:14 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x4)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@un=@abs, 0x80)

12:17:14 executing program 0:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', 0x0, 0x1400, &(0x7f00000001c0)='tmpfs\x00')

12:17:14 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000040)='A', 0x1, 0x0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)

12:17:15 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000003200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0)

12:17:15 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgid(0x0)
sendmmsg$unix(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x0)

[  308.734608][ T5456] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it!
12:17:15 executing program 0:
r0 = getpgid(0x0)
r1 = getpid()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xf755})

12:17:15 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)

12:17:15 executing program 3:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xee00, 0x0, 0x0)

12:17:15 executing program 1:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1010, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)

12:17:15 executing program 2:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{}, {@gid}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trusted.overlay.redirect\x00'}}]})

12:17:16 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40087602, 0x0)

12:17:16 executing program 3:
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0)

12:17:16 executing program 0:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}], [{@context={'context', 0x3d, 'user_u'}}]}}, 0x0, 0x0, 0x0)

12:17:16 executing program 1:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84800)
write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10)

[  309.758734][ T5476] tmpfs: Unknown parameter 'smackfstransmute'
12:17:16 executing program 4:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)

12:17:16 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

12:17:16 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)

12:17:16 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8995, &(0x7f00000003c0)={'batadv_slave_0\x00'})

[  310.224642][ T5481] fuse: blksize only supported for fuseblk
12:17:17 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x21, 0x0, 0x2}}], 0x1, 0x0)

12:17:17 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
sysinfo(0x0)

12:17:17 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x20)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)

12:17:17 executing program 4:
bpf$MAP_CREATE(0xa, &(0x7f0000000000), 0x48)

12:17:17 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x14, 0x0, &(0x7f0000000240))

12:17:17 executing program 3:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x22, 0x0, &(0x7f0000000240))

12:17:17 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  311.038418][   T27] audit: type=1326 audit(1698409037.716:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5493 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x0
12:17:18 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]})
socket$phonet_pipe(0x23, 0x5, 0x2)

[  311.455938][ T5502] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:18 executing program 5:
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x0, 0x0)

12:17:18 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000), 0x4)

12:17:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:18 executing program 3:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d00000000000000000000000b"], 0x0, 0x32}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r0, 0x0, 0x0}, 0x10)

12:17:18 executing program 0:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0)

[  311.934637][   T27] audit: type=1326 audit(1698409038.576:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5505 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1a579 code=0x0
12:17:18 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0xffffffff, 0x80000001, 0x5, 0x40}, 0x48)

12:17:18 executing program 5:
mq_open(&(0x7f0000000040)='.--*\\\x00', 0x40, 0x0, &(0x7f0000000080)={0x8, 0xb561, 0x6a99, 0x100000000})

[  312.273233][ T5513] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:19 executing program 3:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x13, 0x0, &(0x7f0000000240))

12:17:19 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x5, 0x0, 0x4}]}}}}}}}}, 0x0)

12:17:19 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:19 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
recvfrom(r0, &(0x7f0000000080)=""/49, 0x31, 0x0, 0x0, 0x0)

12:17:19 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:19 executing program 5:
mq_open(&(0x7f0000000040)='.--*\\\x00', 0x40, 0x0, &(0x7f0000000080)={0x8, 0xb561, 0x6a99, 0x100000000})

[  313.070187][ T5524] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:19 executing program 3:
syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x2201)

[  313.153571][ T5527] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:20 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180), 0x8)

12:17:20 executing program 0:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x29, 0x33, 0x0, 0x0)

12:17:20 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:20 executing program 5:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0xd, 0x0, &(0x7f0000000240))

[  313.555387][   T27] audit: type=1800 audit(1698409040.196:5): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
12:17:20 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  313.972064][ T5538] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:20 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:20 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:20 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:20 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
accept4(r0, 0x0, 0x0, 0x0)

12:17:20 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  314.421898][   T27] audit: type=1800 audit(1698409041.096:6): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0
[  314.601699][   T27] audit: type=1800 audit(1698409041.266:7): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
12:17:21 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:21 executing program 5:
mq_open(&(0x7f0000000100)='9\xe1\x98\x0e\xce\xa3\x04_L\x1d\x889~+\x84 \a\xe4\xd37\n\x1fxT\xb1-8\xfa\xe3z\xdc\xc8\xa0\xb5\xf5\xfcp\f\xba\xb9?\x85l\xb0g66\x88\x8d\x918\xd9\x96\x1b\x91\xd9\xa6\xc6r\xb5k\x96e\xd7\xa3\xb9\x8f\"\x95\x0e\x87e\x1c/\xf0\x0e\xbe\xbe\x83\x90r\xad\x9bmC\x12G\xeb', 0x0, 0x0, 0x0)

[  314.811578][   T27] audit: type=1800 audit(1698409041.456:8): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
12:17:21 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:21 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:21 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  315.253860][   T27] audit: type=1800 audit(1698409041.896:9): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  315.424163][   T27] audit: type=1800 audit(1698409042.076:10): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0
12:17:22 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:22 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x42)

12:17:22 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  315.734310][   T27] audit: type=1800 audit(1698409042.366:11): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0
[  315.755772][   T27] audit: type=1800 audit(1698409042.466:12): pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0
12:17:22 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:22 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:22 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:23 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f00000002c0), 0x4)

[  316.392260][   T27] audit: type=1800 audit(1698409043.036:13): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=15 res=0 errno=0
[  316.413501][   T27] audit: type=1800 audit(1698409043.036:14): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0
12:17:23 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:23 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:23 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  316.706559][ T5576] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  316.856711][   T27] audit: type=1800 audit(1698409043.486:15): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0
12:17:23 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00,\x007\r\x00'/20, @ANYRES32=r2], 0x7c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:23 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')

[  317.162841][   T27] audit: type=1800 audit(1698409043.806:16): pid=5581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0
12:17:24 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')

[  317.309897][   T27] audit: type=1800 audit(1698409043.986:17): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=18 res=0 errno=0
12:17:24 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:24 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  317.485581][ T5586] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  317.740096][ T5590] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  317.866264][ T5590] Zero length message leads to an empty skb
[  317.888240][   T27] audit: type=1800 audit(1698409044.536:18): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0
[  317.909691][   T27] audit: type=1800 audit(1698409044.576:19): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0
12:17:24 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)

12:17:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00,\x007\r\x00'/20, @ANYRES32=r2], 0x7c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:24 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')

[  318.153056][   T27] audit: type=1800 audit(1698409044.786:20): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=21 res=0 errno=0
12:17:24 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:25 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  318.424941][ T5598] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  318.724330][ T5606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  318.763062][   T27] audit: type=1800 audit(1698409045.396:21): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=16 res=0 errno=0
[  318.788020][   T27] audit: type=1800 audit(1698409045.476:22): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=17 res=0 errno=0
12:17:25 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:25 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')

12:17:25 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)

