27800bc104d42a94792f8fbe9d"}}}]}, @common=@NFLOG={'NFLOG\x00', 0x4c, {{0x0, 0x0, 0x0, 0x0, 0x0, "537cf1d1993642c9f9779ffd4efd3c9ea17f00859778ea3ac9ef0acff349f2449f2c4dbc99218953bf7bbf501dfab4540b04a2d7671f720e941e8c527629c21e"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x208) 07:48:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x809}, 0x18}}, 0x0) 07:48:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000002ec0)=""/173, 0xad}}], 0x1, 0x0, &(0x7f0000003080)) 07:48:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000002ec0)=""/173, 0xad}}], 0x1, 0x0, &(0x7f0000003080)) 07:48:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) [ 1333.469276] Memory cgroup out of memory: Kill process 12735 (syz-executor1) score 8756000 or sacrifice child [ 1333.479356] Killed process 12735 (syz-executor1) total-vm:70240kB, anon-rss:2148kB, file-rss:32768kB, shmem-rss:0kB [ 1333.495873] oom_reaper: reaped process 12735 (syz-executor1), now anon-rss:0kB, file-rss:32092kB, shmem-rss:0kB 07:48:15 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/88) 07:48:15 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4}]}, 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 07:48:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000002ec0)=""/173, 0xad}}], 0x1, 0x0, &(0x7f0000003080)) 07:48:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000002ec0)=""/173, 0xad}}], 0x1, 0x0, &(0x7f0000003080)) 07:48:15 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xe, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x812, r1, 0x6000) 07:48:15 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1333.737714] syz-executor1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1333.749759] syz-executor1 cpuset=/ mems_allowed=0 [ 1333.754734] CPU: 1 PID: 12758 Comm: syz-executor1 Not tainted 4.18.0-rc7+ #76 [ 1333.762024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.771388] Call Trace: [ 1333.773989] dump_stack+0x1c9/0x2b4 [ 1333.777636] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1333.782850] ? trace_hardirqs_on+0x10/0x10 [ 1333.787102] dump_header+0x27b/0xf64 [ 1333.790845] ? pagefault_out_of_memory+0x197/0x197 [ 1333.795797] ? __lock_acquire+0x7fc/0x5020 [ 1333.800044] ? graph_lock+0x170/0x170 [ 1333.800503] x86/PAT: syz-executor3:12786 map pfn RAM range req write-combining for [mem 0x171e00000-0x171e00fff], got write-back [ 1333.803853] ? print_usage_bug+0xc0/0xc0 [ 1333.803868] ? print_usage_bug+0xc0/0xc0 [ 1333.803891] ? graph_lock+0x170/0x170 [ 1333.803905] ? print_usage_bug+0xc0/0xc0 [ 1333.803922] ? trace_hardirqs_on+0x10/0x10 [ 1333.803950] ? print_usage_bug+0xc0/0xc0 [ 1333.839883] ? lock_downgrade+0x8f0/0x8f0 [ 1333.844057] ? mark_held_locks+0xc9/0x160 [ 1333.848214] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1333.852804] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1333.857931] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1333.862958] ? trace_hardirqs_on+0xd/0x10 [ 1333.867121] ? ___ratelimit+0xaa/0x655 [ 1333.871019] ? idr_get_free+0x10c0/0x10c0 [ 1333.875184] ? kasan_check_write+0x14/0x20 [ 1333.879429] ? do_raw_spin_lock+0xc1/0x200 [ 1333.883686] oom_kill_process.cold.25+0x10/0x10bc [ 1333.888556] ? oom_evaluate_task+0x540/0x540 [ 1333.892974] ? find_held_lock+0x36/0x1c0 [ 1333.897058] ? lock_downgrade+0x8f0/0x8f0 [ 1333.901221] ? kasan_check_read+0x11/0x20 [ 1333.905381] ? rcu_is_watching+0x8c/0x150 [ 1333.909536] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1333.913955] ? oom_badness+0xb00/0xb00 [ 1333.917859] ? rcu_read_unlock+0x35/0x70 [ 1333.921939] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1333.926183] ? css_task_iter_end+0x2ce/0x490 [ 1333.930609] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1333.935377] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1333.940409] ? trace_hardirqs_on+0xd/0x10 [ 1333.944569] ? _raw_spin_unlock_irq+0x27/0x70 [ 1333.949071] ? oom_badness+0xb00/0xb00 [ 1333.952968] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1333.957736] ? mem_cgroup_iter_break+0x30/0x30 [ 1333.962356] out_of_memory+0xa8a/0x14d0 [ 1333.966359] ? oom_killer_disable+0x3a0/0x3a0 [ 1333.970868] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1333.975901] ? trace_hardirqs_on+0xd/0x10 [ 1333.980099] mem_cgroup_out_of_memory+0x15e/0x210 [ 1333.984958] ? memcg_memory_event+0x40/0x40 [ 1333.989289] ? _raw_spin_unlock+0x22/0x30 [ 1333.993643] mem_cgroup_oom_synchronize+0x713/0x940 [ 1333.998692] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1334.004159] ? memcg_event_wake+0x450/0x450 [ 1334.008512] pagefault_out_of_memory+0xc8/0x197 [ 1334.013191] ? out_of_memory+0x14d0/0x14d0 [ 1334.017444] ? __handle_mm_fault+0x4460/0x4460 [ 1334.022039] mm_fault_error+0x1de/0x380 [ 1334.026024] __do_page_fault+0xd25/0xe50 [ 1334.030100] ? mm_fault_error+0x380/0x380 [ 1334.034256] ? __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1334.038941] do_page_fault+0xf6/0x8c0 [ 1334.042761] ? vmalloc_sync_all+0x30/0x30 [ 1334.046926] ? do_syscall_64+0x820/0x820 [ 1334.051002] ? syscall_return_slowpath+0x31d/0x5e0 [ 1334.055949] ? sysret32_from_system_call+0x5/0x46 [ 1334.060801] ? page_fault+0x8/0x30 [ 1334.064364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1334.069237] ? page_fault+0x8/0x30 [ 1334.072789] page_fault+0x1e/0x30 [ 1334.076247] RIP: 0023:0x8052a62 07:48:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000002ec0)=""/173, 0xad}}], 0x1, 0x0, &(0x7f0000003080)) 07:48:16 executing program 7: r0 = socket$inet_sctp(0x2, 0x402000000000005, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "0d74589c"}, &(0x7f0000000040)=0x28) 07:48:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xf0ffff, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0xff8e}}, 0x0) 07:48:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@random="2fd6b1be27a3", @random="91477e3969a2", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f0000000040)) 07:48:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0xce20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) [ 1334.079516] Code: 00 83 c4 20 83 f8 ff 89 45 b0 0f 84 86 01 00 00 8b 45 b0 85 c0 0f 84 bb 04 00 00 8b 4d b0 8b 7d a8 8d 84 39 40 fb ff ff 89 c6 <89> 88 70 02 00 00 89 b8 74 02 00 00 89 45 b4 05 8c 00 00 00 c7 46 [ 1334.098865] RSP: 002b:000000000845fca0 EFLAGS: 00010286 [ 1334.104248] RAX: 00000000f5f1bb40 RBX: 0000000000020000 RCX: 00000000f5efb000 [ 1334.111525] RDX: 0000000000000003 RSI: 00000000f5f1bb40 RDI: 0000000000021000 [ 1334.118801] RBP: 000000000845fd18 R08: 0000000000000000 R09: 0000000000000000 [ 1334.126078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 07:48:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xf0ffff, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0xff8e}}, 0x0) [ 1334.133368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1334.140889] Task in /ile0 killed as a result of limit of /ile0 [ 1334.146973] memory: usage 116kB, limit 0kB, failcnt 472 [ 1334.152397] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1334.159186] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1334.165380] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB 07:48:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@random="2fd6b1be27a3", @random="91477e3969a2", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f0000000040)) 07:48:16 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000800)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f00000000c0), 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x23, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) [ 1334.185240] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 1334.194113] [12758] 0 12758 17560 8729 110592 0 0 syz-executor1 [ 1334.203077] Memory cgroup out of memory: Kill process 12758 (syz-executor1) score 8756000 or sacrifice child [ 1334.213143] Killed process 12758 (syz-executor1) total-vm:70240kB, anon-rss:2148kB, file-rss:32768kB, shmem-rss:0kB 07:48:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') read$eventfd(r1, &(0x7f00000000c0), 0x2c3) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000f46000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/181, 0x1e5}], 0x1) 07:48:16 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') 07:48:16 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa}) 07:48:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0xf}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x22, 0x305, 0x0, 0x0, {0x3006}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000002c80)=@xdp, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000002ec0)=""/173, 0xad}}], 0x1, 0x0, &(0x7f0000003080)) 07:48:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@random="2fd6b1be27a3", @random="91477e3969a2", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f0000000040)) 07:48:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xf0ffff, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0xff8e}}, 0x0) 07:48:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000010001900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) 07:48:16 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000800)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f00000000c0), 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x23, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) 07:48:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r1, &(0x7f0000000100)=""/4096, 0x1000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000200)}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 07:48:16 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@random="2fd6b1be27a3", @random="91477e3969a2", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f0000000040)) 07:48:16 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 07:48:16 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10dd}, 0xffffffffffffff8b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2}, [@ldst={0x2000d09d, 0x0, 0x0, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 07:48:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, "6272696467655f736c6176655f318102"}]}, 0x34}}, 0x0) 07:48:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000148bfa)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0) 07:48:16 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000800)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f00000000c0), 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x23, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) 07:48:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="299225ff4b6c22f36941dd73ffb5714c36", 0x11}], 0x1, &(0x7f00000000c0)}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1334.747568] netlink: 'syz-executor3': attribute type 1 has an invalid length. 07:48:16 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 07:48:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 07:48:16 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 07:48:16 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000580)=0x0) io_submit(r1, 0x1, &(0x7f0000000cc0)=[&(0x7f0000000c00)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000bc0)="a8063d6326", 0x5}]) 07:48:17 executing program 4: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x800000001d, &(0x7f0000000340)={0x0, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000080)=""/128, 0x80) 07:48:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 07:48:17 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 07:48:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 07:48:17 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000800)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f00000000c0), 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x23, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) 07:48:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 07:48:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="299225ff4b6c22f36941dd73ffb5714c36", 0x11}], 0x1, &(0x7f00000000c0)}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) 07:48:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x200000000000000c) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) 07:48:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 07:48:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@mcast1, @in=@rand_addr}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000980)=0xe8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x200}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:17 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 07:48:17 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}) close(r0) 07:48:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="299225ff4b6c22f36941dd73ffb5714c36", 0x11}], 0x1, &(0x7f00000000c0)}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) 07:48:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 07:48:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x2, 0x0, 'lblc\x00'}, 0x2c) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 07:48:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6, @in=@remote}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xffffffffffffff5e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001b40)={{{@in=@local, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001c40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dummy0\x00', r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001e00)={{{@in=@local, @in6}}, {{}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000001f00)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001f40), &(0x7f0000001f80)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000051c0)={{{@in=@loopback, @in6=@ipv4={[], [], @rand_addr}}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000052c0)=0x399) getpeername$packet(0xffffffffffffffff, &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000005340)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x40, &(0x7f0000000000)={@local}, &(0x7f00000053c0)=0x101) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000054c0)={{{@in=@broadcast, @in=@rand_addr}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000055c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005600)={{{@in6=@loopback, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000005700)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005740)={{{@in6=@mcast2, @in6=@ipv4={[], [], @broadcast}}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000005840)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000005880)={0x0, @local, @remote}, &(0x7f00000058c0)=0xc) getpeername$packet(r1, &(0x7f00000059c0), &(0x7f0000005a00)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006f80)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000007080)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000d500)={{{@in6=@remote, @in=@remote}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f000000d600)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000000dc80)={0x0, @local, @dev}, &(0x7f000000dcc0)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f000000dd80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f000000ddc0)=0x14) recvmmsg(r1, &(0x7f0000016680)=[{{&(0x7f000000de00)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f000000e340)=[{&(0x7f000000de80)=""/194, 0xc2}], 0x1, &(0x7f000000e380)=""/172, 0xac}}, {{&(0x7f0000011f40)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000013300)=[{&(0x7f0000013040)=""/45, 0x2d}, {&(0x7f0000013080)=""/158, 0x9e}, {&(0x7f0000013140)=""/190, 0xbe}, {&(0x7f0000013200)=""/130, 0x82}], 0x4}}, {{&(0x7f0000013340)=@alg, 0x80, &(0x7f0000013580), 0x0, &(0x7f00000135c0)=""/57, 0x39}}], 0x3, 0x0, &(0x7f00000167c0)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000168c0)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000016900)={'gre0\x00'}) clock_gettime(0x0, &(0x7f000001a700)) recvmmsg(0xffffffffffffffff, &(0x7f000001a600), 0x0, 0x0, &(0x7f000001a740)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000001a780)={'team0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f000001a7c0)={@rand_addr, @dev}, &(0x7f000001a800)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000001a840)={{{@in6=@local, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f000001a940)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001aa40)={"7372310000006af1eed81b6f981d00"}) getpeername$packet(0xffffffffffffffff, &(0x7f000001aa80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000001eec0)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f000001efc0)=0xe8) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 07:48:17 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) prctl$intptr(0x0, 0x0) munmap(&(0x7f0000302000/0x4000)=nil, 0x4000) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 07:48:17 executing program 3: socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f0000000300)=0x98) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0x7e) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x1) dup2(r0, r2) 07:48:17 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(tea-generic)\x00'}, 0x58) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 07:48:17 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)) sendmmsg$unix(r0, &(0x7f0000003bc0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000000c0)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002f40)=[{{&(0x7f0000000100)=@ax25, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=""/36, 0x24}}], 0x1, 0x0, &(0x7f0000003000)) 07:48:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xb) clone(0x0, &(0x7f00006cc000), &(0x7f0000a25ffc), &(0x7f0000001180), &(0x7f0000001140)) 07:48:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="299225ff4b6c22f36941dd73ffb5714c36", 0x11}], 0x1, &(0x7f00000000c0)}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) 07:48:17 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$sndseq(r3, &(0x7f0000011fd2), 0xffffffee) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='-'], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000140)={0x4, 0x8}, 0x10) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000604ffc)) dup2(r1, r2) 07:48:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003940)=[{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)}], 0x1, 0x0) 07:48:17 executing program 5: mmap(&(0x7f0000100000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x8150000}, 0x200000}) 07:48:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x5}}}}}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 07:48:17 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000b4efab)="5500000018007fafb7a41cb22da280000206000000a843096c37236939000900210003004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de4411006827c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 07:48:17 executing program 2: r0 = memfd_create(&(0x7f00000000c0)="7dbf2a78892d764fd34a556b884fc44e1d3903c25662e82a6cdc43eba6e41224d1a37a7a85f41eccfcf6b65f5fcaef1b9d0e50771b4e5b81921550c50e061708af0a75d844397a9e52086a68cea96adaf842848d122eeb959a0ab24dc7d1874ec54f7322fc0cfafe", 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000012c0)={'security\x00'}, &(0x7f0000000000)=0x54) 07:48:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)) 07:48:17 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80040080045002, &(0x7f0000000100)) 07:48:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) 07:48:17 executing program 7: ppoll(&(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0xfffffffffffffe7d) 07:48:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x40, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="8d56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) sendto$packet(r1, &(0x7f0000000300)="63b37a98ae586aea328609076bd19aff41372f34e2eef7d991adc88a37cb1f4a87055086b361ba9a01fd590ac449a189dba38a558ffca34d2900000000000000", 0x40, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000002040)='/dev/input/mouse#\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)=""/193, 0xc1}], 0x1, &(0x7f0000000780)=""/159, 0x9f}, 0x5}], 0x1, 0x20000000000000, &(0x7f0000001d00)={0x77359400}) 07:48:17 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x800000003, @empty, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)}}, {{&(0x7f00000000c0)=@pppol2tpin6, 0x80, &(0x7f0000003840)=[{&(0x7f0000002840)="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", 0x5c5}], 0x1, &(0x7f00000038c0)}}], 0x2, 0x0) 07:48:17 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f00000003c0)='mqueue\x00', 0x400080000, &(0x7f0000000780)) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1002, &(0x7f0000000380)) umount2(&(0x7f0000000200)='./file0\x00', 0x4000000002) 07:48:17 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x3c1) 07:48:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newaddr={0x34, 0x14, 0x11d, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev}, @IFA_CACHEINFO={0x14, 0x3}]}, 0x34}}, 0x0) 07:48:18 executing program 4: r0 = socket(0x40000000002, 0x3, 0x67) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002d80)="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", 0x709}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x358) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) 07:48:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000028fdc)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 07:48:18 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000ff7f000000002a031b030006000000000002000000e0000054d81458186fe8b90002000100000002000000000000000000030005000000000002000000e00000010000000000000000"], 0x60}}, 0x0) 07:48:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x40, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="8d56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) sendto$packet(r1, &(0x7f0000000300)="63b37a98ae586aea328609076bd19aff41372f34e2eef7d991adc88a37cb1f4a87055086b361ba9a01fd590ac449a189dba38a558ffca34d2900000000000000", 0x40, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000002040)='/dev/input/mouse#\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)=""/193, 0xc1}], 0x1, &(0x7f0000000780)=""/159, 0x9f}, 0x5}], 0x1, 0x20000000000000, &(0x7f0000001d00)={0x77359400}) 07:48:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 07:48:18 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) io_cancel(0x0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)}, &(0x7f0000001300)) 07:48:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') close(r0) 07:48:18 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x2, [{{0x2, 0x0, @broadcast}}, {{0xa, 0x0, @broadcast}}]}, 0x190) 07:48:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x40016b}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x413, &(0x7f0000000000)=""/251, 0x0, 0x1}, 0x48) 07:48:18 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 07:48:18 executing program 7: get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0x0, &(0x7f0000000000/0x2000)=nil, 0x9) 07:48:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x40, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="8d56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) sendto$packet(r1, &(0x7f0000000300)="63b37a98ae586aea328609076bd19aff41372f34e2eef7d991adc88a37cb1f4a87055086b361ba9a01fd590ac449a189dba38a558ffca34d2900000000000000", 0x40, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000002040)='/dev/input/mouse#\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)=""/193, 0xc1}], 0x1, &(0x7f0000000780)=""/159, 0x9f}, 0x5}], 0x1, 0x20000000000000, &(0x7f0000001d00)={0x77359400}) 07:48:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 07:48:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aeb2ec0ecb74f1f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004"]) stat(&(0x7f00000056c0)='./file0\x00', &(0x7f0000005700)) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003300)=[{&(0x7f00000008c0)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000001140)="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", 0x1cd}], 0x1}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000600)=@in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000005000)=ANY=[@ANYBLOB="180000000000000008000000000000200000000000000000"], 0x18}}], 0x1, 0x0) 07:48:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 07:48:18 executing program 7: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)='+selinux\x00') 07:48:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x40, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="8d56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) sendto$packet(r1, &(0x7f0000000300)="63b37a98ae586aea328609076bd19aff41372f34e2eef7d991adc88a37cb1f4a87055086b361ba9a01fd590ac449a189dba38a558ffca34d2900000000000000", 0x40, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000002040)='/dev/input/mouse#\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)=""/193, 0xc1}], 0x1, &(0x7f0000000780)=""/159, 0x9f}, 0x5}], 0x1, 0x20000000000000, &(0x7f0000001d00)={0x77359400}) 07:48:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100070aa8f7020400000000fcff", 0x58}], 0x1) 07:48:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f000000cb00)=[{{0x0, 0x0, &(0x7f0000008580)=[{&(0x7f0000008480)="13", 0x1}], 0x1, &(0x7f0000008600)}}, {{&(0x7f00000086c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000008900)=[{&(0x7f0000008880)='a', 0x1}], 0x1}}], 0x2, 0x0) 07:48:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 07:48:18 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000000c0)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0x18) sendto$inet6(r0, &(0x7f00000001c0)='a', 0x1, 0x0, &(0x7f0000aa9000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) listen(r0, 0x5) accept4$alg(r0, 0x0, 0x0, 0x0) 07:48:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 07:48:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aeb2ec0ecb74f1f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004"]) stat(&(0x7f00000056c0)='./file0\x00', &(0x7f0000005700)) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003300)=[{&(0x7f00000008c0)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000001140)="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", 0x1cd}], 0x1}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:18 executing program 4: prctl$intptr(0x26, 0x1) clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) 07:48:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x1f, 0x0) 07:48:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 07:48:18 executing program 3: capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) 07:48:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aeb2ec0ecb74f1f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004"]) stat(&(0x7f00000056c0)='./file0\x00', &(0x7f0000005700)) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003300)=[{&(0x7f00000008c0)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000001140)="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", 0x1cd}], 0x1}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:18 executing program 4: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) 07:48:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x1f, 0x0) 07:48:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 07:48:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:48:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mknod$loop(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 07:48:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 07:48:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1) 07:48:19 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x1f, 0x0) 07:48:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @u32}]}]}, 0x20}}, 0x0) 07:48:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aeb2ec0ecb74f1f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004"]) stat(&(0x7f00000056c0)='./file0\x00', &(0x7f0000005700)) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003300)=[{&(0x7f00000008c0)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000001140)="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", 0x1cd}], 0x1}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x13, 0x509, 0x0, 0x0, {0x7}}, 0x18}}, 0x0) 07:48:19 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x8c83}}, 0x30) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 07:48:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6}, &(0x7f000064b000)=0x98) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) 07:48:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 07:48:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="7dbaa3"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:19 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x1f, 0x0) 07:48:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x8001) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) [ 1337.520772] openvswitch: netlink: Flow get message rejected, Key attribute missing. 07:48:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x13, 0x509, 0x0, 0x0, {0x7}}, 0x18}}, 0x0) 07:48:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {0x2, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @remote}]}, 0x28}}, 0x0) 07:48:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x184) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000300)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x4, 0x0, 0x0) 07:48:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}, 0x2c) r0 = socket$kcm(0xa, 0x40122000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000002d40)}, 0x0) 07:48:19 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) personality(0xc50000f) ioctl$ASHMEM_SET_SIZE(r0, 0x40087705, 0x1) 07:48:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffff9c}) 07:48:19 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x8000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') sendfile(r0, r1, &(0x7f0000493000), 0xfffffffd) 07:48:19 executing program 1: r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x6, 0x3a7) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 07:48:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x13, 0x509, 0x0, 0x0, {0x7}}, 0x18}}, 0x0) 07:48:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x110, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000002, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000380)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000840)=""/217, 0xd9}}], 0x2, 0x12000, &(0x7f00000009c0)={0x77359400}) 07:48:19 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000180)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)) 07:48:19 executing program 7: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)='[::]:2:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) 07:48:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0xfffffffffffffffd, {0x2, 0x0, @rand_addr}, "0000000caeaa5823206cc000"}) 07:48:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) 07:48:20 executing program 1: r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x6, 0x3a7) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 07:48:20 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x53, r0, 0x0) 07:48:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x13, 0x509, 0x0, 0x0, {0x7}}, 0x18}}, 0x0) 07:48:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x1, 0x6c000000, &(0x7f0000000280)='\b'}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x32f, 0x0, &(0x7f00000002c0)}) 07:48:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0xfffffffffffffffd, {0x2, 0x0, @rand_addr}, "0000000caeaa5823206cc000"}) 07:48:20 executing program 1: r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x6, 0x3a7) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 07:48:20 executing program 7: io_setup(0x7fc, &(0x7f00000003c0)=0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080), 0x171}]) 07:48:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r2, r1) io_setup(0x5, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000040)}]) 07:48:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000080), 0x41) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) [ 1338.117488] binder: 13283:13288 ERROR: BC_REGISTER_LOOPER called without request [ 1338.125316] binder: 13288 RLIMIT_NICE not set 07:48:20 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100e6dc818bd041b8d2"], 0xa) 07:48:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, "4f3bdd85ce46007ad4d300"}) 07:48:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0xfffffffffffffffd, {0x2, 0x0, @rand_addr}, "0000000caeaa5823206cc000"}) [ 1338.216765] binder: 13288 RLIMIT_NICE not set 07:48:20 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x2023d) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x0, 0x0, 0xf3b}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @time={r3}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x26d) 07:48:20 executing program 1: r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x6, 0x3a7) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) [ 1338.278837] binder: send failed reply for transaction 517 to 13283:13294 07:48:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') write$cgroup_pid(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='0xf'], 0x3) preadv(r0, &(0x7f0000002600)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1, 0x0) [ 1338.326653] binder: 13283:13288 ioctl c0306201 200000c0 returned -14 [ 1338.343266] IPv6: ADDRCONF(NETDEV_UP): lo: link is not ready [ 1338.350642] binder: BINDER_SET_CONTEXT_MGR already set [ 1338.356382] binder: 13283:13294 ioctl 40046207 0 returned -16 07:48:20 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)}, {&(0x7f0000001d40)=""/67, 0x43}], 0x2) [ 1338.382181] binder: 13283:13322 ERROR: BC_REGISTER_LOOPER called without request [ 1338.389929] binder: 13322 RLIMIT_NICE not set [ 1338.407695] binder_alloc: 13283: binder_alloc_buf, no vma [ 1338.413441] binder: 13283:13294 transaction failed 29189/-3, size 0-0 line 2967 07:48:20 executing program 7: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r0, 0x0, 0x0) [ 1338.416787] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. 07:48:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0xfffffffffffffffd, {0x2, 0x0, @rand_addr}, "0000000caeaa5823206cc000"}) 07:48:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000043, &(0x7f0000f39000)=""/30, &(0x7f0000001000)=0x1e) [ 1338.483355] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. 07:48:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000030c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="2a427ee32748c83a04a8e58797373f4fdec0183085b2c2ce6fac001bc4c9e5d864595a3e0376e85037a6d05c595285d1b27f32b2c8d7574d2415af668e52aecc034074155dad", 0x46}, {&(0x7f0000000240)="dedd399e2bc263996903cef14ba80fa0c9dc604314deed9f5b55", 0x1a}], 0x2}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1, &(0x7f0000000440)=""/231, 0xe7}, 0x0) 07:48:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') write$cgroup_pid(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='0xf'], 0x3) preadv(r0, &(0x7f0000002600)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1, 0x0) 07:48:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x3}}, 0x26) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000100)) 07:48:20 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x80000001) 07:48:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 07:48:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000080), 0x41) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 07:48:21 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f000014d000/0x800000)=nil, 0x800000}, 0x7fffdfeb2000}) 07:48:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') write$cgroup_pid(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='0xf'], 0x3) preadv(r0, &(0x7f0000002600)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1, 0x0) 07:48:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f000000bffc), &(0x7f0000015000)=0x4) 07:48:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x133, 0x8001, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x8) read(r0, &(0x7f0000000140)=""/165, 0x3c3) 07:48:21 executing program 7: r0 = userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) read(r0, &(0x7f0000009f9c)=""/100, 0x64) 07:48:21 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000000)=0xfcb5) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) 07:48:21 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021600000a00000000000000000000000800120000000000010000000000000006000000000000ffff000000000000000000000000ffffffff0000000000000000000000000000000000000000000000"], 0x50}}, 0x0) 07:48:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f000000bffc), &(0x7f0000015000)=0x4) 07:48:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') write$cgroup_pid(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='0xf'], 0x3) preadv(r0, &(0x7f0000002600)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1, 0x0) 07:48:21 executing program 2: mount(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000080)='rootfs\x00', 0x0, &(0x7f00000000c0)) 07:48:21 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup3(r0, r1, 0x0) 07:48:21 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x366) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 07:48:21 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f000014d000/0x800000)=nil, 0x800000}, 0x7fffdfeb2000}) 07:48:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f000000bffc), &(0x7f0000015000)=0x4) 07:48:21 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f000014d000/0x800000)=nil, 0x800000}, 0x7fffdfeb2000}) 07:48:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000080), 0x41) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 07:48:22 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x366) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 07:48:22 executing program 7: r0 = userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) read(r0, &(0x7f0000009f9c)=""/100, 0x64) 07:48:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)) 07:48:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "0499fbcd2375b8d808aa531e1f671dfc8b1352123fca28feb6a35884c3d00ce793dfa518352aa422c4fd8b4b907d5ecedc39506b21c597126a4674cf9aa78b35f99c51d94790a35aacae468a101d464288e2d441c31d4ed96044969d997268abef5236d6c03b191325d522cb09a84f9d30bcc266657fd010b603cdcd0ad7225fd70e5fe89a433267a8555d0999938931d2211bbb4c066b985f62f6e4c7d9f1b2a89ca23ac80bf1ad76ec72f3556aa6ea4307d26d714ee007d6357941890c9b515c2e9c9457c338a6d1c2de6fec84dc0b3ea19523314b543a9bb84ba55c0d06c68569302e9ff8f61e93fde812656558509a8ca83580ab1e6366cf8c77bbe625e5", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120) 07:48:22 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup3(r0, r1, 0x0) 07:48:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f000000bffc), &(0x7f0000015000)=0x4) 07:48:22 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f000014d000/0x800000)=nil, 0x800000}, 0x7fffdfeb2000}) 07:48:22 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup3(r0, r1, 0x0) 07:48:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendfile(r0, r1, &(0x7f0000000040), 0x8010) 07:48:22 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x366) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 07:48:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 07:48:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120) 07:48:22 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup3(r0, r1, 0x0) 07:48:22 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup3(r0, r1, 0x0) 07:48:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120) 