12:17:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00,\x007\r\x00'/20, @ANYRES32=r2], 0x7c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:25 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  319.133654][ T5610] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:26 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:26 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:26 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)

[  319.763674][ T5621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:26 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00,\x007\r\x00'/20, @ANYRES32=r2], 0x7c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:26 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:26 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:27 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  320.477754][ T5632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:27 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)

12:17:27 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00,\x007\r\x00'/20, @ANYRES32=r2], 0x7c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:27 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:27 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:27 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  321.203440][ T5645] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:27 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00,\x007\r\x00'/20, @ANYRES32=r2], 0x7c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:28 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)

12:17:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  321.754257][   T27] kauditd_printk_skb: 8 callbacks suppressed
[  321.754323][   T27] audit: type=1800 audit(1698409048.476:31): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=33 res=0 errno=0
[  321.896650][   T27] audit: type=1800 audit(1698409048.536:32): pid=5653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=28 res=0 errno=0
[  321.923329][ T5655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:28 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:28 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00,\x007\r\x00'/20, @ANYRES32=r2], 0x7c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:29 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)

12:17:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  322.623117][   T27] audit: type=1800 audit(1698409049.266:33): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=31 res=0 errno=0
12:17:29 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  322.758813][   T27] audit: type=1800 audit(1698409049.396:34): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=36 res=0 errno=0
[  322.866206][ T5670] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:29 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)

12:17:29 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:30 executing program 1:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  323.574439][   T27] audit: type=1800 audit(1698409050.236:35): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=34 res=0 errno=0
12:17:30 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  323.732939][   T27] audit: type=1800 audit(1698409050.416:36): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=39 res=0 errno=0
12:17:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)

12:17:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:30 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  324.129689][ T5687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:30 executing program 1:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  324.389919][   T27] audit: type=1800 audit(1698409051.036:37): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=37 res=0 errno=0
12:17:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:31 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  324.694722][   T27] audit: type=1800 audit(1698409051.316:38): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=42 res=0 errno=0
12:17:31 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)

12:17:31 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:31 executing program 1:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  325.279663][ T5705] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  325.411395][   T27] audit: type=1800 audit(1698409052.056:39): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=40 res=0 errno=0
12:17:32 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:32 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:32 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)

12:17:32 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:32 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:33 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  326.615806][   T27] audit: type=1800 audit(1698409053.216:40): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=43 res=0 errno=0
[  326.817109][ T5725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:33 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:33 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:33 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)

12:17:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:34 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  327.701467][   T27] audit: type=1800 audit(1698409054.336:41): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=46 res=0 errno=0
12:17:34 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)

12:17:34 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:34 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  328.085980][ T5740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:34 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:35 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)

12:17:35 executing program 5:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:35 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:35 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:35 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:36 executing program 2:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:36 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)

12:17:36 executing program 5:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:36 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:36 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:36 executing program 2:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:36 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:37 executing program 5:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:37 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)

12:17:37 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:37 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:37 executing program 2:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:38 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)

[  331.714159][   T27] audit: type=1800 audit(1698409058.376:42): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=60 res=0 errno=0
12:17:38 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:38 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:38 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:38 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)

12:17:39 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:39 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:39 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  332.822027][   T27] audit: type=1800 audit(1698409059.426:43): pid=5804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=63 res=0 errno=0
12:17:39 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:39 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

12:17:40 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:40 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:40 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:40 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  333.805788][   T27] audit: type=1800 audit(1698409060.476:44): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=66 res=0 errno=0
12:17:40 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)

12:17:40 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:40 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  334.281714][   T27] audit: type=1800 audit(1698409060.926:45): pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=64 res=0 errno=0
[  334.370607][ T5825] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:41 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  334.611856][   T27] audit: type=1800 audit(1698409061.226:46): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=69 res=0 errno=0
12:17:41 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:41 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:41 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:41 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  335.255753][   T27] audit: type=1800 audit(1698409061.896:47): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=67 res=0 errno=0
12:17:42 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

[  335.296058][ T5841] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:42 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  335.444908][   T27] audit: type=1800 audit(1698409062.126:48): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=72 res=0 errno=0
12:17:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:42 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:42 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

[  336.058982][   T27] audit: type=1800 audit(1698409062.736:49): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=70 res=0 errno=0
12:17:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:43 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  336.278627][ T5856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  336.551454][   T27] audit: type=1800 audit(1698409063.196:50): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=75 res=0 errno=0
12:17:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  336.698716][ T1211] ieee802154 phy0 wpan0: encryption failed: -22
[  336.706769][ T1211] ieee802154 phy1 wpan1: encryption failed: -22
12:17:43 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:43 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  336.982343][   T27] audit: type=1800 audit(1698409063.616:51): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=73 res=0 errno=0
12:17:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:43 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:44 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:44 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

[  337.598130][   T27] audit: type=1800 audit(1698409064.276:52): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=78 res=0 errno=0
12:17:44 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:44 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:44 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:44 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:44 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:45 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  338.413027][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  338.413093][   T27] audit: type=1800 audit(1698409065.116:54): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=81 res=0 errno=0
12:17:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:45 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  338.675050][   T27] audit: type=1800 audit(1698409065.326:55): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=79 res=0 errno=0
12:17:45 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:45 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:45 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  339.273316][   T27] audit: type=1800 audit(1698409065.916:56): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=84 res=0 errno=0
12:17:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:46 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  339.448946][   T27] audit: type=1800 audit(1698409066.076:57): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=82 res=0 errno=0
12:17:46 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:46 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:46 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:46 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:46 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  340.107252][   T27] audit: type=1800 audit(1698409066.786:58): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=87 res=0 errno=0
12:17:47 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  340.331936][   T27] audit: type=1800 audit(1698409066.956:59): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=85 res=0 errno=0
12:17:47 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:47 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:47 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:17:47 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  340.938541][   T27] audit: type=1800 audit(1698409067.586:60): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=90 res=0 errno=0
12:17:47 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:48 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

[  341.474286][   T27] audit: type=1800 audit(1698409068.116:61): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=88 res=0 errno=0
12:17:48 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:48 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  341.991633][   T27] audit: type=1800 audit(1698409068.626:62): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=93 res=0 errno=0
12:17:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:17:48 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:48 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:49 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  342.485507][   T27] audit: type=1800 audit(1698409069.116:63): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=91 res=0 errno=0
12:17:49 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:49 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:49 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:49 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:50 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:50 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  343.776675][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  343.776736][   T27] audit: type=1800 audit(1698409070.496:65): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=94 res=0 errno=0
12:17:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:50 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:50 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:50 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  344.551554][   T27] audit: type=1800 audit(1698409071.156:66): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=99 res=0 errno=0
12:17:51 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:51 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  344.824540][   T27] audit: type=1800 audit(1698409071.496:67): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=97 res=0 errno=0
12:17:51 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:51 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:52 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