07:48:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x40101) write$sndseq(r0, &(0x7f0000000080), 0x41) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 07:48:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x40045566, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 07:48:23 executing program 7: r0 = userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) read(r0, &(0x7f0000009f9c)=""/100, 0x64) 07:48:23 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x366) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 07:48:23 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup3(r0, r1, 0x0) 07:48:23 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup3(r0, r1, 0x0) 07:48:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120) 07:48:23 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x200000000000009}, 0x2c) unshare(0x24020400) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 07:48:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f0000000600)=@ipv6_delroute={0x1c, 0x19, 0x103, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x1c}}, 0x0) 07:48:23 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000380)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)="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", 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000440)="2b8b8a16033edddf6b284699df92d53e6f4a02759b9461aca2b1b70986488e034a003446d17a230594409f8be3ef04529950705e972298e81fb5821e04847e1973ec959c7622613dde68feb95bc9249ac79ce261d3e9e847a0d2d3167186480e843adeda83d2da9adb34a7ccdb68e9ad2f4bc7fa36b55f2572fa2e823cfceb3ac3793da2ff6837e4220021082ceb2c167aa3c33b349e03ae050000007676be6df84050a47184c18311f283ce5c73c36531f4", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fremovexattr(r3, &(0x7f00000000c0)=@known='system.posix_acl_default\x00') 07:48:23 executing program 4: ioprio_set$pid(0x2, 0x0, 0x800004000) clone(0x180000, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000340), &(0x7f00000003c0)) 07:48:23 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x529, 0x1142) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf}, 0xf) ppoll(&(0x7f0000000140)=[{r0, 0x4}, {r1}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240), 0x8) 07:48:23 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="6e65742f6970365f6d725f766966001052c79f5e68f227bcf12f5f9ddff97345fbb4ff2fa2d07437ab0101902870b0b7041083ec1f40eb460fb405f46db49e711832e4f8c8df824f8f27f72306250780b217ae6c493a") ioctl$int_out(r0, 0xc0045878, &(0x7f0000000040)) 07:48:23 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "0ea5a5e18f242c11ef85d723a9cb5d18a06de923278a0312c2921e8cdc0a9bf8f2a642e768d35fa69871e6d1b56b121a5e1af555cd9b20acaa72890547a8d3e27ebca29cf519a63d7b833bca86aa0d697e4f20524c9b09c2cbb1010dcdd5444d0600d4b56d352cf412fe5097099daf5c1b75b8db3a940fe526eedbe41417c6a95705bf009e378526458d145271bc90b7f927ffe817377a77569874d17e28925cc965cdd2dd11d7bee4f5f257710ada3833e901b78dd2484d1e0e612f7226c80a6bd2f76da9c03fd90fbfd3171b2bb326f99c21b32f93da5240b61cd3416c6ef6d3ea3d2b1f72a79ae5b5e62e063ef0447fc8ca810103c3069fde31caf27cbf84dc0e28cc0942d0ed1c42563688b40a8d82877e21ee56c30685b6399bc15cfef1dc206711190d38549fdcc968a5f67208135e2723deb652df938e18cf78ccfe45c6f4bf552c5319239340e21565321e3176af42c68fb889fec97de6839e9b6b21c99f8771bcf46821a44e34225703c3d75ebd6907a4ae91c18daccee08419792371a616937bbc36fac66a7120754e816ac0a1531b40e2a2321a5ba910e7b693595007dfeb6e64ee395d4f0b1a1d29bfa1a744c2da0e245ef18f1df928b5c7cf8264a7040557d149354c5784e30ba6eec3af5e27a5dfb13cda09719204e7531594e8b74ee13cca1e26962477c7a35df16404203787bc85c9fb47b4d0be2eef665a71d2a63cc0db544be5432755d34783666d0d88af761e4ed28e066ed7f7bd0a8a2b3dcbed9af8eb93accfa26a131bcdf6ca8d88c52cad3efcd8608576b54129192ad8676c1aca81df17fff4588038eb13283d7b3f02be01eec97a3effe7bbbd2dd61b90d2ebbbc97884a0a08f4ffcb30b8eb2c3affcbf072bb4c2db102df2fbb67da1a4d1db04542932737e844c9734d73d66fce42e9b68e06d506fb9c848300026623e4834e61f1db556262fbbf41f11a970592b877826baea5e5dd8f06277c6a27bfa300f3a1971efe0b503c66524ebf81c823f9a67b77023273c98fad25045c96f5ec5dd65d782671ec403c0780a0fbce79f6619b64174be0bf6f5ef35babbc9d1f214999344aef1390c41c808279944728a340e092872594673997b9b52ee38657a3170b6f75d92611d8902abe403274cf1fa81754b2c49c8a2e3d78211a0e108b9a838d44824b2be8f8cb4a686a9e2f459696fddd121bd49c9e6d440bdc821510a8581d2ab1d3120b1c6b3f2493fb4553d7e28aec24e2fbd3c61eb4eed902cf5c4ddbd3413a6087d2b80069ffb0f14a4c583872ee3e8b84b43f6504adcfaccfdbc283748bffc215065d4ece77aa7af6929cd01bee5e99b9bdac5ca2716e9b030e11520f099ca091f81b4dcb339d6830b839edea1fca71ebec1391c3f8895920eaffefbd1627dda9548b1e77c3d11e61c8a9ea87f97f1de102fabba54d15a179bd30dcb07f09fc3ca26141fafd762ff8cac0039f784d4cbea62c109988a8b404978e205583e75c9de2a7e40695f024c600b59e3ad9001ce246505dc1840ccbb752e2dc49f9be250c1904641c9e615c0188f752e01cf8fd8827cbd7b1a00f87c88301a44c328b664e49e9d2e58a62ad5aa0180a3d0a53a239ff7a884be7d757d8043d77713426f1dd128507db944b81db5bbf08afc30ec078df3"}, 0x4a6) [ 1341.182450] syz-executor2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1341.194619] syz-executor2 cpuset=/ mems_allowed=0 [ 1341.196966] socket: no more sockets [ 1341.199530] CPU: 1 PID: 13520 Comm: syz-executor2 Not tainted 4.18.0-rc7+ #76 [ 1341.199544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.219783] Call Trace: [ 1341.222376] dump_stack+0x1c9/0x2b4 [ 1341.226007] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1341.231206] ? trace_hardirqs_on+0x10/0x10 [ 1341.235439] dump_header+0x27b/0xf64 [ 1341.239155] ? pagefault_out_of_memory+0x197/0x197 [ 1341.244074] ? __lock_acquire+0x7fc/0x5020 [ 1341.248304] ? print_usage_bug+0xc0/0xc0 [ 1341.252353] ? graph_lock+0x170/0x170 [ 1341.256149] ? graph_lock+0x170/0x170 [ 1341.259939] ? print_usage_bug+0xc0/0xc0 [ 1341.263994] ? trace_hardirqs_on+0x10/0x10 [ 1341.268231] ? print_usage_bug+0xc0/0xc0 [ 1341.272289] ? lock_downgrade+0x8f0/0x8f0 [ 1341.276449] ? mark_held_locks+0xc9/0x160 [ 1341.280591] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1341.285163] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1341.290260] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1341.295268] ? trace_hardirqs_on+0xd/0x10 [ 1341.299406] ? ___ratelimit+0xaa/0x655 [ 1341.303286] ? idr_get_free+0x10c0/0x10c0 [ 1341.307424] ? kasan_check_write+0x14/0x20 [ 1341.311651] ? do_raw_spin_lock+0xc1/0x200 [ 1341.315880] oom_kill_process.cold.25+0x10/0x10bc [ 1341.320725] ? oom_evaluate_task+0x540/0x540 [ 1341.325128] ? find_held_lock+0x36/0x1c0 [ 1341.329190] ? lock_downgrade+0x8f0/0x8f0 [ 1341.333352] ? kasan_check_read+0x11/0x20 [ 1341.337488] ? rcu_is_watching+0x8c/0x150 [ 1341.341633] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1341.346045] ? oom_badness+0xb00/0xb00 [ 1341.349924] ? rcu_read_unlock+0x35/0x70 [ 1341.353974] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1341.358207] ? css_task_iter_end+0x2ce/0x490 [ 1341.362608] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1341.367356] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1341.372372] ? trace_hardirqs_on+0xd/0x10 [ 1341.376510] ? _raw_spin_unlock_irq+0x27/0x70 [ 1341.380995] ? oom_badness+0xb00/0xb00 [ 1341.384877] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1341.389625] ? mem_cgroup_iter_break+0x30/0x30 [ 1341.394212] out_of_memory+0xa8a/0x14d0 [ 1341.398185] ? oom_killer_disable+0x3a0/0x3a0 [ 1341.402675] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1341.407682] ? trace_hardirqs_on+0xd/0x10 [ 1341.411827] mem_cgroup_out_of_memory+0x15e/0x210 [ 1341.416661] ? memcg_memory_event+0x40/0x40 [ 1341.420981] ? _raw_spin_unlock+0x22/0x30 [ 1341.425142] mem_cgroup_oom_synchronize+0x713/0x940 [ 1341.430152] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1341.435592] ? memcg_event_wake+0x450/0x450 [ 1341.439924] pagefault_out_of_memory+0xc8/0x197 [ 1341.444580] ? out_of_memory+0x14d0/0x14d0 [ 1341.448813] ? __handle_mm_fault+0x4460/0x4460 [ 1341.453386] mm_fault_error+0x1de/0x380 [ 1341.457354] __do_page_fault+0xd25/0xe50 [ 1341.461414] ? mm_fault_error+0x380/0x380 [ 1341.465552] ? __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1341.470211] do_page_fault+0xf6/0x8c0 [ 1341.474020] ? vmalloc_sync_all+0x30/0x30 [ 1341.478172] ? syscall_slow_exit_work+0x500/0x500 [ 1341.483004] ? do_syscall_64+0x820/0x820 [ 1341.487062] ? syscall_return_slowpath+0x31d/0x5e0 [ 1341.491995] ? sysret32_from_system_call+0x5/0x46 [ 1341.496838] ? page_fault+0x8/0x30 [ 1341.500367] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1341.505198] ? page_fault+0x8/0x30 [ 1341.508730] page_fault+0x1e/0x30 [ 1341.512172] RIP: 0023:0x8052a62 [ 1341.515442] Code: 00 83 c4 20 83 f8 ff 89 45 b0 0f 84 86 01 00 00 8b 45 b0 85 c0 0f 84 bb 04 00 00 8b 4d b0 8b 7d a8 8d 84 39 40 fb ff ff 89 c6 <89> 88 70 02 00 00 89 b8 74 02 00 00 89 45 b4 05 8c 00 00 00 c7 46 [ 1341.534770] RSP: 002b:000000000845fca0 EFLAGS: 00010286 [ 1341.540133] RAX: 00000000f5f8db40 RBX: 0000000000020000 RCX: 00000000f5f6d000 [ 1341.547390] RDX: 0000000000000003 RSI: 00000000f5f8db40 RDI: 0000000000021000 [ 1341.554648] RBP: 000000000845fd18 R08: 0000000000000000 R09: 0000000000000000 [ 1341.561905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1341.569164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1341.576519] Task in /ile0 killed as a result of limit of /ile0 [ 1341.582557] memory: usage 116kB, limit 0kB, failcnt 496 [ 1341.587980] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1341.594779] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1341.600977] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1341.620884] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name 07:48:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f0000000600)=""/195, 0xffffffffffffffc4, 0x0) 07:48:23 executing program 7: r0 = userfaultfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f00007d1fff), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000080)) read(r0, &(0x7f0000009f9c)=""/100, 0x64) [ 1341.629760] [13520] 0 13520 17560 8728 110592 0 0 syz-executor2 [ 1341.638698] Memory cgroup out of memory: Kill process 13520 (syz-executor2) score 8755000 or sacrifice child [ 1341.648794] Killed process 13520 (syz-executor2) total-vm:70240kB, anon-rss:2144kB, file-rss:32768kB, shmem-rss:0kB 07:48:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000013db4)={0x20, 0x20, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, @fd}]}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x26, &(0x7f00000004c0), 0x0, &(0x7f0000000540)=""/226, 0xe2}, 0x0) 07:48:23 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "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"}, 0x4a6) 07:48:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x1e, &(0x7f0000000100), 0x3000000) 07:48:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f0000000600)=""/195, 0xffffffffffffffc4, 0x0) [ 1341.764452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 1341.793094] oom_reaper: reaped process 13520 (syz-executor2), now anon-rss:0kB, file-rss:32092kB, shmem-rss:0kB 07:48:23 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="de", 0x1, 0x40041, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) 07:48:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 1341.839847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 07:48:24 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x35) execve(&(0x7f0000000500)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000800)) 07:48:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f0000000600)=""/195, 0xffffffffffffffc4, 0x0) 07:48:24 executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) 07:48:24 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "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"}, 0x4a6) [ 1341.963915] Dead loop on virtual device ip6_vti0, fix it urgently! 07:48:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0xfff) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000004c00)=0x2) [ 1342.023000] Dead loop on virtual device ip6_vti0, fix it urgently! 07:48:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x1c}}, 0x0) 07:48:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000740)="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") fgetxattr(r0, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)=""/2, 0xffffffffffffff11) 07:48:24 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000240)=0x100000001) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0xfffffffffffffff9}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) 07:48:24 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}, @icmp=@address_request}}}}, &(0x7f0000000080)) 07:48:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f0000000600)=""/195, 0xffffffffffffffc4, 0x0) 07:48:24 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "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"}, 0x4a6) 07:48:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0x3) 07:48:24 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000791000), 0xc, &(0x7f0000dd0ff0)={&(0x7f0000000140)={0x20, 0x40017, 0xa, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x2, @u64}]}, 0x20}}, 0x0) 07:48:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x325}, 0x14}}, 0x0) 07:48:24 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x2000, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r1, 0x1000000}, 0x10) 07:48:24 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0x3) 07:48:24 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c833, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000400), 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000), 0x4) 07:48:24 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x2, &(0x7f0000000080), 0x0) 07:48:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000240), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) 07:48:24 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000017000/0x2000)=nil, 0x2000}) 07:48:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000000c0), 0x10) 07:48:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) getsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000080)=""/214, &(0x7f00000001c0)=0xd6) 07:48:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0x3) 07:48:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003bc0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x809, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 07:48:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') sendfile(r0, r0, &(0x7f0000000100), 0x6) 07:48:25 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9, 0x0, 0x1}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x8, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000b88000)}, 0x20) 07:48:25 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)={0xcb3, 0x0, 0x0, "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"}) 07:48:25 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000017000/0x2000)=nil, 0x2000}) 07:48:25 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) ioctl$VHOST_SET_VRING_BASE(r0, 0x4028af11, &(0x7f0000000080)) 07:48:25 executing program 0: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x4058534c, &(0x7f0000000140)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 07:48:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0x3) 07:48:25 executing program 4: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000380)=0xfff, 0x4) 07:48:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000003980)) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000100)="6c6f00966fd651b159a9c84a2c60d29800000020") 07:48:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 07:48:25 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff04, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 07:48:25 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000017000/0x2000)=nil, 0x2000}) 07:48:25 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) r1 = eventfd(0x80000002) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) write$eventfd(r1, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="2b9acff31e2ef8b6", 0x8}], 0x1) 07:48:25 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000017000/0x2000)=nil, 0x2000}) 07:48:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000118ffc)={0x7fffffff}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0x4) 07:48:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x4]}) 07:48:25 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000010c0)={&(0x7f00000000c0)=""/4096, 0x0, 0x1000}, 0x18) 07:48:25 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 07:48:25 executing program 7: r0 = getpid() r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xb, 0x0) read(r1, &(0x7f0000000100)=""/158, 0x9e) sched_setaffinity(r0, 0x12, &(0x7f0000000000)=0x8002) fstatfs(r1, &(0x7f0000000480)=""/153) readv(r1, &(0x7f0000000480), 0x324) readv(r1, &(0x7f0000000880)=[{&(0x7f0000000840)=""/32, 0x20}], 0x1) 07:48:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) 07:48:25 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 07:48:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1101082) r1 = memfd_create(&(0x7f0000000000)="2f6465762f6ca49b0e694e", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x7302000000000000, 0xffffffff) sendfile(r0, r0, &(0x7f0000000240)=0x5, 0x2000005) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), 0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) 07:48:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, 0x1, 0x1, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x12, [@typed={0x8, 0x0, @pid}]}]}, 0x20}}, 0x0) 07:48:26 executing program 2: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 07:48:26 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 07:48:26 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x2}) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x34000, 0x0, 0x68}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0xffce, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0xc, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0xffce}}, 0x0) 07:48:26 executing program 7: futex(&(0x7f0000004000), 0x400000085, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000200), 0x3fffffff) 07:48:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 1344.135392] netlink: 'syz-executor4': attribute type 18 has an invalid length. [ 1344.167472] netlink: 65454 bytes leftover after parsing attributes in process `syz-executor5'. [ 1344.259194] netlink: 65454 bytes leftover after parsing attributes in process `syz-executor5'. [ 1344.294215] print_req_error: 639 callbacks suppressed [ 1344.294226] print_req_error: I/O error, dev loop0, sector 384 07:48:26 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) r1 = eventfd(0x80000002) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) write$eventfd(r1, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="2b9acff31e2ef8b6", 0x8}], 0x1) 07:48:26 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 07:48:26 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='!\x00') 07:48:26 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020200020c000000ffffffffffffffff02000800020000000004000000000000030006000000000002004e20e0000001000000000000002402000100f8ffffff0000080200000000030005000000000002004e20e00000010000000000000000"], 0x60}}, 0x0) 07:48:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'lo\x00', 0x3ff}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000280)={{0x4, 0x3, 0x100000001, 0xfffffffffffffffd, 'syz0\x00', 0x7}, 0x1, 0x10, 0x9, r1, 0x2, 0x1, 'syz0\x00', &(0x7f0000000040)=['\x00eth1usercgroup}selfppp0em1,wlan1\'user\x00', '/dev/snd/controlC#\x00'], 0x3a, [], [0x8, 0x0, 0x20, 0x4]}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0485510, &(0x7f0000000200)={0x8, 0x1, 0x0, 0x0, &(0x7f0000000100)=[{}]}) 07:48:26 executing program 5: unshare(0x2000400) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 1344.298060] print_req_error: I/O error, dev loop0, sector 264 [ 1344.311448] buffer_io_error: 639 callbacks suppressed [ 1344.311458] Buffer I/O error on dev loop0, logical block 33, lost async page write 07:48:26 executing program 7: r0 = socket$inet(0x2, 0x800000003, 0x3) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x84) [ 1344.395244] snd_virmidi snd_virmidi.0: control 3:1:-3:syz0:7 is already present 07:48:26 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x4e21, 0x0, @local}}}, 0x84) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x10) fcntl$setstatus(r0, 0x408, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/146, 0x92}], 0x1) dup2(r0, r2) 07:48:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1101082) r1 = memfd_create(&(0x7f0000000000)="2f6465762f6ca49b0e694e", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x7302000000000000, 0xffffffff) sendfile(r0, r0, &(0x7f0000000240)=0x5, 0x2000005) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), 0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) 07:48:26 executing program 3: r0 = memfd_create(&(0x7f0000a32ff6)='/dev/ptmx\x00', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0xf) ftruncate(r0, 0x0) 07:48:26 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="bb19a998774082ccff474f54", 0xc}], 0x1, 0x0) [ 1344.465252] snd_virmidi snd_virmidi.0: control 3:1:-3:syz0:7 is already present 07:48:26 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000012380)=[{{&(0x7f000000fc00)=@ipx, 0x80, &(0x7f0000010fc0), 0x0, &(0x7f0000011040)=""/110, 0x6e}}, {{&(0x7f00000110c0)=@ethernet, 0x80, &(0x7f0000012300), 0x0, &(0x7f0000012340)}}], 0x2, 0x3, &(0x7f0000012580)={0x77359400}) 07:48:26 executing program 2: bpf$MAP_CREATE(0xe, &(0x7f0000001000), 0x2c) 07:48:26 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000694ffe)={@local, @link_local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @rand_addr, @broadcast, @dev}}}}, &(0x7f0000000000)) 07:48:26 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, 0x10) [ 1344.689133] print_req_error: I/O error, dev loop0, sector 1024 [ 1344.695318] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 1344.703909] print_req_error: I/O error, dev loop0, sector 0 07:48:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 07:48:27 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) r1 = eventfd(0x80000002) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) write$eventfd(r1, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="2b9acff31e2ef8b6", 0x8}], 0x1) 07:48:27 executing program 7: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 07:48:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c85512, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 'syz1\x00'}) 07:48:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fadvise64(r0, 0x32, 0x40, 0x0) 07:48:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x80800) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000240)={@mcast2, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002600200300000000dbdf25000000f600"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x200004e24, @multicast1}, {0x0, @remote}, 0x0, {0x2, 0x4e22, @local}, 'ip6_vti0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bridge_slave_1\x00', 0x3}, 0x18) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth0\x00', r2}) r4 = syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x3, 0x40000) sendmsg(r0, &(0x7f0000000a00)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)="24e9dffa7723de1bb7a9afdab6e67590cde34a2b9d7837e00bef76e68cacea3e65d55f271fc6639ee66e5b190e555392233f94d0e5", 0x35}], 0x1, &(0x7f0000000700), 0x0, 0x80}, 0x8001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'erspan0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'veth0\x00'}}, 0x1e) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x80400) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000440)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 07:48:27 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)) 07:48:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1101082) r1 = memfd_create(&(0x7f0000000000)="2f6465762f6ca49b0e694e", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x7302000000000000, 0xffffffff) sendfile(r0, r0, &(0x7f0000000240)=0x5, 0x2000005) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), 0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) 07:48:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c85512, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 1345.286576] IPVS: ftp: loaded support on port[0] = 21 [ 1345.305294] device lo entered promiscuous mode [ 1345.316857] device lo left promiscuous mode 07:48:27 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x3) getsockopt(r0, 0xff, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) 07:48:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1101082) r1 = memfd_create(&(0x7f0000000000)="2f6465762f6ca49b0e694e", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x7302000000000000, 0xffffffff) sendfile(r0, r0, &(0x7f0000000240)=0x5, 0x2000005) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), 0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) 07:48:27 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640)='/dev/sequencer2\x00', 0x2003, 0x0) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f0000002400)}], 0x1, 0x0) 07:48:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) 07:48:27 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640)='/dev/sequencer2\x00', 0x2003, 0x0) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f0000002400)}], 0x1, 0x0) 07:48:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c85512, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 'syz1\x00'}) 07:48:27 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640)='/dev/sequencer2\x00', 0x2003, 0x0) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f0000002400)}], 0x1, 0x0) 07:48:27 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 1346.087337] IPVS: ftp: loaded support on port[0] = 21 07:48:28 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) r1 = eventfd(0x80000002) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) write$eventfd(r1, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="2b9acff31e2ef8b6", 0x8}], 0x1) [ 1346.125693] device lo entered promiscuous mode [ 1346.418079] device lo left promiscuous mode 07:48:30 executing program 7: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 07:48:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c85512, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 'syz1\x00'}) 07:48:30 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, &(0x7f0000000180)) 07:48:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) 07:48:30 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640)='/dev/sequencer2\x00', 0x2003, 0x0) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f0000002400)}], 0x1, 0x0) 07:48:30 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003940)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="097be1758b29ecc7ee925fe171e3dfe3", 0x10}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000b00), 0x204, 0x0, &(0x7f0000000b40)={0x77359400}) 07:48:30 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 07:48:30 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000000)=""/63, 0x3f}, &(0x7f0000000040)}, 0xfffffffffffffe47) 07:48:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) 07:48:30 executing program 2: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 07:48:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x81}) 07:48:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) [ 1348.182140] IPVS: ftp: loaded support on port[0] = 21 07:48:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000090000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast2}}]}, 0x110) 07:48:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="d556b6c5820faeb895298992ea54d60004002c5b534c90c2", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000300)="6519ea9498b9b662d963dfef9d98721fcd223912ac467995bb441300bef247a287", 0x21}], 0x1, &(0x7f00000006c0)}, 0x0) [ 1348.220466] device lo entered promiscuous mode 07:48:30 executing program 6: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc058534f, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) [ 1348.346446] IPVS: ftp: loaded support on port[0] = 21 07:48:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) [ 1348.589094] device lo left promiscuous mode [ 1348.708381] device lo entered promiscuous mode [ 1348.717291] device lo left promiscuous mode 07:48:31 executing program 7: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 07:48:31 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 07:48:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[], 0x0, 0x12}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_nat_t_port={0x1, 0x15}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x80}}, 0x0) 07:48:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001480)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000001500)="a40e466a4a788625264d8d343298f0e34e70374fc851fc7c9d22e52ce19f64010b", &(0x7f0000001400)=""/71, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) 07:48:31 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 07:48:31 executing program 2: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 1348.976929] sd 0:0:1:0: [sg0] tag#3140 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1348.985809] sd 0:0:1:0: [sg0] tag#3140 CDB: Set priority [ 1348.991379] sd 0:0:1:0: [sg0] tag#3140 CDB[00]: a4 0e 46 6a 4a 78 86 25 26 4d 8d 34 32 98 f0 e3 [ 1349.000428] sd 0:0:1:0: [sg0] tag#3140 CDB[10]: 4e 70 37 4f c8 51 fc 7c 9d 22 e5 2c e1 9f 64 01 [ 1349.009395] sd 0:0:1:0: [sg0] tag#3140 CDB[20]: 0b [ 1349.021601] IPVS: ftp: loaded support on port[0] = 21 [ 1349.063473] device lo entered promiscuous mode 07:48:31 executing program 5: creat(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000700)='fuse\x00', 0x9000, 0x0) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000002c0)='mslos\x00', 0x3002480, &(0x7f0000000340)) [ 1349.084137] IPVS: ftp: loaded support on port[0] = 21 07:48:31 executing program 4: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @rand_addr}, 0x2}}, 0x2e) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x111, 0x11, &(0x7f000087bff8), &(0x7f0000f5fffc)=0x8) 07:48:31 executing program 0: r0 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f00000033c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004900)=""/197, 0xc5}], 0x2000000000000178}}, {{&(0x7f0000004ac0)=@hci, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006cc0)=""/33, 0x21}], 0x1, &(0x7f0000006d80)=""/157, 0x9d}}], 0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0xe1) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) sendto$inet6(r0, &(0x7f0000000000)="84", 0x1, 0x0, 0x0, 0x0) 07:48:31 executing program 3: clone(0x0, &(0x7f00000012c0), &(0x7f0000001080), &(0x7f0000000040), &(0x7f0000002300)) r0 = getpid() wait4(r0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) 07:48:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0xde5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4ad, 0x0, 0x6, 0x9, 0x33f, 0x0, 0x0, 0x0, 0x0, 0xdbba, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0xf09c, 0x0, 0xcb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x492}, 0x0, 0xf, 0xffffffffffffffff, 0x0) 07:48:31 executing program 1: perf_event_open(&(0x7f0000014f88)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:48:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0xc, 0x29, 0x4000000000000043}], 0xc}}], 0x2, 0x0) 07:48:31 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x2, 0x1c4, [0x0, 0x20000040, 0x20000070, 0x20000138], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'rose0\x00', 'bond_slave_1\x00', 'syzkaller1\x00', @local, [], @broadcast, [], 0x70, 0x70, 0x98}}, @common=@STANDARD={'\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'lo\x00', 'veth1_to_bridge\x00', 'veth0_to_team\x00', 'nr0\x00', @empty, [], @dev, [], 0x70, 0x70, 0x9c}}, @common=@mark={'mark\x00', 0x8}}]}]}, 0x214) 07:48:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/169, 0xa9}], 0x1, 0x142) [ 1349.521949] device lo entered promiscuous mode [ 1349.536206] device lo left promiscuous mode [ 1349.715919] device lo left promiscuous mode 07:48:33 executing program 7: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 07:48:33 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)=[{0x20, 0x0, 0x7, "8612b75e4a927364a5fa3c11593989b54c"}], 0x20}}], 0x2, 0x0) 07:48:33 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='jfs\x00', 0x10233ff, 0x0) 07:48:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0xde5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4ad, 0x0, 0x6, 0x9, 0x33f, 0x0, 0x0, 0x0, 0x0, 0xdbba, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0xf09c, 0x0, 0xcb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x492}, 0x0, 0xf, 0xffffffffffffffff, 0x0) 07:48:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @remote}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x3, 0x4) recvmsg(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f00000002c0)}, 0x2000) 07:48:33 executing program 0: r0 = memfd_create(&(0x7f0000000080)='ppp0\x00', 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000140)='comm\x00') fchmod(r2, 0x3) r3 = dup2(r2, r0) execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 07:48:33 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x2, 0x1c4, [0x0, 0x20000040, 0x20000070, 0x20000138], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'rose0\x00', 'bond_slave_1\x00', 'syzkaller1\x00', @local, [], @broadcast, [], 0x70, 0x70, 0x98}}, @common=@STANDARD={'\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'lo\x00', 'veth1_to_bridge\x00', 'veth0_to_team\x00', 'nr0\x00', @empty, [], @dev, [], 0x70, 0x70, 0x9c}}, @common=@mark={'mark\x00', 0x8}}]}]}, 0x214) 07:48:33 executing program 2: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 1351.183746] IPVS: ftp: loaded support on port[0] = 21 07:48:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002bc0)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") lseek(r0, 0xfffe, 0x1) 07:48:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10, &(0x7f00000000c0)=""/177, &(0x7f0000000000)=0xb1) 07:48:33 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x2, 0x1c4, [0x0, 0x20000040, 0x20000070, 0x20000138], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'rose0\x00', 'bond_slave_1\x00', 'syzkaller1\x00', @local, [], @broadcast, [], 0x70, 0x70, 0x98}}, @common=@STANDARD={'\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'lo\x00', 'veth1_to_bridge\x00', 'veth0_to_team\x00', 'nr0\x00', @empty, [], @dev, [], 0x70, 0x70, 0x9c}}, @common=@mark={'mark\x00', 0x8}}]}]}, 0x214) 07:48:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0xde5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4ad, 0x0, 0x6, 0x9, 0x33f, 0x0, 0x0, 0x0, 0x0, 0xdbba, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0xf09c, 0x0, 0xcb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x492}, 0x0, 0xf, 0xffffffffffffffff, 0x0) 07:48:33 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)=[{0x20, 0x0, 0x7, "8612b75e4a927364a5fa3c11593989b54c"}], 0x20}}], 0x2, 0x0) [ 1351.209470] device lo entered promiscuous mode [ 1351.227927] IPVS: ftp: loaded support on port[0] = 21 [ 1351.245857] device lo entered promiscuous mode 07:48:33 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') write$cgroup_pid(r0, &(0x7f00000000c0), 0x1) sendfile(r0, r0, 0x0, 0x8) 07:48:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0xde5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4ad, 0x0, 0x6, 0x9, 0x33f, 0x0, 0x0, 0x0, 0x0, 0xdbba, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0xf09c, 0x0, 0xcb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x492}, 0x0, 0xf, 0xffffffffffffffff, 0x0) 07:48:33 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x2, 0x1c4, [0x0, 0x20000040, 0x20000070, 0x20000138], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00', 'rose0\x00', 'bond_slave_1\x00', 'syzkaller1\x00', @local, [], @broadcast, [], 0x70, 0x70, 0x98}}, @common=@STANDARD={'\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'lo\x00', 'veth1_to_bridge\x00', 'veth0_to_team\x00', 'nr0\x00', @empty, [], @dev, [], 0x70, 0x70, 0x9c}}, @common=@mark={'mark\x00', 0x8}}]}]}, 0x214) [ 1351.724651] device lo left promiscuous mode [ 1351.836744] device lo left promiscuous mode 07:48:34 executing program 6: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0xffc, 0x800}, 0x89) 07:48:34 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)=[{0x20, 0x0, 0x7, "8612b75e4a927364a5fa3c11593989b54c"}], 0x20}}], 0x2, 0x0) 07:48:34 executing program 4: r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a1fe9e014d1725b8c1c343d1f3f22b85f27bf76876ce20053e4ff5c7f30c0363"}) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) 07:48:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000240)) 07:48:34 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f0000000180), 0x4) 07:48:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x6) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000000)) 07:48:34 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000080)=""/36, 0x24) 07:48:35 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)=[{0x20, 0x0, 0x7, "8612b75e4a927364a5fa3c11593989b54c"}], 0x20}}], 0x2, 0x0) 07:48:35 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48a}]}) 07:48:35 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x2, 0xa64, [0x0, 0x20000540, 0x20000570, 0x20000f74], 0x0, &(0x7f0000000080), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'veth1_to_team\x00', 'bcsh0\x00', 'vlan0\x00', '\x00', @empty, [], @local, [], 0x8c8, 0x8c8, 0x8f0, [@among={'among\x00', 0x834, {{0x100, 0x1, 0x0, {[], 0x1, [{[], @multicast2}]}, {[], 0x1, [{[], @local}]}}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x4}}, {{{0x1d9e08801b11463, 0x0, 0x0, 'veth0_to_bond\x00', 'vlan0\x00', 'veth0\x00', 'veth1\x00', @broadcast, [], @broadcast, [], 0x9c, 0x9c, 0xe4, [@cpu={'cpu\x00', 0x8}]}}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xab4) 07:48:35 executing program 0: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x8) 07:48:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary='U'}]}]}, 0x20}}, 0x0) 07:48:35 executing program 4: r0 = inotify_init1(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2}) fcntl$getown(r0, 0x9) 07:48:35 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 07:48:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 07:48:35 executing program 7: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='smaps_rollup\x00') 07:48:35 executing program 5: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x401, 0xfb, 0x38, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7, 0xfffffffffffffff9, 0x1}, [{0x0, 0x0, 0x5}], "", [[], [], []]}, 0x358) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0xffffffff}, 0x10) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000400)=""/100, 0x64) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0xa54029e5cc53e22b, &(0x7f0000000080)) socket$inet6(0xa, 0x0, 0x0) dup3(r0, r1, 0x0) 07:48:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000000c0)) 07:48:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000400)=@setlink={0x24, 0x13, 0x407, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0) 07:48:35 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@empty, @loopback}, 0x4) 07:48:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_FD(r0, 0x127d, 0xffffffffffffffff) 07:48:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, &(0x7f00000002c0)=&(0x7f0000000540)={&(0x7f00000000c0), 0x0, &(0x7f0000000040)={&(0x7f0000000100)}}, &(0x7f0000000500)=0xc) 07:48:35 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79}) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 07:48:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x2}]]}}}]}, 0x3c}}, 0x0) 07:48:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x3f}, &(0x7f0000000140)=0x98) 07:48:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) sendto$inet6(r0, &(0x7f0000000100)="040300000309c14609005375c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b6621d8d207ccf73f257e55e86eb29406", 0x36, 0x0, &(0x7f0000000040)={0xa, 0x800, 0x5, @mcast2}, 0x1c) 07:48:36 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x11, 0x0, @local, @local, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000180)) [ 1353.971187] netlink: 'syz-executor1': attribute type 15 has an invalid length. 