[  345.554027][   T27] audit: type=1800 audit(1698409072.226:68): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=102 res=0 errno=0
12:17:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:52 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  345.982442][   T27] audit: type=1800 audit(1698409072.646:69): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=100 res=0 errno=0
12:17:52 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:52 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  346.502111][   T27] audit: type=1800 audit(1698409073.146:70): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=105 res=0 errno=0
12:17:53 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:53 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:53 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

[  346.883041][   T27] audit: type=1800 audit(1698409073.536:71): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=103 res=0 errno=0
12:17:53 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:53 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:53 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  347.245514][   T27] audit: type=1800 audit(1698409073.886:72): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=108 res=0 errno=0
12:17:54 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:17:54 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

[  347.728003][   T27] audit: type=1800 audit(1698409074.386:73): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=106 res=0 errno=0
[  347.803640][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:54 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x7}]}}}}}}}}, 0x0)

12:17:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:17:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  348.213740][   T27] audit: type=1800 audit(1698409074.826:74): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=111 res=0 errno=0
12:17:55 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:55 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  348.624726][ T6042] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  348.709574][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:55 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:55 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:55 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x7}]}}}}}}}}, 0x0)

12:17:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  349.118733][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  349.118789][   T27] audit: type=1800 audit(1698409075.836:76): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=114 res=0 errno=0
12:17:56 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:56 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  349.575485][ T6058] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  349.663507][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x7}]}}}}}}}}, 0x0)

[  349.804630][   T27] audit: type=1800 audit(1698409076.456:77): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=112 res=0 errno=0
12:17:56 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  350.013565][   T27] audit: type=1800 audit(1698409076.626:78): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=117 res=0 errno=0
12:17:56 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:56 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:57 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

[  350.237358][ T6070] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:57 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:57 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  350.713617][   T27] audit: type=1800 audit(1698409077.396:79): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=120 res=0 errno=0
[  350.739660][   T27] audit: type=1800 audit(1698409077.416:80): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=115 res=0 errno=0
12:17:57 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:57 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  350.998408][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:17:57 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

[  351.152886][ T6084] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:58 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

12:17:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:17:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  351.522997][   T27] audit: type=1800 audit(1698409078.166:81): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=123 res=0 errno=0
[  351.549878][   T27] audit: type=1800 audit(1698409078.226:82): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=118 res=0 errno=0
12:17:58 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:58 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:58 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:58 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)

[  352.047622][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  352.112350][ T6098] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:17:59 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  352.486018][   T27] audit: type=1800 audit(1698409079.146:83): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=121 res=0 errno=0
[  352.507451][   T27] audit: type=1800 audit(1698409079.146:84): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=126 res=0 errno=0
12:17:59 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:17:59 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:59 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @sack]}}}}}}}}, 0x0)

12:17:59 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:17:59 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffa)

[  353.024495][ T6109] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  353.332763][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  353.361256][   T27] audit: type=1800 audit(1698409079.966:85): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=124 res=0 errno=0
12:18:00 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:18:00 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:00 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffa)

12:18:00 executing program 1:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0)

12:18:00 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  353.968326][ T6124] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:00 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:00 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106}}, 0x20)

[  354.169218][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  354.169275][   T27] audit: type=1800 audit(1698409080.886:87): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=127 res=0 errno=0
12:18:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:18:01 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:01 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffa)

[  354.648099][   T27] audit: type=1800 audit(1698409081.296:88): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=132 res=0 errno=0
[  354.735919][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:01 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  354.802735][ T6136] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:01 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x17, 0x0, &(0x7f0000000240))

12:18:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  355.171423][   T27] audit: type=1800 audit(1698409081.796:89): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=130 res=0 errno=0
12:18:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:02 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:02 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0xfffffffffffffffa)

12:18:02 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0)

[  355.542048][   T27] audit: type=1800 audit(1698409082.176:90): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=135 res=0 errno=0
[  355.624786][ T6148] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:02 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  355.850535][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:02 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0)

[  356.015623][   T27] audit: type=1800 audit(1698409082.666:91): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=133 res=0 errno=0
12:18:03 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x0)

12:18:03 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x1, &(0x7f00000006c0)=@raw=[@generic={0xc6}], &(0x7f0000000780)='syzkaller\x00', 0x8}, 0x90)

12:18:03 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:03 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  356.483158][ T6162] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  356.601193][   T27] audit: type=1800 audit(1698409083.216:92): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=138 res=0 errno=0
12:18:03 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:03 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0)

[  357.189004][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  357.398557][   T27] audit: type=1800 audit(1698409084.016:93): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=136 res=0 errno=0
12:18:04 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10, 0x0}, 0x4000044)

[  357.538785][ T6176] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  357.636877][   T27] audit: type=1800 audit(1698409084.256:94): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=141 res=0 errno=0
12:18:04 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:04 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:04 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0)

12:18:04 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:05 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x12, 0x0, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  358.309562][ T6181] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:05 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  358.511261][   T27] audit: type=1800 audit(1698409085.146:95): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=139 res=0 errno=0
[  358.532760][   T27] audit: type=1800 audit(1698409085.186:96): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=144 res=0 errno=0
12:18:05 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  358.625355][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  358.629173][ T6188] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:05 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  358.886370][ T6191] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:05 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:05 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x45}]})

[  359.172932][ T6194] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:05 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x12, 0x0, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  359.371940][   T27] audit: type=1800 audit(1698409086.026:97): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=142 res=0 errno=0
12:18:06 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  359.518822][   T27] audit: type=1800 audit(1698409086.156:98): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=147 res=0 errno=0
12:18:06 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:06 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:06 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa2}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  359.857369][ T6203] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:06 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x12, 0x0, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  360.229514][ T6209] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  360.265322][   T27] audit: type=1800 audit(1698409086.906:99): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=150 res=0 errno=0
[  360.286905][   T27] audit: type=1800 audit(1698409086.986:100): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=145 res=0 errno=0
12:18:07 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:07 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:07 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:07 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:07 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x7}]}}}}}}}}, 0x0)

[  360.965953][   T27] audit: type=1800 audit(1698409087.606:101): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=153 res=0 errno=0
[  360.986000][ T6222] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  361.035631][ T6223] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:07 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:07 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  361.323087][   T27] audit: type=1800 audit(1698409087.996:102): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=148 res=0 errno=0
12:18:08 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000440))
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:08 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:08 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  361.542850][ T6228] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:08 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x0, 0xa40}, 0x48)

[  361.819210][   T27] audit: type=1800 audit(1698409088.466:103): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=156 res=0 errno=0
[  361.953672][ T6235] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:08 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  362.127966][   T27] audit: type=1800 audit(1698409088.796:104): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=151 res=0 errno=0
12:18:08 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:08 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000440))
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:09 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000001c0)={0x2, "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"}, 0xfd1, 0x800)