07:48:36 executing program 6: r0 = socket(0x1e, 0x2, 0x0) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x10}}, 0x32a}}, 0x0) 07:48:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r1) close(r0) 07:48:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@filter={'filter\x00', 0x44, 0x1, 0x1e8, [0x0, 0x200005c0, 0x200005f0, 0x20000778], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x19, 0x0, 0x0, "76657461315f746f5f0400", 'erspan0\x00', 'bridge_slave_1\x00', 'ip6tnl0\x00', @link_local, [], @dev, [], 0xe8, 0x110, 0x158, [@helper={'helper\x00', 0x24, {{0x0, 'sip-20000\x00'}}}, @realm={'realm\x00', 0xc}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x4}]}, @common=@log={'log\x00', 0x24, {{0x0, "46aefdc2eedaf8ff6fcbbfa67ee31e6bfa4cf9f0761ffdac96c7d300bc1d"}}}}]}, {0x0, '\x00', 0x1}]}, 0x238) 07:48:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x3f}, &(0x7f0000000140)=0x98) 07:48:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x7ff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 07:48:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x400000043) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 1354.188502] kernel msg: ebtables bug: please report to author: Chains don't start at beginning 07:48:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1}}, 0x24}}, 0x0) 07:48:36 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) select(0x40, &(0x7f0000002000), &(0x7f0000000040), &(0x7f0000000fc0)={0x200080000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000003000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) 07:48:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 07:48:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x835, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14}, @IFA_LOCAL={0x14}]}, 0x40}}, 0x0) 07:48:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x3f}, &(0x7f0000000140)=0x98) 07:48:36 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmmsg$alg(r1, &(0x7f0000004c40)=[{0x0, 0x0, &(0x7f0000004ac0), 0x3e8, &(0x7f0000004b00)}], 0x1500, 0x0) 07:48:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000cceff4)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000731ef4)={0x20, 0x27, 0x829, 0x0, 0x0, {0x11}, [@nested={0xc, 0x9, [@typed={0x8, 0x1, @ipv4=@broadcast}]}]}, 0x20}}, 0x0) 07:48:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x700}, 0x6) 07:48:36 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge_slave_0\x00', 0x100000000000}) 07:48:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 07:48:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000001800190000003fffffffda060200000000e80008040000040d000500000500000005000000", 0x29}], 0x1) 07:48:36 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x3f}, &(0x7f0000000140)=0x98) 07:48:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) [ 1354.598204] netlink: 'syz-executor1': attribute type 5 has an invalid length. 07:48:36 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) 07:48:36 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x2, '\x00', 0x2}, 0x18) close(r0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x3d, @remote, 0x4e23, 0x0, 'sh\x00', 0x10, 0x935, 0x7e}, 0x2c) r1 = socket(0x1f, 0x803, 0x80000000000000) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000300)=""/231, 0xe7}], 0x3, 0x0, 0x0, 0x81}, 0x1) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 1354.808918] IPVS: stopping backup sync thread 12119 ... [ 1354.869163] IPVS: set_ctl: invalid protocol: 61 172.20.20.187:20003 07:48:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004000000000010000000000000025000000ffffffff00040000000000000a00000006cd0f8e"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000000000860100000000000000305a"]) 07:48:37 executing program 1: accept4(0xffffffffffffff9c, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:48:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="6e65742f736e6d7000660ab770b3f99211184c49bf4c12de6f2957ed0c8ed2cdd1031da7cc2931d49c481c970159aba3bb0017931d5fe5f49322cdcaaa86da0500000000000000cce280234502bb8dd1f4b5c4b62d054c3f4544b1d2ce94f17e3568d5e03e1a4add4243b4c86eb2f7fcd3ef4ab6c6130ce692fc68339c6d7d29b44cec260385051bc0491d8433c3") fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x2}) 07:48:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 07:48:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000100000000000000010000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x486, 0x0, 0xfffffdfd}]}) 07:48:37 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000400)=0x6b65a878, 0x4) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xc, @dev}, 0x1c) [ 1355.141615] bridge0: port 1(bridge_slave_0) entered disabled state 07:48:37 executing program 0: r0 = socket$inet6(0xa, 0x10000080003, 0x85) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 07:48:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) 07:48:37 executing program 6: creat(&(0x7f0000000000)='./bus\x00', 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000780)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0xa000, 0x0) 07:48:37 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r1, 0x1004000000016) close(r0) 07:48:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f0000000080)) 07:48:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f1d5"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1355.304822] kvm [14315]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x5a3000 07:48:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x800454df, &(0x7f0000000340)=""/4096) 07:48:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000001ffc)=0x6, 0x4) dup3(r1, r0, 0x0) 07:48:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) 07:48:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x4, 0x0, &(0x7f00000001c0)="5e28a928"}) 07:48:37 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000080)="4c0000001300ff09fffd956fa283b70000ffff07000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 07:48:37 executing program 6: r0 = socket$packet(0x11, 0x20000000000000a, 0x300) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@random, @random="ce4431c87397"}, {@broadcast, @broadcast}}}}}, &(0x7f0000000180)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x840, 0x4) recvmmsg(r0, &(0x7f0000006640)=[{{&(0x7f00000051c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f00000065c0), 0x0, &(0x7f0000006600)}}], 0x1, 0x0, &(0x7f0000006700)) 07:48:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x4000000000001f, 0x802, 0x0, &(0x7f0000000080)={0x0, 0x0}) 07:48:37 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)={{}, {0x0, 0x7530}}) 07:48:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000001ffc)=0x6, 0x4) dup3(r1, r0, 0x0) [ 1355.594456] binder: 14360:14365 ERROR: BC_REGISTER_LOOPER called without request [ 1355.602225] binder: 14365 RLIMIT_NICE not set 07:48:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) 07:48:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f1d5"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:37 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) [ 1355.733137] binder_alloc: binder_alloc_mmap_handler: 14360 20001000-20004000 already mapped failed -16 07:48:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) 07:48:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000001ffc)=0x6, 0x4) dup3(r1, r0, 0x0) 07:48:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x4000000000001f, 0x802, 0x0, &(0x7f0000000080)={0x0, 0x0}) [ 1355.826263] binder: BINDER_SET_CONTEXT_MGR already set [ 1355.831867] binder_alloc: 14360: binder_alloc_buf, no vma [ 1355.834360] binder: 14360:14365 ioctl 40046207 0 returned -16 [ 1355.837671] binder: 14360:14380 transaction failed 29189/-3, size 0-0 line 2967 [ 1355.852154] binder: 14360:14392 ERROR: BC_REGISTER_LOOPER called without request [ 1355.859791] binder: 14392 RLIMIT_NICE not set 07:48:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000625000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000643ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') unlinkat(r0, &(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', 0x0) 07:48:38 executing program 6: timer_create(0xfffffffffffffffd, &(0x7f0000000180)={0x0, 0x0, 0x1, @thr={&(0x7f0000000000), &(0x7f00000000c0)}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, r0+30000000}}, 0x0) [ 1355.882282] binder: send failed reply for transaction 520 to 14360:14365 [ 1355.916805] binder: undelivered TRANSACTION_COMPLETE [ 1355.922189] binder: undelivered TRANSACTION_ERROR: 29189 07:48:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80001, 0x0) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="a82524538c057a33", 0x8}, {&(0x7f0000000640)="3113d555", 0x4}], 0x2) 07:48:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f1d5"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1356.039941] binder: undelivered TRANSACTION_ERROR: 29189 07:48:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 07:48:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x4000000000001f, 0x802, 0x0, &(0x7f0000000080)={0x0, 0x0}) 07:48:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @random="69e81dba3f84"}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 07:48:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000001ffc)=0x6, 0x4) dup3(r1, r0, 0x0) [ 1356.215850] device veth0_to_bridge entered promiscuous mode [ 1356.283254] device veth0_to_bridge left promiscuous mode 07:48:38 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)={{}, {0x0, 0x7530}}) 07:48:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x227a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000180), &(0x7f0000000240)=""/41, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 07:48:38 executing program 3: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2713, &(0x7f0000000000)=""/13, &(0x7f0000000180)=0xd) 07:48:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f1d5"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x4000000000001f, 0x802, 0x0, &(0x7f0000000080)={0x0, 0x0}) 07:48:38 executing program 0: unshare(0x8020000) mq_open(&(0x7f0000000180)="747275737465646370757365746c6f6367726f757073656c667b2765746830747275737465646e6f646576252a136c6f657468315b00", 0x133b2c48909cbf0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}) unshare(0x8000000) 07:48:38 executing program 5: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) umount2(&(0x7f0000529ff8)='./file0\x00', 0x0) 07:48:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @random="69e81dba3f84"}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) [ 1356.569306] device veth0_to_bridge entered promiscuous mode [ 1356.605144] device veth0_to_bridge left promiscuous mode 07:48:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000003b00)={&(0x7f0000000880)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VF_PORTS={0x4}]}, 0x2c}, 0x1, 0x4000000000000000}, 0x0) 07:48:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x0) 07:48:38 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00003c1000), 0x10) 07:48:38 executing program 0: unshare(0x8020000) mq_open(&(0x7f0000000180)="747275737465646370757365746c6f6367726f757073656c667b2765746830747275737465646e6f646576252a136c6f657468315b00", 0x133b2c48909cbf0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}) unshare(0x8000000) 07:48:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @random="69e81dba3f84"}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 07:48:38 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000340)="e6", 0x1, 0x0, 0x0, 0x0) [ 1356.753162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 07:48:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 07:48:38 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)={{}, {0x0, 0x7530}}) [ 1356.795110] device veth0_to_bridge entered promiscuous mode 07:48:39 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x80000000) [ 1356.835556] device veth0_to_bridge left promiscuous mode 07:48:39 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00003c1000), 0x10) 07:48:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @random="69e81dba3f84"}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 07:48:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x2000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 07:48:39 executing program 0: unshare(0x8020000) mq_open(&(0x7f0000000180)="747275737465646370757365746c6f6367726f757073656c667b2765746830747275737465646e6f646576252a136c6f657468315b00", 0x133b2c48909cbf0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}) unshare(0x8000000) 07:48:39 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x0, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r0, r1) 07:48:39 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @local, 0x0, 0x2, [@rand_addr=0xfffffffffffffffd, @rand_addr]}, 0x18) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 07:48:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0x297, &(0x7f0000013ff1)={&(0x7f0000000140)={0x30, 0x18, 0x1, 0x0, 0x0, {0x1}, [@typed={0xc, 0x3, @u64}, @nested={0x10, 0x6, [@typed={0xc, 0x0, @u64}]}]}, 0x30}}, 0x0) 07:48:39 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00003c1000), 0x10) [ 1357.044715] device veth0_to_bridge entered promiscuous mode 07:48:39 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) close(r0) 07:48:39 executing program 1: r0 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0), &(0x7f0000000200)='v', 0x1, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) keyctl$setperm(0x5, r0, 0x0) [ 1357.108253] device veth0_to_bridge left promiscuous mode 07:48:39 executing program 0: unshare(0x8020000) mq_open(&(0x7f0000000180)="747275737465646370757365746c6f6367726f757073656c667b2765746830747275737465646e6f646576252a136c6f657468315b00", 0x133b2c48909cbf0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}) unshare(0x8000000) 07:48:39 executing program 2: creat(&(0x7f000002bff8)='./file0\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) fcntl$notify(r0, 0xa, 0x34) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r0, r2) 07:48:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='statm\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') sendfile(r1, r0, 0x0, 0xfae) 07:48:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e92be282e09b542ad5"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x5d}, [@ldst={0x7, 0x0, 0x49}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 07:48:39 executing program 7: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)={{}, {0x0, 0x7530}}) 07:48:39 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00003c1000), 0x10) 07:48:39 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) 07:48:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000000)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x105040, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x100000000080, 0x0, 0x1}) 07:48:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1a, 0x0, 0x0, &(0x7f00000000c0)) 07:48:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4000004e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) 07:48:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r0, &(0x7f00000002c0)=""/185, 0xb9, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000280)=0xfffffffffffffffe, 0x4) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000400)=@dstopts, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000002540)}, 0x0) 07:48:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e92be282e09b542ad5"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x5d}, [@ldst={0x7, 0x0, 0x49}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 07:48:39 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000040), 0xc, &(0x7f0000023ff0)={&(0x7f0000000080)={0x18, 0x2e, 0xb03, 0x0, 0x0, {0x2}, [@generic="99"]}, 0x18}}, 0x0) 07:48:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1a, 0x0, 0x0, &(0x7f00000000c0)) 07:48:40 executing program 6: unshare(0x2000400) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r0, 0x50, &(0x7f00000002c0)}, 0x10) 07:48:40 executing program 3: mmap(&(0x7f000035d000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0x402c5828, &(0x7f000035dffc)) 07:48:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') read(r0, &(0x7f0000000280)=""/230, 0x8) 07:48:40 executing program 4: perf_event_open(&(0x7f0000003040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x4, {{0x2, 0x0, @rand_addr=0x9}}}, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x1, &(0x7f0000000000)=""/244, &(0x7f00000001c0)=0x72) 07:48:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e92be282e09b542ad5"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x5d}, [@ldst={0x7, 0x0, 0x49}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 07:48:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 07:48:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) 07:48:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1a, 0x0, 0x0, &(0x7f00000000c0)) 07:48:40 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000400)) 07:48:40 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x7, 0xc}}, 0x18) 07:48:40 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 07:48:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e92be282e09b542ad5"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x5d}, [@ldst={0x7, 0x0, 0x49}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 07:48:40 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67affcdf031a5a2080000001c26b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="104a2d9e3da15b605e2e56c00c59cac3663635b2b23f9cac534d7471bf264849a82316cb696265a3c178700bcd46179867", 0x31}], 0x1, &(0x7f0000002800)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000200)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000580)=""/80, 0x50}], 0x2}}], 0x2, 0x0, 0x0) 07:48:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1ff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"41ba61116a63112bc1f0a7d56ad447696f0dafecdb7ad723a20842ef805d2c8948592a58c926156b0622dd9db9c8a2b490334e6af1f201233da543edbf5476039e450e60d8d3415115555d57625fb04274ca675c316838e086bb358a2be65835e4c806eb25e7bed9fb4db277c52b78cdb305d872bb49149b2334a863dce556d228cd6df37ac4701fca7ac540e7ef2913b7c979797e094e3bc3bd9fb13a2d4dff9767d4f080efc6102fb959bb803a9db35cdfbfd2d09b3cbc3f87cf426f5015b3815faed7076aa76ded1d69024d3972b076d9c16bc1d243060f8204e5193d8093d7fe78910945f25a49d85502b4d76e83f878788f993846338abf9c45fd21a282c22ef505d69b967f657e3803a1dd925f11b7169e33400cb9ac03cc476ef235157699a43c02dfbac742af721352e0008a55094bc5da912ee4cf5ce7c2c76a87163966b74407d3038ae0f0ce1e367490bf540ee04c9ba9b6098d7a0f346baeae5dc6b19b91e86e456a362e1b6fe7227c3b398eecd49908d474df5eeba9d267987bff63a710c6516146aa1195a4683f130c2372f839c5419d596b324e196144597d125b1f2c3cc98b9a3715db8ba0fe43457f8c61fa7cca37d8a852dad6bb03e7772476bbfe62035a333b9bedb038f6a7001bb9485dc8860f73a6004cd3c31f77443e9c36c3a33e4d3404f0080dd1a5b33905f83524cea6c8c0af5be18a357dd6a3caa0c673b55e8cd6c2b623166b6690753f442869f3c7b32223f3b066ea8c80d28eccd788fb5c0988ef8e1f7f775f2954560d63227a5b4a90a6b3bfbf51345ecd03aed7c4d51012aa41cffa8cf4ca6d7d9b18c04c86523ffe628d6a0a094447d179b5204bb0add477f9354f7908b2171d6a759e770bbf91e873781e9ccc14acc59464e6b6fbae73da97bdfca572741b29ae4ecd9803c7759febedfe55f9df42b15232d2d10d0692b3aec989b1791287cd4879b7509575a911556d9f0772f833280d857886e13ba333265aca9f0133d09b7dfce97748779e7e68e3ffca968ec8d0ce88acc32238a6d9ee6c4034c3ec332f0eb815b5ccf27910f1a4a1433b1fa54aa1dae9b51494b6f87a081661c4d23033828973970ff11bcb5d91f99267801a12d5ee1b2fd39b35a03f8cf5fd9f5c3cf6ab5037995a3f62190af47339bcf7f20052cf9e6d676db69369fcb57397bfb757457b3e71fc1b439c6ade14f7ad974c30ac901d96e71dd2a47c9a900ce89ba359889054548bbd67817bc67cbd6c3ec78db60eb1a057c586d397e58c717dcc9f01cedf2ac047299343377e7fc40ffa8b558f6692d46c0651558fba0c34ca899e97c0327e6e7ac310202dbefdf45f276f4d7fe40a9fbfdbdfdf3f71dc872aee346db6fa5a118fb5af839211049c079aaed0fe240dafc9aabd4890fd876809a99bec42c7c27204c092120b3c85a2781c6a45"}) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) 07:48:40 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000080)="13", 0x1) 07:48:40 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x7, 0xc}}, 0x18) 07:48:40 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') mkdir(&(0x7f0000000280)='./control/file0\x00', 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300)}, 0x10) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') close(r0) fdatasync(r0) 07:48:40 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) write$P9_RLOPEN(r3, &(0x7f0000000100)={0x18, 0xd, 0x1, {{0x14, 0x3, 0x3}, 0xfffffffffffffff7}}, 0x18) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 07:48:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1a, 0x0, 0x0, &(0x7f00000000c0)) 07:48:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de0ee9a90f798018439ed554fa07424adee901d2da75af1f01f7f5ab26d7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000440)=""/113) 07:48:41 executing program 5: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x10003, 0x7742) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, &(0x7f000000b000), 0x4, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180), 0x1, 0x2) 07:48:41 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x7, 0xc}}, 0x18) 07:48:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb), &(0x7f00003eb000)="b3", 0x1, r2) keyctl$update(0x1d, r3, &(0x7f0000000480)="df", 0x1) 07:48:41 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 07:48:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)}}, {{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=[{0x10, 0x11, 0x67}], 0x10}}], 0x2, 0x0) 07:48:41 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) sendmmsg(r1, &(0x7f000000c8c0)=[{{&(0x7f0000006b00)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000009d00), 0x0, &(0x7f0000009d80)}}, {{&(0x7f000000b1c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f000000c840)}}], 0x2, 0x0) 07:48:41 executing program 5: r0 = add_key$keyring(&(0x7f0000003880)='keyring\x00', &(0x7f0000003900), 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000003940)='pkcs7_test\x00', &(0x7f0000003980)='/dev/vga_arbiter\x00') 07:48:41 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) sendmmsg(r1, &(0x7f000000c8c0)=[{{&(0x7f0000006b00)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000009d00), 0x0, &(0x7f0000009d80)}}, {{&(0x7f000000b1c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f000000c840)}}], 0x2, 0x0) 07:48:41 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x7, 0xc}}, 0x18) 07:48:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb), &(0x7f00003eb000)="b3", 0x1, r2) keyctl$update(0x1d, r3, &(0x7f0000000480)="df", 0x1) 07:48:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de0ee9a90f798018439ed554fa07424adee901d2da75af1f01f7f5ab26d7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000440)=""/113) 07:48:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 07:48:41 executing program 5: r0 = add_key$keyring(&(0x7f0000003880)='keyring\x00', &(0x7f0000003900), 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000003940)='pkcs7_test\x00', &(0x7f0000003980)='/dev/vga_arbiter\x00') 07:48:41 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000300)) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000), 0xffffff0c, 0x2400) 07:48:41 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 07:48:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb), &(0x7f00003eb000)="b3", 0x1, r2) keyctl$update(0x1d, r3, &(0x7f0000000480)="df", 0x1) 07:48:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{}, 'port0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x1ff, 0x0, 'client1\x00', 0x0, "06790f360d710ae2", "04e7f6f1b59d87c3d84bc25fbe4048ef1961e68cd8bd6d7d88fd46e07b89e5b2"}) 07:48:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de0ee9a90f798018439ed554fa07424adee901d2da75af1f01f7f5ab26d7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000440)=""/113) 07:48:41 executing program 5: r0 = add_key$keyring(&(0x7f0000003880)='keyring\x00', &(0x7f0000003900), 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000003940)='pkcs7_test\x00', &(0x7f0000003980)='/dev/vga_arbiter\x00') 07:48:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 07:48:41 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) sendmmsg(r1, &(0x7f000000c8c0)=[{{&(0x7f0000006b00)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000009d00), 0x0, &(0x7f0000009d80)}}, {{&(0x7f000000b1c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f000000c840)}}], 0x2, 0x0) 07:48:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 07:48:42 executing program 5: r0 = add_key$keyring(&(0x7f0000003880)='keyring\x00', &(0x7f0000003900), 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000003940)='pkcs7_test\x00', &(0x7f0000003980)='/dev/vga_arbiter\x00') 07:48:42 executing program 1: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb), &(0x7f00003eb000)="b3", 0x1, r2) keyctl$update(0x1d, r3, &(0x7f0000000480)="df", 0x1) 07:48:42 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7fff, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x401, 0x4) 07:48:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de0ee9a90f798018439ed554fa07424adee901d2da75af1f01f7f5ab26d7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000440)=""/113) 07:48:42 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) sendmmsg(r1, &(0x7f000000c8c0)=[{{&(0x7f0000006b00)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000009d00), 0x0, &(0x7f0000009d80)}}, {{&(0x7f000000b1c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f000000c840)}}], 0x2, 0x0) 07:48:42 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000180), 0x403) 07:48:42 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c75ff7)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000789000)=0x7c) 07:48:42 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)) 07:48:42 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002081f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x20000000) pread64(r0, &(0x7f0000000080)=""/87, 0x57, 0x0) 07:48:42 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 07:48:42 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000340)='./file0//ile0/file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 07:48:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x2, 0x7, 0x0) 07:48:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 07:48:42 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000180), 0x403) 07:48:42 executing program 4: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x0, 0x3}, 0xffffffffffffffab) dup2(r0, r1) [ 1360.356682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 07:48:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000000)=0x8) setrlimit(0x7, &(0x7f000046eff0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095cffe)={r1}, &(0x7f000095c000)=0x8) [ 1360.431440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1360.438790] syz-executor6 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1360.451908] syz-executor6 cpuset=/ mems_allowed=0 [ 1360.456865] CPU: 0 PID: 14770 Comm: syz-executor6 Not tainted 4.18.0-rc7+ #76 [ 1360.464155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.473531] Call Trace: [ 1360.476133] dump_stack+0x1c9/0x2b4 07:48:42 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000180), 0x403) 07:48:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x49, 0x0, 0x80ffff}]}) [ 1360.479773] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1360.484977] ? trace_hardirqs_on+0x10/0x10 [ 1360.489229] dump_header+0x27b/0xf64 [ 1360.492962] ? pagefault_out_of_memory+0x197/0x197 [ 1360.497904] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 1360.502767] ? perf_trace_lock+0x920/0x920 [ 1360.507119] ? graph_lock+0x170/0x170 [ 1360.510932] ? print_usage_bug+0xc0/0xc0 [ 1360.515032] ? print_usage_bug+0xc0/0xc0 [ 1360.519120] ? lock_downgrade+0x8f0/0x8f0 [ 1360.523301] ? mark_held_locks+0xc9/0x160 [ 1360.527468] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1360.532049] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1360.537161] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1360.542207] ? trace_hardirqs_on+0xd/0x10 [ 1360.546349] ? ___ratelimit+0xaa/0x655 [ 1360.550224] ? idr_get_free+0x10c0/0x10c0 [ 1360.554361] ? kasan_check_write+0x14/0x20 [ 1360.558592] ? do_raw_spin_lock+0xc1/0x200 [ 1360.562829] oom_kill_process.cold.25+0x10/0x10bc [ 1360.567670] ? oom_evaluate_task+0x540/0x540 [ 1360.572065] ? find_held_lock+0x36/0x1c0 [ 1360.576121] ? lock_downgrade+0x8f0/0x8f0 [ 1360.580261] ? kasan_check_read+0x11/0x20 [ 1360.584394] ? rcu_is_watching+0x8c/0x150 [ 1360.588537] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1360.592934] ? oom_badness+0xb00/0xb00 [ 1360.596811] ? rcu_read_unlock+0x35/0x70 [ 1360.600856] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1360.605086] ? css_task_iter_end+0x2ce/0x490 [ 1360.609482] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1360.614223] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1360.619226] ? trace_hardirqs_on+0xd/0x10 [ 1360.623367] ? _raw_spin_unlock_irq+0x27/0x70 [ 1360.627848] ? oom_badness+0xb00/0xb00 [ 1360.631724] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1360.636468] ? mem_cgroup_iter_break+0x30/0x30 [ 1360.641051] out_of_memory+0xa8a/0x14d0 [ 1360.645033] ? oom_killer_disable+0x3a0/0x3a0 [ 1360.649519] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1360.654522] ? trace_hardirqs_on+0xd/0x10 [ 1360.658661] mem_cgroup_out_of_memory+0x15e/0x210 [ 1360.663492] ? memcg_memory_event+0x40/0x40 [ 1360.667803] ? _raw_spin_unlock+0x22/0x30 [ 1360.671939] mem_cgroup_oom_synchronize+0x713/0x940 [ 1360.676942] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1360.682378] ? memcg_event_wake+0x450/0x450 [ 1360.686696] pagefault_out_of_memory+0xc8/0x197 [ 1360.691348] ? out_of_memory+0x14d0/0x14d0 [ 1360.695600] ? __handle_mm_fault+0x4460/0x4460 [ 1360.700177] mm_fault_error+0x1de/0x380 [ 1360.704142] __do_page_fault+0xd25/0xe50 [ 1360.708574] ? mm_fault_error+0x380/0x380 [ 1360.712712] ? __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1360.717371] do_page_fault+0xf6/0x8c0 [ 1360.721162] ? vmalloc_sync_all+0x30/0x30 [ 1360.725300] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1360.730041] ? do_syscall_64+0x820/0x820 [ 1360.734090] ? syscall_return_slowpath+0x31d/0x5e0 [ 1360.739012] ? sysret32_from_system_call+0x5/0x46 [ 1360.743844] ? page_fault+0x8/0x30 [ 1360.747368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1360.752197] ? page_fault+0x8/0x30 [ 1360.755723] page_fault+0x1e/0x30 [ 1360.759168] RIP: 0023:0x8052a62 [ 1360.762424] Code: 00 83 c4 20 83 f8 ff 89 45 b0 0f 84 86 01 00 00 8b 45 b0 85 c0 0f 84 bb 04 00 00 8b 4d b0 8b 7d a8 8d 84 39 40 fb ff ff 89 c6 <89> 88 70 02 00 00 89 b8 74 02 00 00 89 45 b4 05 8c 00 00 00 c7 46 [ 1360.781672] RSP: 002b:000000000845fca0 EFLAGS: 00010286 [ 1360.787027] RAX: 00000000f5f05b40 RBX: 0000000000020000 RCX: 00000000f5ee5000 [ 1360.794283] RDX: 0000000000000003 RSI: 00000000f5f05b40 RDI: 0000000000021000 [ 1360.801536] RBP: 000000000845fd18 R08: 0000000000000000 R09: 0000000000000000 [ 1360.808790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1360.816044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1360.823414] Task in /ile0 killed as a result of limit of /ile0 [ 1360.829464] memory: usage 116kB, limit 0kB, failcnt 519 [ 1360.834896] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1360.841703] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1360.847888] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1360.867784] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name 07:48:43 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) bind$inet(r0, &(0x7f0000001280)={0x2, 0x0, @remote}, 0x10) 07:48:43 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045407, &(0x7f0000000080)) [ 1360.876671] [14770] 0 14770 17560 8732 110592 0 0 syz-executor6 [ 1360.885603] Memory cgroup out of memory: Kill process 14770 (syz-executor6) score 8759000 or sacrifice child [ 1360.895677] Killed process 14770 (syz-executor6) total-vm:70240kB, anon-rss:2160kB, file-rss:32768kB, shmem-rss:0kB 07:48:43 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 07:48:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0xc9, 0x0, 0x0) 07:48:43 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x22d, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) 07:48:43 executing program 4: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000004240)={0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000004180)=[@fd], &(0x7f00000041c0)=[0x78]}}], 0x0, 0x0, &(0x7f00000052c0)}) 07:48:43 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x958}) 07:48:43 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000180), 0x403) [ 1361.145321] binder: 14820:14821 transaction failed 29189/-22, size 24-8 line 2852 [ 1361.188164] binder: 14820:14828 transaction failed 29189/-22, size 24-8 line 2852 [ 1361.229490] binder: undelivered TRANSACTION_ERROR: 29189 [ 1361.235245] binder: undelivered TRANSACTION_ERROR: 29189 07:48:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="04000000000009"]], 0x1, 0x0, &(0x7f0000000500)=';'}) 07:48:43 executing program 7: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 07:48:43 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0xfffffd21) 07:48:43 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = memfd_create(&(0x7f0000000440)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) sendfile(r2, r2, &(0x7f0000000240), 0xfffffffffffffff8) 07:48:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00003e4000)={&(0x7f0000e87000), 0xc, &(0x7f0000000000)={&(0x7f0000000400)=@getlink={0x38, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10}, @IFLA_MASTER={0x8, 0xa, 0xf}]}, 0x38}}, 0x0) [ 1361.283374] oom_reaper: reaped process 14770 (syz-executor6), now anon-rss:0kB, file-rss:32092kB, shmem-rss:0kB 07:48:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x88000, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) timerfd_gettime(r1, &(0x7f0000000000)) ioctl$KDGKBLED(r1, 0xc004510e, &(0x7f0000000140)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000040)={0x8001, 0x10000, 0x6, 0x4, 0x22}) 07:48:43 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x230080, 0x0) getegid() r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8800001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="00008d00", @ANYRES16=r2, @ANYBLOB="12002abd7000fddbdf2502000000080003006f000000080003008800000004000500080002000a000000080003001d0000000800030072000000080003000100000004000500"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) [ 1361.375879] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 1361.405842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 1361.414446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. 07:48:43 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0x4, 0x0, 0x0, 0x7fffffff]}) r1 = getpid() fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x2, 0x4, 0x9, 0x8, r1}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000440)="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", 0x3d0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000003c0), &(0x7f00000005c0), 0x1000) [ 1361.454697] binder: 14847:14848 unknown command 536872256 [ 1361.469466] syz-executor5 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1361.481484] syz-executor5 cpuset=/ mems_allowed=0 [ 1361.486431] CPU: 1 PID: 14837 Comm: syz-executor5 Not tainted 4.18.0-rc7+ #76 [ 1361.493720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.503085] Call Trace: [ 1361.505695] dump_stack+0x1c9/0x2b4 [ 1361.509350] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1361.514565] ? trace_hardirqs_on+0x10/0x10 [ 1361.518829] dump_header+0x27b/0xf64 [ 1361.522582] ? pagefault_out_of_memory+0x197/0x197 [ 1361.527549] ? perf_trace_lock+0xde/0x920 [ 1361.531709] ? __lock_acquire+0x7fc/0x5020 [ 1361.535959] ? zap_class+0x740/0x740 [ 1361.539678] ? print_usage_bug+0xc0/0xc0 [ 1361.543755] ? perf_trace_lock+0xde/0x920 [ 1361.547912] ? graph_lock+0x170/0x170 07:48:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000af2000)="8be3000000010000", 0x8) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="82", 0x1}], 0x1}], 0x1, 0x0) [ 1361.551726] ? print_usage_bug+0xc0/0xc0 [ 1361.555798] ? zap_class+0x740/0x740 [ 1361.559535] ? print_usage_bug+0xc0/0xc0 [ 1361.563626] ? lock_downgrade+0x8f0/0x8f0 [ 1361.567801] ? mark_held_locks+0xc9/0x160 [ 1361.571952] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1361.576540] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1361.578118] binder: 14847:14848 ioctl c0306201 20000440 returned -22 [ 1361.581648] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1361.581666] ? trace_hardirqs_on+0xd/0x10 [ 1361.581687] ? ___ratelimit+0xaa/0x655 [ 1361.581705] ? idr_get_free+0x10c0/0x10c0 [ 1361.581723] ? kasan_check_write+0x14/0x20 [ 1361.581737] ? do_raw_spin_lock+0xc1/0x200 [ 1361.581758] oom_kill_process.cold.25+0x10/0x10bc [ 1361.581785] ? oom_evaluate_task+0x540/0x540 [ 1361.581800] ? find_held_lock+0x36/0x1c0 [ 1361.581825] ? lock_downgrade+0x8f0/0x8f0 [ 1361.581844] ? rcu_is_watching+0x8c/0x150 [ 1361.635375] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1361.639783] ? oom_badness+0xb00/0xb00 [ 1361.643674] ? rcu_read_unlock+0x35/0x70 [ 1361.647726] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1361.651948] ? css_task_iter_end+0x2ce/0x490 [ 1361.656347] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1361.661095] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1361.666103] ? trace_hardirqs_on+0xd/0x10 [ 1361.670240] ? _raw_spin_unlock_irq+0x27/0x70 [ 1361.674726] ? oom_badness+0xb00/0xb00 [ 1361.678610] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1361.683359] ? mem_cgroup_iter_break+0x30/0x30 [ 1361.687950] out_of_memory+0xa8a/0x14d0 [ 1361.691923] ? oom_killer_disable+0x3a0/0x3a0 [ 1361.696421] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1361.701431] ? trace_hardirqs_on+0xd/0x10 [ 1361.705586] mem_cgroup_out_of_memory+0x15e/0x210 [ 1361.710422] ? memcg_memory_event+0x40/0x40 [ 1361.714743] ? _raw_spin_unlock+0x22/0x30 [ 1361.718889] mem_cgroup_oom_synchronize+0x713/0x940 [ 1361.723899] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1361.729337] ? memcg_event_wake+0x450/0x450 [ 1361.733667] pagefault_out_of_memory+0xc8/0x197 [ 1361.738324] ? out_of_memory+0x14d0/0x14d0 [ 1361.742575] ? __handle_mm_fault+0x4460/0x4460 [ 1361.747165] mm_fault_error+0x1de/0x380 [ 1361.751135] __do_page_fault+0xd25/0xe50 [ 1361.755196] ? mm_fault_error+0x380/0x380 [ 