[  362.543974][   T27] audit: type=1800 audit(1698409089.206:105): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=159 res=0 errno=0
12:18:09 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  362.836987][   T27] audit: type=1800 audit(1698409089.486:106): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=154 res=0 errno=0
12:18:09 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  363.067031][ T6251] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:09 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000440))
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:10 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:10 executing program 1:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), 0x10}, 0x90)

12:18:10 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:10 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:10 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  363.940831][ T6263] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:10 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x9, 0xa, 0x0, 0x0}, 0x90)

12:18:10 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:11 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  364.476189][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  364.476271][   T27] audit: type=1800 audit(1698409091.186:110): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=160 res=0 errno=0
12:18:11 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:11 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000700))

12:18:11 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:11 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  365.069163][   T27] audit: type=1800 audit(1698409091.716:111): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=167 res=0 errno=0
12:18:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:11 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:12 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:12 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x6}]})

[  365.532660][   T27] audit: type=1800 audit(1698409092.206:112): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=163 res=0 errno=0
12:18:12 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:12 executing program 5:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:12 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  365.918422][   T27] audit: type=1800 audit(1698409092.556:113): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=169 res=0 errno=0
[  365.940309][   T27] audit: type=1326 audit(1698409092.576:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fcd579 code=0x0
12:18:12 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:12 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x6}]})

12:18:12 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  366.362498][   T27] audit: type=1800 audit(1698409092.986:115): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=166 res=0 errno=0
12:18:13 executing program 5:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:13 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:13 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  366.673349][   T27] audit: type=1800 audit(1698409093.346:116): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=171 res=0 errno=0
[  366.767609][   T27] audit: type=1326 audit(1698409093.426:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fcd579 code=0x0
12:18:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:13 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:13 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28}, 0x20)

12:18:13 executing program 5:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  367.251696][   T27] audit: type=1800 audit(1698409093.866:118): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=169 res=0 errno=0
12:18:14 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:14 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  367.446699][   T27] audit: type=1800 audit(1698409094.086:119): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=173 res=0 errno=0
12:18:14 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:14 executing program 1:
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0xffffffffffffffff}, {0x0}], 0x2}, 0x0)

12:18:14 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:14 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:14 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:15 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:15 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})

12:18:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:15 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:15 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:15 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:15 executing program 1:
mq_open(&(0x7f00000001c0)='!:{$+^\\]#,%-#\x9c%{[]&\x00', 0x0, 0x0, 0x0)

12:18:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:16 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:16 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  369.607420][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  369.607477][   T27] audit: type=1800 audit(1698409096.316:125): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=180 res=0 errno=0
12:18:16 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:16 executing program 1:
r0 = socket(0x1, 0x3, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)

12:18:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:16 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  370.263149][   T27] audit: type=1800 audit(1698409096.896:126): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=177 res=0 errno=0
12:18:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:17 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="6f70efcb1c92b16a012c8d04b1c0ac55", 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x1000, 0x4)

[  370.426071][   T27] audit: type=1800 audit(1698409097.066:127): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=183 res=0 errno=0
12:18:17 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:17 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:17 executing program 3:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:17 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:17 executing program 1:
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64142, 0x0)

[  371.157680][   T27] audit: type=1800 audit(1698409097.806:128): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=179 res=0 errno=0
[  371.179843][   T27] audit: type=1800 audit(1698409097.836:129): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=186 res=0 errno=0
12:18:18 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:18 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:18 executing program 3:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  371.673045][   T27] audit: type=1800 audit(1698409098.326:130): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1955 res=0 errno=0
12:18:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:18 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x32}, 0x20)

[  371.874928][   T27] audit: type=1800 audit(1698409098.506:131): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=189 res=0 errno=0
12:18:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:18 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  372.002754][   T27] audit: type=1800 audit(1698409098.636:132): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=181 res=0 errno=0
12:18:18 executing program 3:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:19 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:19 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xa, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000640)='GPL\x00', 0x6}, 0x90)

12:18:19 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  372.598699][   T27] audit: type=1800 audit(1698409099.256:133): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=192 res=0 errno=0
12:18:19 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:19 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  372.916076][   T27] audit: type=1800 audit(1698409099.556:134): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=184 res=0 errno=0
12:18:19 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:19 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:20 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xa, &(0x7f00000009c0)=ANY=[], &(0x7f0000000640)='GPL\x00', 0xa}, 0x90)

12:18:20 executing program 2:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:20 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:20 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:20 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x4, 0x0, @l2={'ib', 0x3a, 'pim6reg1\x00'}}}}}, 0x34}}, 0x0)

12:18:20 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:20 executing program 2:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:20 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  374.228666][ T6434] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  374.513198][ T6440] tipc: Enabling of bearer <ib:pim6reg1> rejected, failed to enable media
12:18:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:21 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:21 executing program 2:
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:21 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x0, 0x0, 0x0, 0x4}, 0x48)

[  374.845877][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  374.845935][   T27] audit: type=1800 audit(1698409101.566:139): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=201 res=0 errno=0
[  375.016809][ T6448] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:21 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:21 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:22 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  375.486244][   T27] audit: type=1800 audit(1698409102.116:140): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=193 res=0 errno=0
12:18:22 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind(r0, 0x0, 0x0)

12:18:22 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  375.623209][ T6458] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  375.839479][   T27] audit: type=1800 audit(1698409102.486:141): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=204 res=0 errno=0
12:18:22 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:22 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000180)=""/118, &(0x7f0000000280)=0x76)

12:18:22 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  376.276921][   T27] audit: type=1800 audit(1698409102.926:142): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=196 res=0 errno=0
[  376.293089][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:23 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:23 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:23 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  376.661221][   T27] audit: type=1800 audit(1698409103.306:143): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=207 res=0 errno=0
12:18:23 executing program 1:
r0 = socket$tipc(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id, 0x10)

12:18:23 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:23 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  377.118656][   T27] audit: type=1800 audit(1698409103.756:144): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=199 res=0 errno=0
[  377.146062][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:23 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:24 executing program 1:
mq_open(&(0x7f0000000040)='.--*\\\x00', 0x0, 0x0, 0x0)

[  377.577804][   T27] audit: type=1800 audit(1698409104.236:145): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=210 res=0 errno=0
12:18:24 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:24 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  377.845283][   T27] audit: type=1800 audit(1698409104.496:146): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=202 res=0 errno=0
[  377.895929][ T6498] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:24 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:24 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="6f70efcb1c92b16a012c8d04b1c0ac55", 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0), 0x4)

12:18:24 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  378.505135][   T27] audit: type=1800 audit(1698409105.146:147): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=213 res=0 errno=0
12:18:25 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:25 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  378.733445][   T27] audit: type=1800 audit(1698409105.376:148): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=205 res=0 errno=0
12:18:25 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:25 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:25 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:25 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:26 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:26 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:26 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:26 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:26 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:26 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:26 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

[  380.253679][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  380.253730][   T27] audit: type=1800 audit(1698409106.966:152): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=211 res=0 errno=0
12:18:27 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:27 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  380.526986][   T27] audit: type=1800 audit(1698409107.156:153): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=222 res=0 errno=0
[  380.642652][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:27 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:27 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:27 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:27 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  381.093347][   T27] audit: type=1800 audit(1698409107.746:154): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=225 res=0 errno=0
[  381.115337][   T27] audit: type=1800 audit(1698409107.816:155): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=214 res=0 errno=0
12:18:27 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:27 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:28 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  381.467941][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:28 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:28 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

12:18:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  381.998277][   T27] audit: type=1800 audit(1698409108.626:156): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=228 res=0 errno=0
[  382.020010][   T27] audit: type=1800 audit(1698409108.716:157): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=217 res=0 errno=0
12:18:28 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:28 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:28 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  382.375547][ T6567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:29 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

12:18:29 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  382.813166][   T27] audit: type=1800 audit(1698409109.456:158): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=231 res=0 errno=0
[  382.834936][   T27] audit: type=1800 audit(1698409109.486:159): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=220 res=0 errno=0
12:18:29 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
shmctl$IPC_RMID(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:29 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  383.070342][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:29 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

12:18:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  383.601530][   T27] audit: type=1800 audit(1698409110.256:160): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=234 res=0 errno=0
12:18:30 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:30 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  383.755792][   T27] audit: type=1800 audit(1698409110.396:161): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=223 res=0 errno=0
12:18:30 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
shmctl$IPC_RMID(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:30 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  384.192215][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:31 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:31 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:31 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
shmctl$IPC_RMID(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:31 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:31 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:31 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  385.322519][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:32 executing program 4:
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:32 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:32 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:32 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  385.969209][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  385.969275][   T27] audit: type=1800 audit(1698409112.686:166): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=243 res=0 errno=0
12:18:32 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:32 executing program 4:
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:32 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

[  386.221769][   T27] audit: type=1800 audit(1698409112.866:167): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=232 res=0 errno=0
12:18:33 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  386.520149][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:18:33 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:33 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

[  386.851898][   T27] audit: type=1800 audit(1698409113.466:168): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=246 res=0 errno=0
12:18:33 executing program 4:
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:33 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  387.113186][   T27] audit: type=1800 audit(1698409113.736:169): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=235 res=0 errno=0
12:18:33 executing program 0:
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:18:34 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:34 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  387.647310][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  387.730479][   T27] audit: type=1800 audit(1698409114.376:170): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=249 res=0 errno=0
12:18:34 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  387.863422][   T27] audit: type=1800 audit(1698409114.516:171): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=238 res=0 errno=0
12:18:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:18:34 executing program 0:
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  388.112671][   T27] audit: type=1800 audit(1698409114.746:172): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=252 res=0 errno=0
12:18:34 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:35 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:35 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  388.756766][   T27] audit: type=1800 audit(1698409115.396:173): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=255 res=0 errno=0
[  388.778412][   T27] audit: type=1800 audit(1698409115.476:174): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=241 res=0 errno=0
12:18:35 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  388.903092][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:35 executing program 0:
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:18:35 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  389.516991][   T27] audit: type=1800 audit(1698409116.156:175): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=258 res=0 errno=0
12:18:36 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:36 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:36 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:36 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:36 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

[  389.947553][ T5029] Bluetooth: hci0: command 0x0406 tx timeout
[  389.948248][ T5024] Bluetooth: hci1: command 0x0406 tx timeout
[  389.954413][ T5029] Bluetooth: hci5: command 0x0406 tx timeout
[  389.954524][ T5029] Bluetooth: hci3: command 0x0406 tx timeout
[  389.960860][ T5024] Bluetooth: hci2: command 0x0406 tx timeout
[  389.967273][ T5029] Bluetooth: hci4: command 0x0406 tx timeout
[  390.032884][ T6696] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:36 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:37 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:37 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:37 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

[  390.585935][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:37 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:37 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:37 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  391.040894][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  391.040955][   T27] audit: type=1800 audit(1698409117.756:179): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=250 res=0 errno=0
12:18:37 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:38 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  391.424038][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[  391.486344][   T27] audit: type=1800 audit(1698409118.126:180): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=264 res=0 errno=0
12:18:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:38 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:38 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

12:18:38 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  392.026205][   T27] audit: type=1800 audit(1698409118.656:181): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=253 res=0 errno=0
12:18:38 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  392.216719][   T27] audit: type=1800 audit(1698409118.856:182): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=267 res=0 errno=0
12:18:39 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:39 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:39 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}, @mptcp=@syn={0x1e, 0x2}]}}}}}}}}, 0x0)

[  392.768234][   T27] audit: type=1800 audit(1698409119.416:183): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=256 res=0 errno=0
12:18:39 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:39 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  393.079230][   T27] audit: type=1800 audit(1698409119.696:184): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=271 res=0 errno=0
12:18:39 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:40 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}]}}}}}}}}, 0x0)

[  393.697658][   T27] audit: type=1800 audit(1698409120.356:185): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=259 res=0 errno=0
12:18:40 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:40 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

[  393.790625][ T6763] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:40 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/212)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r2, 0xb)
shmat(r2, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}]}}}}}}}}, 0x0)

[  393.965474][   T27] audit: type=1800 audit(1698409120.616:186): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=275 res=0 errno=0
12:18:40 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00'}, 0x90)

12:18:40 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:41 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  394.511534][   T27] audit: type=1800 audit(1698409121.146:187): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=262 res=0 errno=0
[  394.556778][ T6773] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@nop]}}}}}}}}, 0x0)

12:18:41 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x3}]}}}}}}}}, 0x0)

12:18:41 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00'}, 0x90)

12:18:41 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  394.980531][   T27] audit: type=1800 audit(1698409121.616:188): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=279 res=0 errno=0
12:18:41 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[  395.300510][ T6785] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:42 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:42 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1b}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00'}, 0x90)

12:18:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:18:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  395.758305][ T6793] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

12:18:42 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  396.115611][ T6801] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  396.131629][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  396.131690][   T27] audit: type=1800 audit(1698409122.836:191): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=270 res=0 errno=0
12:18:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:43 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4}, 0x48)

12:18:43 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:43 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  396.667284][ T6808] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  396.718087][   T27] audit: type=1800 audit(1698409123.366:192): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=285 res=0 errno=0
12:18:43 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)

12:18:43 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

12:18:43 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  397.003798][ T6813] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  397.051604][   T27] audit: type=1800 audit(1698409123.686:193): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=274 res=0 errno=0
12:18:43 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:44 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  397.353987][   T27] audit: type=1800 audit(1698409123.996:194): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=288 res=0 errno=0
12:18:44 executing program 1:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)

12:18:44 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  397.535043][ T6820] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:44 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  397.834638][ T6825] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  397.846520][   T27] audit: type=1800 audit(1698409124.466:195): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=277 res=0 errno=0
12:18:44 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:44 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f00000023c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x0)