1361.759337] ? __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1361.764003] do_page_fault+0xf6/0x8c0 [ 1361.767804] ? vmalloc_sync_all+0x30/0x30 [ 1361.771945] ? syscall_slow_exit_work+0x500/0x500 [ 1361.776787] ? do_syscall_64+0x820/0x820 [ 1361.780841] ? syscall_return_slowpath+0x31d/0x5e0 [ 1361.785775] ? sysret32_from_system_call+0x5/0x46 [ 1361.790616] ? page_fault+0x8/0x30 [ 1361.794148] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1361.798982] ? page_fault+0x8/0x30 [ 1361.802512] page_fault+0x1e/0x30 [ 1361.805955] RIP: 0023:0x8052a62 [ 1361.809215] Code: 00 83 c4 20 83 f8 ff 89 45 b0 0f 84 86 01 00 00 8b 45 b0 85 c0 0f 84 bb 04 00 00 8b 4d b0 8b 7d a8 8d 84 39 40 fb ff ff 89 c6 <89> 88 70 02 00 00 89 b8 74 02 00 00 89 45 b4 05 8c 00 00 00 c7 46 [ 1361.828593] RSP: 002b:000000000845fca0 EFLAGS: 00010286 [ 1361.833951] RAX: 00000000f5f46b40 RBX: 0000000000020000 RCX: 00000000f5f26000 [ 1361.841208] RDX: 0000000000000003 RSI: 00000000f5f46b40 RDI: 0000000000021000 [ 1361.848473] RBP: 000000000845fd18 R08: 0000000000000000 R09: 0000000000000000 [ 1361.855734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.862992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1361.870566] Task in /ile0 killed as a result of limit of /ile0 [ 1361.876631] memory: usage 116kB, limit 0kB, failcnt 544 [ 1361.882053] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1361.888846] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 07:48:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0xe, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f000000efdc)="240000004a00030007fffd946fa283bc0a008000020f0000031d8568791ba3a2d188737e", 0x24}], 0x1}, 0x0) [ 1361.895050] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1361.914909] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 1361.923797] [14837] 0 14837 17560 8728 110592 0 0 syz-executor5 [ 1361.932708] Memory cgroup out of memory: Kill process 14837 (syz-executor5) score 8755000 or sacrifice child [ 1361.942773] Killed process 14837 (syz-executor5) total-vm:70240kB, anon-rss:2144kB, file-rss:32768kB, shmem-rss:0kB 07:48:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0xdba, 0x4) r1 = socket$inet_sctp(0x2, 0xfffffffffffffff9, 0x84) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000180)={[], 0x6419, 0x2, 0x3, 0x0, 0x1, 0x0, 0x6000, [], 0x6bcd}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x30, &(0x7f00000000c0), &(0x7f0000000140)=0x30) [ 1361.959877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 1361.972659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 1361.981229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor4'. [ 1361.991449] binder: BINDER_SET_CONTEXT_MGR already set [ 1361.997826] binder: 14847:14850 ioctl 40046207 0 returned -16 07:48:44 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x5, 0x400000000000082) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000004c0)={&(0x7f0000ff6000/0x9000)=nil, 0x9000}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) clone(0x20000000, &(0x7f0000001f37), &(0x7f00000002c0), &(0x7f0000001000), &(0x7f00000003c0)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000540)=""/224) getdents(r4, &(0x7f00000003c0)=""/195, 0xc3) sendfile(r2, r2, &(0x7f0000000000)=0x6000000000000000, 0x2000005) 07:48:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x30, &(0x7f00000000c0), &(0x7f0000000040)=0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x100000001}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x6, 0xffff, 0x8, r2}, &(0x7f0000000180)=0x10) 07:48:44 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffffffffffff830, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/53, &(0x7f0000000080)=0x35) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) recvmsg$kcm(r0, &(0x7f0000001180)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xd1800}, 0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/vsock\x00', 0x2, 0x0) recvfrom(r1, &(0x7f0000001280)=""/132, 0x84, 0x1, &(0x7f0000001340)=@in={0x2, 0x4e23, @loopback}, 0x80) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000001200)) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0xe22}, 0x1c) 07:48:44 executing program 1: rt_sigtimedwait(&(0x7f0000000000)={0xf79}, 0x0, &(0x7f0000000100)={0x77359400}, 0x39e) readlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/206, 0x8c) 07:48:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e004bcc0ae4de5d4e831c68b6c2956c2874476ee83e417454f684cab6a71b139644ea97a"}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x200) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x838a) [ 1362.013978] oom_reaper: reaped process 14837 (syz-executor5), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB [ 1362.028311] binder: 14847:14848 unknown command 536872256 [ 1362.042263] binder: 14847:14848 ioctl c0306201 20000440 returned -22 07:48:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="04000000000009"]], 0x1, 0x0, &(0x7f0000000500)=';'}) 07:48:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000340), 0x800009) [ 1362.149956] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1362.160971] syz-executor4 cpuset=/ mems_allowed=0 [ 1362.165939] CPU: 1 PID: 14875 Comm: syz-executor4 Not tainted 4.18.0-rc7+ #76 [ 1362.173219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.182583] Call Trace: [ 1362.185186] dump_stack+0x1c9/0x2b4 [ 1362.188830] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1362.194030] ? trace_hardirqs_on+0x10/0x10 [ 1362.198267] dump_header+0x27b/0xf64 [ 1362.201989] ? pagefault_out_of_memory+0x197/0x197 [ 1362.206919] ? __lock_acquire+0x7fc/0x5020 [ 1362.211143] ? graph_lock+0x170/0x170 [ 1362.214941] ? print_usage_bug+0xc0/0xc0 [ 1362.218991] ? print_usage_bug+0xc0/0xc0 [ 1362.223057] ? graph_lock+0x170/0x170 [ 1362.226848] ? print_usage_bug+0xc0/0xc0 [ 1362.230901] ? trace_hardirqs_on+0x10/0x10 [ 1362.235139] ? print_usage_bug+0xc0/0xc0 [ 1362.239201] ? lock_downgrade+0x8f0/0x8f0 [ 1362.243347] ? mark_held_locks+0xc9/0x160 [ 1362.247485] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1362.252061] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1362.257165] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1362.262171] ? trace_hardirqs_on+0xd/0x10 [ 1362.266313] ? ___ratelimit+0xaa/0x655 [ 1362.270192] ? idr_get_free+0x10c0/0x10c0 [ 1362.274331] ? kasan_check_write+0x14/0x20 [ 1362.278572] ? do_raw_spin_lock+0xc1/0x200 [ 1362.282805] oom_kill_process.cold.25+0x10/0x10bc [ 1362.287647] ? oom_evaluate_task+0x540/0x540 [ 1362.292052] ? find_held_lock+0x36/0x1c0 [ 1362.296115] ? lock_downgrade+0x8f0/0x8f0 [ 1362.300259] ? kasan_check_read+0x11/0x20 [ 1362.304397] ? rcu_is_watching+0x8c/0x150 [ 1362.308535] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1362.312945] ? oom_badness+0xb00/0xb00 [ 1362.316825] ? rcu_read_unlock+0x35/0x70 [ 1362.320884] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1362.325109] ? css_task_iter_end+0x2ce/0x490 [ 1362.329506] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1362.334258] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1362.339266] ? trace_hardirqs_on+0xd/0x10 [ 1362.343419] ? _raw_spin_unlock_irq+0x27/0x70 [ 1362.347905] ? oom_badness+0xb00/0xb00 [ 1362.351785] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1362.356537] ? mem_cgroup_iter_break+0x30/0x30 [ 1362.361126] out_of_memory+0xa8a/0x14d0 [ 1362.365103] ? oom_killer_disable+0x3a0/0x3a0 [ 1362.369601] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1362.374867] ? trace_hardirqs_on+0xd/0x10 [ 1362.379020] mem_cgroup_out_of_memory+0x15e/0x210 [ 1362.383861] ? memcg_memory_event+0x40/0x40 [ 1362.388182] ? _raw_spin_unlock+0x22/0x30 [ 1362.392324] mem_cgroup_oom_synchronize+0x713/0x940 [ 1362.397345] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1362.402788] ? memcg_event_wake+0x450/0x450 [ 1362.407284] ? rwsem_wake+0x2eb/0x460 [ 1362.411080] ? __rwsem_mark_wake.constprop.5+0xd0/0xd0 [ 1362.416358] pagefault_out_of_memory+0xc8/0x197 [ 1362.421019] ? out_of_memory+0x14d0/0x14d0 [ 1362.425284] mm_fault_error+0x1de/0x380 [ 1362.429254] __do_page_fault+0xd25/0xe50 [ 1362.433311] ? mm_fault_error+0x380/0x380 [ 1362.437453] ? do_fast_syscall_32+0x150/0xfb2 [ 1362.441946] do_page_fault+0xf6/0x8c0 [ 1362.445737] ? vmalloc_sync_all+0x30/0x30 [ 1362.449874] ? _raw_spin_unlock_irq+0x27/0x70 [ 1362.454360] ? finish_task_switch+0x1d3/0x870 [ 1362.458850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1362.464377] ? syscall_return_slowpath+0x31d/0x5e0 [ 1362.469301] ? sysret32_from_system_call+0x5/0x46 [ 1362.474134] ? page_fault+0x8/0x30 [ 1362.477667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1362.482512] ? page_fault+0x8/0x30 [ 1362.486053] page_fault+0x1e/0x30 [ 1362.489495] RIP: 0023:0x8049b12 [ 1362.492755] Code: 8b 84 24 a0 04 00 00 83 e8 0b 83 f8 01 0f 86 cd 00 00 00 65 f0 83 05 e4 ff ff ff 01 65 a1 00 00 00 00 83 ec 0c 05 48 ff ff ff <50> e8 28 10 01 00 83 c4 10 85 c0 0f 84 fd 00 00 00 65 f0 83 2d e4 [ 1362.512108] RSP: 002b:00000000f5f49c34 EFLAGS: 00010287 [ 1362.517464] RAX: 00000000f5f4aa88 RBX: 00000000080de227 RCX: 0000000000000001 [ 1362.524722] RDX: 00000000080e483c RSI: 00000000083500a0 RDI: 00000000ffffffff [ 1362.531979] RBP: 00000000f5f4a168 R08: 0000000000000000 R09: 0000000000000000 [ 1362.539775] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1362.547038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1362.554517] Task in /ile0 killed as a result of limit of /ile0 [ 1362.560588] memory: usage 116kB, limit 0kB, failcnt 562 [ 1362.566037] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1362.567702] binder: 14890:14894 unknown command 536872256 [ 1362.572839] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 07:48:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/108, 0x6c) dup2(r0, r1) [ 1362.572846] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1362.572957] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 1362.589184] binder: 14890:14894 ioctl c0306201 20000440 returned -22 [ 1362.604698] [14874] 0 14874 17560 8728 110592 0 0 syz-executor4 [ 1362.628669] Memory cgroup out of memory: Kill process 14874 (syz-executor4) score 8755000 or sacrifice child [ 1362.632110] Unknown ioctl -2139050335 07:48:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000180)="0404000000c000ddb8460900fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843f56590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55d462600001b0000000000000000000000aeb462644a4bae135664", 0x64, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x20000000005, @ipv4={[], [], @multicast2}}, 0x1c) [ 1362.638720] Killed process 14874 (syz-executor4) total-vm:70240kB, anon-rss:2144kB, file-rss:32768kB, shmem-rss:0kB 07:48:44 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x30, &(0x7f0000000040)=@srh, 0x8) 07:48:44 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x802) inotify_add_watch(r0, &(0x7f0000000300)='./file0\x00', 0x20000000) 07:48:44 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0xc06c4124, &(0x7f0000000040)) 07:48:44 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0}) ppoll(&(0x7f0000000440)=[{r0}], 0x1, &(0x7f00000004c0)={r1}, &(0x7f0000000500), 0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90}, 0x90) 07:48:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000180)="0404000000c000ddb8460900fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843f56590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55d462600001b0000000000000000000000aeb462644a4bae135664", 0x64, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x20000000005, @ipv4={[], [], @multicast2}}, 0x1c) 07:48:44 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) recvmsg(r0, &(0x7f00000004c0)={&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/57, 0x39}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f0000000000), 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 07:48:44 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040), &(0x7f0000facfff)="06", 0x1, r1) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000580)="b3", 0x1, r1) keyctl$update(0x2, r3, &(0x7f0000000340)="df02754677212dfc3e2abcb244e22773e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r2}, &(0x7f0000a53ffb)=""/5, 0x3, &(0x7f0000000140)={&(0x7f0000a3dffa)={'md4-generic\x00'}}) [ 1362.907138] oom_reaper: reaped process 14874 (syz-executor4), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB 07:48:45 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000004240)={"6272696467653000000000000200", &(0x7f0000004280)=@ethtool_eee={0xe, 0x0, 0x1000000}}) 07:48:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000180)="0404000000c000ddb8460900fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843f56590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55d462600001b0000000000000000000000aeb462644a4bae135664", 0x64, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x20000000005, @ipv4={[], [], @multicast2}}, 0x1c) [ 1362.977210] Unknown ioctl -2139050335 07:48:45 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 07:48:45 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x80000001}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:48:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000080), 0x4) 07:48:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="04000000000009"]], 0x1, 0x0, &(0x7f0000000500)=';'}) 07:48:45 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x7, 0x2}, 0x10}}, 0x0) 07:48:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000180)="0404000000c000ddb8460900fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843f56590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55d462600001b0000000000000000000000aeb462644a4bae135664", 0x64, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x20000000005, @ipv4={[], [], @multicast2}}, 0x1c) 07:48:45 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='sit0\x00'}) 07:48:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, 0x14) 07:48:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x3f}) 07:48:45 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) tee(r3, r1, 0x8, 0x0) [ 1363.182178] binder: 14963:14970 unknown command 536872256 [ 1363.203255] binder: 14963:14970 ioctl c0306201 20000440 returned -22 07:48:45 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0}) ppoll(&(0x7f0000000440)=[{r0}], 0x1, &(0x7f00000004c0)={r1}, &(0x7f0000000500), 0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90}, 0x90) 07:48:45 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @val, @ipx={0xffff, 0x1e, 0x0, 0x0, {@random, @current}, {@broadcast, @broadcast}}}, 0x28) 07:48:45 executing program 0: seccomp(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4d}, {0x6}]}) 07:48:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="04000000000009"]], 0x1, 0x0, &(0x7f0000000500)=';'}) 07:48:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=@ipv6_getroute={0x24, 0x1a, 0x13, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) 07:48:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)="0000000000000001e3a255ec4a8d9d652d0536c67b9695cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfcade859e4717cdf8f03fdf022186424d68996f51a7b3f20108f152bfd57ac5a50be84a106249d0216d5c98c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf3039474801053b87fbf8674e100", 0x88, r1) r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000), &(0x7f0000000080)='u', 0x1, r1) r3 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000300), &(0x7f00000001c0)="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", 0x101, r1) r4 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r2, r3, r4}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={"67686173682d67656e6572696300d80b037e485c5f00"}, &(0x7f0000000000)}) 07:48:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) [ 1363.699441] binder: 14997:15002 unknown command 536872256 [ 1363.726211] binder: 14997:15002 ioctl c0306201 20000440 returned -22 [ 1363.840465] *** Guest State *** [ 1363.843923] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 1363.852858] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1363.861763] CR3 = 0x0000000000000000 [ 1363.865576] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1363.871593] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1363.877651] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1363.884390] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1363.892459] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1363.900499] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1363.908560] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1363.916602] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1363.924649] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1363.932670] GDTR: limit=0x00000000, base=0x0000000000000000 [ 1363.940738] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1363.948756] IDTR: limit=0x00000000, base=0x0000000000000000 [ 1363.956832] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 1363.964857] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1363.968368] audit: type=1326 audit(1533196126.024:257): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14999 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32cb9 code=0x0 07:48:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000008ffc)=0x9b, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000009000), 0x4) 07:48:46 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000c26fec)={0x1, 0xf, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f000000a000), &(0x7f0000006000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000002440)}, 0x20) 07:48:46 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480)) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000000008000000000000000000b8c5137a5dd2d0d8f6d316e6f646576656d3100000000000000000000000000000000000000000001000000000000002c00000000000000000000000000000000000000000000001c000000000000002b73797374656dcc6370757365746367726f7570246300080000000000000000"], 0x90) 07:48:46 executing program 0: seccomp(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4d}, {0x6}]}) [ 1363.971324] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1363.998549] Interruptibility = 00000000 ActivityState = 00000000 [ 1364.004871] *** Host State *** [ 1364.008161] RIP = 0xffffffff811f3d24 RSP = 0xffff88019bdc73d0 [ 1364.014222] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1364.020685] FSBase=0000000000000000 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 1364.028579] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 1364.034536] CR0=0000000080050033 CR3=00000001cb3e3000 CR4=00000000001426e0 [ 1364.041629] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 1364.048402] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 1364.054518] *** Control State *** [ 1364.058063] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 1364.064777] EntryControls=0000d1ff ExitControls=0023efff [ 1364.070303] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1364.078416] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1364.085153] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1364.091784] reason=80000021 qualification=0000000000000000 [ 1364.098166] IDTVectoring: info=00000000 errcode=00000000 [ 1364.103665] TSC Offset = 0xfffffd231b85d60c [ 1364.108037] TPR Threshold = 0x00 [ 1364.111446] EPT pointer = 0x00000001af2e801e [ 1364.116685] APIC base relocation is unsupported by KVM 07:48:46 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x3, 0x2f, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) [ 1364.130528] audit: type=1326 audit(1533196126.251:258): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15021 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32cb9 code=0x0 07:48:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, 