[  398.182516][ T1211] ieee802154 phy0 wpan0: encryption failed: -22
[  398.188022][   T27] audit: type=1800 audit(1698409124.876:196): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=291 res=0 errno=0
[  398.189066][ T1211] ieee802154 phy1 wpan1: encryption failed: -22
12:18:45 executing program 1:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)

12:18:45 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x29, 0x18, 0x0, 0x0)

12:18:45 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  398.435782][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:45 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:45 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x32, 0x0, 0x18, 0x18, 0x2, [@func_proto, @restrict]}}, 0x0, 0x32}, 0x20)

12:18:45 executing program 3:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @l2, @xdp, @nfc={0x27, 0x0, 0xffffffffffffffff}})

[  398.965974][   T27] audit: type=1800 audit(1698409125.606:197): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=280 res=0 errno=0
12:18:45 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

12:18:45 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  399.101255][   T27] audit: type=1800 audit(1698409125.736:198): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=294 res=0 errno=0
12:18:45 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  399.189231][ T6847] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:46 executing program 2:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

12:18:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:46 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x29, 0x31, 0x0, 0x0)

12:18:46 executing program 1:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000003300), 0x4)

[  399.793203][ T6859] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
[  399.824572][   T27] audit: type=1800 audit(1698409126.466:199): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=283 res=0 errno=0
[  399.846274][   T27] audit: type=1800 audit(1698409126.526:200): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=297 res=0 errno=0
12:18:46 executing program 2:
bpf$BPF_BTF_LOAD(0x6, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

12:18:46 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:46 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0)

12:18:46 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:47 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000000c0))

12:18:47 executing program 2:
syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x2)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'batadv0\x00', {}, 0x3c})

[  400.439053][ T6870] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:47 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:47 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)

12:18:47 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:47 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:47 executing program 1:
r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

[  401.118570][ T6881] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:48 executing program 2:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x8341, 0x0)

12:18:48 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

12:18:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  401.337974][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  401.338030][   T27] audit: type=1800 audit(1698409128.056:203): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=289 res=0 errno=0
12:18:48 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x86, 0x0, 0x0)

12:18:48 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  401.524483][   T27] audit: type=1800 audit(1698409128.176:204): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=303 res=0 errno=0
12:18:48 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  401.833569][ T6893] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:48 executing program 3:
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@id, 0xfffffffffffffedf, 0x0}, 0x0)

12:18:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:48 executing program 2:
r0 = socket$tipc(0x1e, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

12:18:48 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x29, 0xb, 0x0, 0x0)

[  402.239803][   T27] audit: type=1800 audit(1698409128.896:205): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=292 res=0 errno=0
[  402.261673][   T27] audit: type=1800 audit(1698409128.946:206): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=306 res=0 errno=0
12:18:49 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:49 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  402.612724][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:49 executing program 3:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x3, 0x0, 0x0)

12:18:49 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:49 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000240))

12:18:49 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202874000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

[  403.011540][   T27] audit: type=1800 audit(1698409129.636:207): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=309 res=0 errno=0
[  403.033069][   T27] audit: type=1800 audit(1698409129.676:208): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=295 res=0 errno=0
12:18:49 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:49 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:50 executing program 3:
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000000)=@nameseq={0x1e, 0x0}, 0x10, 0x0}, 0x0)

[  403.493951][ T6918] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:50 executing program 2:
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

[  403.802150][   T27] audit: type=1800 audit(1698409130.436:209): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=312 res=0 errno=0
[  403.824420][   T27] audit: type=1800 audit(1698409130.496:210): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=298 res=0 errno=0
12:18:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:50 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x6}]}}}}}}}}, 0x0)

12:18:50 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:50 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:50 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4)

12:18:51 executing program 2:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x8700)

[  404.422681][ T6933] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  404.427209][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  404.547525][   T27] audit: type=1800 audit(1698409131.176:211): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=315 res=0 errno=0
[  404.569113][   T27] audit: type=1800 audit(1698409131.256:212): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=301 res=0 errno=0
12:18:51 executing program 1:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind(r0, &(0x7f0000001140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)

12:18:51 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:51 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:51 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:51 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x90, 0x0, "e1740686306c9331a47e2faa2960df9314836395ab0db4df4fe2444f8b27"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)

12:18:51 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

[  405.245979][ T6949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  405.262927][ T6950] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:52 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x3, &(0x7f0000000cc0)=@raw=[@exit, @ldst={0x0, 0x0, 0x2}, @generic], &(0x7f0000000d00)='syzkaller\x00'}, 0x90)

12:18:52 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:52 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:52 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:52 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0xd, 0x0, 0x4)

12:18:52 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x3, 0x0, 0x5}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:18:52 executing program 1:
syz_io_uring_setup(0xcd2f, &(0x7f0000000080), 0x0, 0x0)

12:18:52 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  406.070841][ T6964] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:52 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:52 executing program 2:
syz_io_uring_setup(0x7, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))

[  406.156005][ T6963] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
12:18:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x7fff}}]}}}]}, 0x80}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:53 executing program 1:
r0 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id, 0x10)
recvfrom(r0, &(0x7f0000000080)=""/49, 0x31, 0x0, 0x0, 0x0)

12:18:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x18, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x13, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  406.679622][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  406.679677][   T27] audit: type=1800 audit(1698409133.396:217): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=310 res=0 errno=0
[  406.815778][ T6973] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:53 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  406.890992][   T27] audit: type=1800 audit(1698409133.536:218): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=324 res=0 errno=0
12:18:53 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28, 0x0, 0x1}, 0x20)

12:18:53 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26}, 0x20)

12:18:53 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:53 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x18, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x13, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  407.499591][   T27] audit: type=1800 audit(1698409134.156:219): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=313 res=0 errno=0
12:18:54 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0xc, 0x0, &(0x7f0000000240))

[  407.616914][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  407.623354][   T27] audit: type=1800 audit(1698409134.286:220): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=327 res=0 errno=0
12:18:54 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)

12:18:54 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:54 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x18, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x13, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:18:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:54 executing program 2:
r0 = socket$tipc(0x1e, 0x4, 0x0)
getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000080)=0xffffffffffffffa4)

[  408.297979][   T27] audit: type=1800 audit(1698409134.926:221): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=316 res=0 errno=0
12:18:55 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0)

[  408.449751][   T27] audit: type=1800 audit(1698409135.046:222): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=330 res=0 errno=0
12:18:55 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:55 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:55 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x18, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x13, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  408.736960][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:55 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x12, 0xa, 0x0, 0x0}, 0x90)

12:18:55 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x2, &(0x7f00000006c0)=@raw=[@ldst={0x3}, @generic={0xc6}], &(0x7f0000000780)='syzkaller\x00', 0x8}, 0x90)

[  409.112390][   T27] audit: type=1800 audit(1698409135.776:223): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=333 res=0 errno=0
[  409.135109][   T27] audit: type=1800 audit(1698409135.836:224): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=319 res=0 errno=0
12:18:55 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:55 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, 0x0, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:56 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:56 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x18, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x13, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:18:56 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="3d825ddc2c03276a8e5fe870d46c9688658d345b84328d9d57c31d46535e33c515e96077d6e1e29138ab3ed7f0af0006ce74ecf06198bff5a7f52eb6bd3d7f085da2db665a7344cb73f5935fa39975fe50bdd44ab07b18bb4f1be64254396940fd3424c0bb2ef52ca1f3d0438023f13328a3f56a0b218db7b00b25925fe1b149a3", 0x81}, {&(0x7f0000000380)="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", 0x4f8}], 0x2}}], 0x1, 0x8000)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000100)=[{&(0x7f0000000000)="3302", 0x2a}], 0x1, 0x0, 0x0, 0x2c}, 0x0)

12:18:56 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x29, 0x8, 0x0, 0x0)

[  409.768350][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:56 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x18, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x13, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

[  409.960616][   T27] audit: type=1800 audit(1698409136.596:225): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=322 res=0 errno=0
[  409.982151][   T27] audit: type=1800 audit(1698409136.656:226): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=336 res=0 errno=0
12:18:56 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:56 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, 0x0, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:56 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="3d825ddc2c03276a8e5fe870d46c9688658d345b84328d9d57c31d46535e33c515e96077d6e1e29138ab3ed7f0af0006ce74ecf06198bff5a7f52eb6bd3d7f085da2db665a7344cb73f5935fa39975fe50bdd44ab07b18bb4f1be64254396940fd3424c0bb2ef52ca1f3d0438023f13328a3f56a0b218db7b00b25925fe1b149a3", 0x81}, {&(0x7f0000000380)="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", 0x4f8}], 0x2}}], 0x1, 0x8000)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000100)=[{&(0x7f0000000000)="3302", 0x2a}], 0x1, 0x0, 0x0, 0x2c}, 0x0)

12:18:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:57 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x32}, 0x20)

12:18:57 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x18, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x13, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:18:57 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xfff, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

12:18:57 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="3d825ddc2c03276a8e5fe870d46c9688658d345b84328d9d57c31d46535e33c515e96077d6e1e29138ab3ed7f0af0006ce74ecf06198bff5a7f52eb6bd3d7f085da2db665a7344cb73f5935fa39975fe50bdd44ab07b18bb4f1be64254396940fd3424c0bb2ef52ca1f3d0438023f13328a3f56a0b218db7b00b25925fe1b149a3", 0x81}, {&(0x7f0000000380)="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", 0x4f8}], 0x2}}], 0x1, 0x8000)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000100)=[{&(0x7f0000000000)="3302", 0x2a}], 0x1, 0x0, 0x0, 0x2c}, 0x0)

12:18:57 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, 0x0, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  410.924141][ T7042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
12:18:57 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x10}, @sack]}}}}}}}}, 0x0)

12:18:58 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12:18:58 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4000f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x18, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x13, 0x2, 0x0, 0x7}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0)

12:18:58 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x0)
shmctl$IPC_RMID(r1, 0x0)
sendfile(r0, r0, 0x0, 0xfffffffffffffffa)
shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)
r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000000000/0x1000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212)
r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000016000/0x1000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000100)=""/173)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000002000/0x1000)=nil, 0x4000)
shmctl$SHM_UNLOCK(0x0, 0xc)
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
shmat(0x0, &(0x7f0000002000/0x1000)=nil, 0x6000)
shmctl$IPC_RMID(0x0, 0x0)
openat$thread_pidfd(0xffffff9c, 0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmat(0x0, &(0x7f0000004000/0x3000)=nil, 0x0)
shmat(r4, &(0x7f0000ff9000/0x3000)=nil, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/39, 0x27}, {&(0x7f00000014c0)=""/64, 0x40}], 0x6, 0xfffffffe, 0x0)

[  411.558231][ T7055] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  411.569541][ T7055] =====================================================
[  411.577071][ T7055] BUG: KMSAN: uninit-value in subflow_check_req+0x1028/0x15d0
[  411.584823][ T7055]  subflow_check_req+0x1028/0x15d0
[  411.590132][ T7055]  subflow_v6_route_req+0x269/0x410
[  411.595669][ T7055]  tcp_conn_request+0x14eb/0x4170
[  411.601054][ T7055]  subflow_v6_conn_request+0x3ee/0x510
[  411.606726][ T7055]  tcp_rcv_state_process+0x2e1/0x4980
[  411.612549][ T7055]  tcp_v6_do_rcv+0x12b8/0x1fd0
[  411.617583][ T7055]  tcp_v6_rcv+0x47f5/0x4fa0
[  411.622389][ T7055]  ip6_protocol_deliver_rcu+0xda6/0x2a60
[  411.628250][ T7055]  ip6_input+0x15d/0x430
[  411.632849][ T7055]  ip6_rcv_finish+0x5db/0x870
[  411.637732][ T7055]  ipv6_rcv+0xda/0x390
[  411.642080][ T7055]  __netif_receive_skb+0x1a6/0x5a0
[  411.647413][ T7055]  netif_receive_skb+0x58/0x660
[  411.652570][ T7055]  tun_rx_batched+0x3ee/0x980
[  411.657495][ T7055]  tun_get_user+0x54c5/0x69c0
[  411.662450][ T7055]  tun_chr_write_iter+0x3af/0x5d0
[  411.667691][ T7055]  vfs_write+0x8ef/0x15c0
[  411.672361][ T7055]  ksys_write+0x20f/0x4c0
[  411.676890][ T7055]  __ia32_sys_write+0x91/0xd0
[  411.681939][ T7055]  __do_fast_syscall_32+0xa2/0x100
[  411.687297][ T7055]  do_fast_syscall_32+0x37/0x80
[  411.692434][ T7055]  do_SYSENTER_32+0x1f/0x30
[  411.697142][ T7055]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  411.704184][ T7055] 
[  411.706606][ T7055] Local variable mp_opt created at:
[  411.712094][ T7055]  subflow_check_req+0x6d/0x15d0
[  411.717242][ T7055]  subflow_v6_route_req+0x269/0x410
[  411.722769][ T7055] 
[  411.725191][ T7055] CPU: 1 PID: 7055 Comm: syz-executor.2 Not tainted 6.6.0-rc7-syzkaller-00123-g3a568e3a961b #0
[  411.735863][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[  411.746221][ T7055] =====================================================
[  411.753455][ T7055] Disabling lock debugging due to kernel taint
[  411.759717][ T7055] Kernel panic - not syncing: kmsan.panic set ...
[  411.766248][ T7055] CPU: 1 PID: 7055 Comm: syz-executor.2 Tainted: G    B              6.6.0-rc7-syzkaller-00123-g3a568e3a961b #0
[  411.778216][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[  411.788378][ T7055] Call Trace:
[  411.791730][ T7055]  <TASK>
[  411.794754][ T7055]  dump_stack_lvl+0x1bf/0x240
[  411.799599][ T7055]  dump_stack+0x1e/0x20
[  411.803898][ T7055]  panic+0x4d5/0xc70
[  411.807922][ T7055]  ? add_taint+0x108/0x1a0
[  411.812605][ T7055]  kmsan_report+0x2d0/0x2d0
[  411.817267][ T7055]  ? kmsan_internal_chain_origin+0xba/0xd0
[  411.823219][ T7055]  ? __msan_warning+0x96/0x110
[  411.828220][ T7055]  ? subflow_check_req+0x1028/0x15d0
[  411.833648][ T7055]  ? subflow_v6_route_req+0x269/0x410
[  411.839177][ T7055]  ? tcp_conn_request+0x14eb/0x4170
[  411.844555][ T7055]  ? subflow_v6_conn_request+0x3ee/0x510
[  411.850332][ T7055]  ? tcp_rcv_state_process+0x2e1/0x4980
[  411.856074][ T7055]  ? tcp_v6_do_rcv+0x12b8/0x1fd0
[  411.861229][ T7055]  ? tcp_v6_rcv+0x47f5/0x4fa0
[  411.866093][ T7055]  ? ip6_protocol_deliver_rcu+0xda6/0x2a60
[  411.872076][ T7055]  ? ip6_input+0x15d/0x430
[  411.876636][ T7055]  ? ip6_rcv_finish+0x5db/0x870
[  411.881628][ T7055]  ? ipv6_rcv+0xda/0x390
[  411.886029][ T7055]  ? __netif_receive_skb+0x1a6/0x5a0
[  411.891485][ T7055]  ? netif_receive_skb+0x58/0x660
[  411.896674][ T7055]  ? tun_rx_batched+0x3ee/0x980
[  411.901675][ T7055]  ? tun_get_user+0x54c5/0x69c0
[  411.906715][ T7055]  ? tun_chr_write_iter+0x3af/0x5d0
[  411.912099][ T7055]  ? vfs_write+0x8ef/0x15c0
[  411.916761][ T7055]  ? ksys_write+0x20f/0x4c0
[  411.921421][ T7055]  ? __ia32_sys_write+0x91/0xd0
[  411.926444][ T7055]  ? __do_fast_syscall_32+0xa2/0x100
[  411.931918][ T7055]  ? do_fast_syscall_32+0x37/0x80
[  411.937132][ T7055]  ? do_SYSENTER_32+0x1f/0x30
[  411.941982][ T7055]  ? entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  411.948697][ T7055]  ? entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  411.955427][ T7055]  ? kmsan_internal_poison_memory+0x90/0xa0
[  411.961525][ T7055]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[  411.967511][ T7055]  __msan_warning+0x96/0x110
[  411.972250][ T7055]  subflow_check_req+0x1028/0x15d0
[  411.977535][ T7055]  ? ip6_dst_lookup_flow+0x133/0x170
[  411.983021][ T7055]  ? inet6_csk_route_req+0x302/0x410
[  411.988546][ T7055]  ? tcp_v6_route_req+0x575/0x5d0
[  411.993733][ T7055]  subflow_v6_route_req+0x269/0x410
[  411.999100][ T7055]  ? subflow_v6_req_destructor+0x190/0x190
[  412.005083][ T7055]  tcp_conn_request+0x14eb/0x4170
[  412.010295][ T7055]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  412.016712][ T7055]  subflow_v6_conn_request+0x3ee/0x510
[  412.022328][ T7055]  ? subflow_v6_send_synack+0x1d0/0x1d0
[  412.028058][ T7055]  tcp_rcv_state_process+0x2e1/0x4980
[  412.033632][ T7055]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[  412.039609][ T7055]  ? kmsan_internal_memmove_metadata+0x9a/0x360
[  412.046081][ T7055]  ? tcp_rcv_state_process+0x279/0x4980
[  412.051857][ T7055]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[  412.057849][ T7055]  tcp_v6_do_rcv+0x12b8/0x1fd0
[  412.062815][ T7055]  tcp_v6_rcv+0x47f5/0x4fa0
[  412.067596][ T7055]  ? tcp_checksum_complete+0x2e0/0x2e0
[  412.073216][ T7055]  ip6_protocol_deliver_rcu+0xda6/0x2a60
[  412.079034][ T7055]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[  412.085023][ T7055]  ip6_input+0x15d/0x430
[  412.089433][ T7055]  ? ip6_input+0x430/0x430
[  412.094025][ T7055]  ? ipv6_is_mld+0x3a0/0x3a0
[  412.098764][ T7055]  ip6_rcv_finish+0x5db/0x870
[  412.103604][ T7055]  ipv6_rcv+0xda/0x390
[  412.107828][ T7055]  ? net_zcopy_put_abort+0xa0/0xa0
[  412.113083][ T7055]  __netif_receive_skb+0x1a6/0x5a0
[  412.118362][ T7055]  ? ip6_rcv_finish+0x870/0x870
[  412.123377][ T7055]  netif_receive_skb+0x58/0x660
[  412.128489][ T7055]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[  412.134478][ T7055]  ? tun_rx_batched+0x37c/0x980
[  412.139516][ T7055]  tun_rx_batched+0x3ee/0x980
[  412.144359][ T7055]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[  412.150348][ T7055]  tun_get_user+0x54c5/0x69c0
[  412.155203][ T7055]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  412.161682][ T7055]  tun_chr_write_iter+0x3af/0x5d0
[  412.166956][ T7055]  ? tun_chr_read_iter+0x670/0x670
[  412.172264][ T7055]  vfs_write+0x8ef/0x15c0
[  412.176885][ T7055]  ksys_write+0x20f/0x4c0
[  412.181406][ T7055]  __ia32_sys_write+0x91/0xd0
[  412.186282][ T7055]  __do_fast_syscall_32+0xa2/0x100
[  412.191597][ T7055]  ? syscall_exit_to_user_mode+0x3c/0x140
[  412.197576][ T7055]  do_fast_syscall_32+0x37/0x80
[  412.202632][ T7055]  do_SYSENTER_32+0x1f/0x30
[  412.207396][ T7055]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  412.214000][ T7055] RIP: 0023:0xf7fe2579
[  412.218185][ T7055] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  412.237969][ T7055] RSP: 002b:00000000f7fdd570 EFLAGS: 00000293 ORIG_RAX: 0000000000000004
[  412.246541][ T7055] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000200000c0
[  412.254642][ T7055] RDX: 000000000000005a RSI: 00000000f7353ff4 RDI: 0000000000000000
[  412.262732][ T7055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  412.270823][ T7055] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  412.278897][ T7055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  412.286998][ T7055]  </TASK>
[  412.290439][ T7055] Kernel Offset: disabled
[  412.294834][ T7055] Rebooting in 86400 seconds..