0x14) 07:48:46 executing program 0: seccomp(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4d}, {0x6}]}) 07:48:46 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0x0) 07:48:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_FLAGS={0x8, 0x2}]}, 0x20}}, 0x0) [ 1364.338720] audit: type=1326 audit(1533196126.460:259): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15043 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32cb9 code=0x0 07:48:46 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0}) ppoll(&(0x7f0000000440)=[{r0}], 0x1, &(0x7f00000004c0)={r1}, &(0x7f0000000500), 0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90}, 0x90) 07:48:46 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/104, 0x273}, {&(0x7f0000000500)=""/89, 0x59}], 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 07:48:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004dffffffffffffff000000000000"], 0x2e) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) 07:48:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, 0x14) 07:48:46 executing program 0: seccomp(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4d}, {0x6}]}) [ 1364.540465] audit: type=1326 audit(1533196126.657:260): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15060 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32cb9 code=0x0 07:48:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0x293, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$unix(r1, &(0x7f00000002c0)="607008195f000000000000000ac3d4e100827d79d1c38b63bba9d5de38a0ef0911b46835c1b13c455cc86fea30a75be5b71f8268e1a818b07f333f4b481438264133eb9777bf0944ed3b785821065393444cfa47b0e4c61dcd965c70ead025c1468eca0a87bdd378e016ea35308982d4344f8dfc0e351ccfb9ac60d8b44ea05ec65b8f4324caaa60e758ea4d779954c06951d50a15a027f22ff6bf614b81ff6a96d7f530f12126a4648e8976c505e00f259b03c780484bef71cc51c3f1e07131d3e8552cdf71487c33678a61c7c83c787b45c9929edd0cb14cd2a9ec3b674732632f4f", 0xe3, 0x44040, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000080)={&(0x7f00000001c0)=@ax25, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/177, 0xb1}], 0x1}, 0x0) 07:48:46 executing program 7: r0 = open(&(0x7f0000000340)='./file0\x00', 0x34142, 0x120) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000380)='@em1GPL-+&\x00') r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000d1b000), 0x0, &(0x7f0000000040)}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc004240a, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=0x0) getpriority(0x0, r2) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) bind$vsock_dgram(r1, &(0x7f0000000240)={0x28, 0x0, 0x2710, @hyper}, 0x10) r3 = dup2(r1, r1) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18}, 0x18) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000440)={0xa, ""/10}) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18}, 0x20) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000280)=""/158) fchmod(r4, 0x4) 07:48:46 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000001040)="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", 0x281) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x37, &(0x7f0000000240), &(0x7f0000000280)=0xc) 07:48:46 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/104, 0x273}, {&(0x7f0000000500)=""/89, 0x59}], 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 07:48:46 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000000)) 07:48:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653") fcntl$setstatus(r0, 0x4, 0x5ffe) pread64(r0, &(0x7f0000002000)=""/4096, 0x1000, 0x80000000) 07:48:46 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/104, 0x273}, {&(0x7f0000000500)=""/89, 0x59}], 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) [ 1364.763322] Subscription rejected, illegal request 07:48:46 executing program 3: clone(0x0, &(0x7f0000000000), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000000)) prctl$intptr(0x24, 0x9) prctl$intptr(0x24, 0xf90) [ 1364.819321] Subscription rejected, illegal request 07:48:46 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000180)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) sendmmsg$alg(r1, &(0x7f0000004240)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001440)="bb", 0x1}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000006280)=[{{&(0x7f0000000380)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000000740)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1, &(0x7f0000000880)=""/154, 0x9a}}], 0x1, 0x0, 0x0) 07:48:46 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f0000000000)={{&(0x7f0000863000/0x3000)=nil, 0x8150000}, 0x200000}) 07:48:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netstat\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) [ 1365.024682] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1365.035743] syz-executor4 cpuset=/ mems_allowed=0 [ 1365.040691] CPU: 0 PID: 15107 Comm: syz-executor4 Not tainted 4.18.0-rc7+ #76 [ 1365.047969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.057347] Call Trace: [ 1365.059947] dump_stack+0x1c9/0x2b4 [ 1365.063585] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1365.068785] ? trace_hardirqs_on+0x10/0x10 [ 1365.073033] dump_header+0x27b/0xf64 [ 1365.076770] ? pagefault_out_of_memory+0x197/0x197 [ 1365.081716] ? __lock_acquire+0x7fc/0x5020 [ 1365.085970] ? print_usage_bug+0xc0/0xc0 [ 1365.090049] ? graph_lock+0x170/0x170 [ 1365.093874] ? print_usage_bug+0xc0/0xc0 [ 1365.097950] ? trace_hardirqs_on+0x10/0x10 [ 1365.102204] ? print_usage_bug+0xc0/0xc0 [ 1365.106289] ? lock_downgrade+0x8f0/0x8f0 [ 1365.110457] ? mark_held_locks+0xc9/0x160 [ 1365.114610] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1365.119200] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1365.124310] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1365.129319] ? trace_hardirqs_on+0xd/0x10 [ 1365.133457] ? ___ratelimit+0xaa/0x655 [ 1365.137343] ? idr_get_free+0x10c0/0x10c0 [ 1365.141502] ? kasan_check_write+0x14/0x20 [ 1365.145734] ? do_raw_spin_lock+0xc1/0x200 [ 1365.149968] oom_kill_process.cold.25+0x10/0x10bc [ 1365.154804] ? oom_evaluate_task+0x540/0x540 [ 1365.159201] ? find_held_lock+0x36/0x1c0 [ 1365.163267] ? lock_downgrade+0x8f0/0x8f0 [ 1365.167426] ? kasan_check_read+0x11/0x20 [ 1365.171561] ? rcu_is_watching+0x8c/0x150 [ 1365.175703] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1365.180099] ? oom_badness+0xb00/0xb00 [ 1365.183988] ? rcu_read_unlock+0x35/0x70 [ 1365.188054] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1365.192285] ? css_task_iter_end+0x2ce/0x490 [ 1365.196679] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1365.201426] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1365.206434] ? trace_hardirqs_on+0xd/0x10 [ 1365.210570] ? _raw_spin_unlock_irq+0x27/0x70 [ 1365.215062] ? oom_badness+0xb00/0xb00 [ 1365.218954] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1365.223706] ? mem_cgroup_iter_break+0x30/0x30 [ 1365.228282] out_of_memory+0xa8a/0x14d0 [ 1365.232257] ? oom_killer_disable+0x3a0/0x3a0 [ 1365.236763] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1365.241779] ? trace_hardirqs_on+0xd/0x10 [ 1365.245938] mem_cgroup_out_of_memory+0x15e/0x210 [ 1365.250773] ? memcg_memory_event+0x40/0x40 [ 1365.255088] ? _raw_spin_unlock+0x22/0x30 [ 1365.259238] mem_cgroup_oom_synchronize+0x713/0x940 [ 1365.264251] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1365.269712] ? memcg_event_wake+0x450/0x450 [ 1365.274048] pagefault_out_of_memory+0xc8/0x197 [ 1365.278729] ? out_of_memory+0x14d0/0x14d0 [ 1365.282963] ? __handle_mm_fault+0x4460/0x4460 [ 1365.287542] mm_fault_error+0x1de/0x380 [ 1365.291517] __do_page_fault+0xd25/0xe50 [ 1365.295568] ? mm_fault_error+0x380/0x380 [ 1365.299704] ? __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1365.304369] do_page_fault+0xf6/0x8c0 [ 1365.308168] ? vmalloc_sync_all+0x30/0x30 [ 1365.312307] ? do_syscall_64+0x820/0x820 [ 1365.316354] ? syscall_return_slowpath+0x31d/0x5e0 [ 1365.321293] ? sysret32_from_system_call+0x5/0x46 [ 1365.326134] ? page_fault+0x8/0x30 [ 1365.329683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1365.334537] ? page_fault+0x8/0x30 [ 1365.338087] page_fault+0x1e/0x30 [ 1365.341541] RIP: 0023:0x809403c [ 1365.344824] Code: 8d b4 26 00 00 00 00 8d bc 27 00 00 00 00 55 57 56 53 81 ec cc 20 00 00 8b 58 68 85 db 0f 85 2b 01 00 00 c7 40 68 ff ff ff ff <89> 84 24 b0 00 00 00 89 c3 8d 84 24 c0 00 00 00 c7 84 24 80 00 00 [ 1365.364148] RSP: 002b:000000000845d720 EFLAGS: 00010246 [ 1365.369528] RAX: 0000000008120dc0 RBX: 00000000ffffffff RCX: 000000000845fd24 [ 1365.376813] RDX: 00000000080d6e23 RSI: 00000000ffffffff RDI: 0000000009c54900 [ 1365.384091] RBP: 000000000845fcc8 R08: 0000000000000000 R09: 0000000000000000 [ 1365.391374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1365.398653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1365.406314] Task in /ile0 killed as a result of limit of /ile0 [ 1365.412389] memory: usage 120kB, limit 0kB, failcnt 597 [ 1365.417803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 07:48:47 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0}) ppoll(&(0x7f0000000440)=[{r0}], 0x1, &(0x7f00000004c0)={r1}, &(0x7f0000000500), 0x8) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90}, 0x90) 07:48:47 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000004000000000000000200f30000000000", 0x14, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 07:48:47 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/104, 0x273}, {&(0x7f0000000500)=""/89, 0x59}], 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 07:48:47 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)=""/162, 0xfffffc7f) read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0xfffffffffffffecb) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x3}]]}}}]}, 0x3c}}, 0x0) 07:48:47 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r0, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x81, 0x6}, {}, @control}], 0x1c) 07:48:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@mpls_getnetconf={0x1c, 0x52, 0x403, 0x0, 0x0, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}}, 0x0) 07:48:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, 0x14) [ 1365.424594] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1365.430766] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1365.450642] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 1365.459478] [15107] 0 15107 17527 8728 110592 0 0 syz-executor4 07:48:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP={0x8, 0x16, @typed={0x4, 0x0, @binary}}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x200000000) [ 1365.468405] Memory cgroup out of memory: Kill process 15107 (syz-executor4) score 8755000 or sacrifice child [ 1365.478442] Killed process 15107 (syz-executor4) total-vm:70108kB, anon-rss:2144kB, file-rss:32768kB, shmem-rss:0kB [ 1365.516238] netlink: 'syz-executor7': attribute type 15 has an invalid length. 07:48:47 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="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", 0xfc) 07:48:47 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r0, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x81, 0x6}, {}, @control}], 0x1c) [ 1365.544575] netlink: 'syz-executor7': attribute type 15 has an invalid length. 07:48:47 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000007ffe) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1}, 0x8) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000180)=0x80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast1}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000600)={0x0, @broadcast, @rand_addr}, &(0x7f0000000640)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@ipv4={[], [], @local}}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000780)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000900)={0x0, @local}, &(0x7f0000000940)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000ec0)={{{@in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000fc0)=0xe8) getsockname$packet(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001040)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007a00)={'team0\x00'}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000007b00)={@empty, @rand_addr}, &(0x7f0000007b40)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000007b80)={@empty, @broadcast}, &(0x7f0000007bc0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000008300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000082c0)={&(0x7f0000007ec0)=ANY=[@ANYBLOB="a4170d00", @ANYBLOB="bc0002004000"], 0x2}}, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, 0x1c) add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) close(r2) 07:48:47 executing program 7: creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d812171c412624f0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000227f74)=""/140, 0x2) 07:48:47 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r0, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x81, 0x6}, {}, @control}], 0x1c) [ 1365.623985] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 1365.631636] netlink: 188 bytes leftover after parsing attributes in process `syz-executor6'. 07:48:47 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) [ 1365.724653] netlink: 'syz-executor6': attribute type 29 has an invalid length. [ 1365.732258] netlink: 188 bytes leftover after parsing attributes in process `syz-executor6'. 07:48:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0xfff}}], 0x0, 0x0, &(0x7f0000000440)}) 07:48:47 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc08c5102, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) [ 1365.808627] oom_reaper: reaped process 15107 (syz-executor4), now anon-rss:0kB, file-rss:32092kB, shmem-rss:0kB [ 1365.889992] binder: 15176:15177 got transaction with unaligned buffers size, 4095 [ 1365.897853] binder: 15176:15177 transaction failed 29201/-22, size 0-0 line 3012 [ 1365.906781] binder_alloc: binder_alloc_mmap_handler: 15176 20001000-20004000 already mapped failed -16 [ 1365.916604] binder: BINDER_SET_CONTEXT_MGR already set [ 1365.922161] binder_alloc: 15176: binder_alloc_buf, no vma [ 1365.922337] binder: 15176:15177 ioctl 40046207 0 returned -16 [ 1365.927867] binder: 15176:15178 transaction failed 29189/-3, size 0-0 line 2967 [ 1365.941763] binder: undelivered TRANSACTION_ERROR: 29189 [ 1365.947412] binder: undelivered TRANSACTION_ERROR: 29201 07:48:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0xfffffffffffffe4f}) 07:48:48 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5, 0x1, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x7) 07:48:48 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) write$sndseq(r0, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x81, 0x6}, {}, @control}], 0x1c) 07:48:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0006000000010000000200000800005d14dfb51571a4", 0x39}], 0x1) 07:48:48 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc08c5102, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) 07:48:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 07:48:48 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000080)="01000000000000001804000007ff01000000000000d849832f") 07:48:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000000)=@ethtool_cmd={0x15}}) 07:48:48 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc08c5102, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) 07:48:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 07:48:48 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097", 0x21) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4040ae9e, &(0x7f0000000000)={0x383}) 07:48:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000100)) 07:48:48 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000fffffffe) io_setup(0x8, &(0x7f00000009c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000980)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)}]) 07:48:48 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x56, 0x0) lseek(r1, 0x4, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 07:48:48 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc08c5102, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) 07:48:48 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x80ffffff, 0x0, @in6}]}, 0x38}}, 0x0) 07:48:48 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000002d80)=""/112, 0x70) 07:48:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46000) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4013, r0, 0x0) 07:48:48 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000421000)={0xfffffffffffffffd}, 0x8) r1 = dup(r0) r2 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) tkill(r2, 0x16) 07:48:48 executing program 4: clock_gettime(0xfffffffffffffff7, &(0x7f0000000040)) 07:48:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) 07:48:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000040)={0x13000000}) 07:48:48 executing program 6: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18}, 0x18) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000300)=""/215, 0xd7}], 0x1) 07:48:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time={0x0, 0x1c9c380}}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x402c5342, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000240)) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 07:48:48 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x1a}]}, 0x18}}, 0x0) 07:48:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000300)="040105000500000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2}, 0x1c) read(r0, &(0x7f00000001c0)=""/35, 0x23) 07:48:49 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x10000001, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = gettid() syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) tkill(r1, 0x7) 07:48:49 executing program 6: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2717, &(0x7f0000000000)=""/13, &(0x7f0000000080)=0xd) 07:48:49 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 07:48:49 executing program 3: unshare(0x40000000) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 07:48:49 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x48, &(0x7f0000000080)="5c9be781", 0x4) 07:48:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x7ff}]}, 0x28}}, 0x0) 07:48:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x6f5fd75f20485281) [ 1367.053946] IPVS: ftp: loaded support on port[0] = 21 [ 1367.099558] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1367.110545] syz-executor5 cpuset=/ mems_allowed=0 [ 1367.115497] CPU: 0 PID: 15258 Comm: syz-executor5 Not tainted 4.18.0-rc7+ #76 [ 1367.122776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1367.132130] Call Trace: [ 1367.134734] dump_stack+0x1c9/0x2b4 [ 1367.138376] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1367.143576] ? trace_hardirqs_on+0x10/0x10 07:48:49 executing program 7: r0 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0xffffffff00000010) 07:48:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x2e3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) [ 1367.147817] dump_header+0x27b/0xf64 [ 1367.151548] ? pagefault_out_of_memory+0x197/0x197 [ 1367.156487] ? __lock_acquire+0x7fc/0x5020 [ 1367.160730] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1367.165149] ? print_usage_bug+0xc0/0xc0 [ 1367.169235] ? graph_lock+0x170/0x170 [ 1367.173036] ? print_usage_bug+0xc0/0xc0 [ 1367.177107] ? trace_hardirqs_on+0x10/0x10 [ 1367.181354] ? print_usage_bug+0xc0/0xc0 [ 1367.185427] ? lock_downgrade+0x8f0/0x8f0 [ 1367.189587] ? mark_held_locks+0xc9/0x160 [ 1367.193748] ? do_raw_spin_trylock+0x1c0/0x1c0 07:48:49 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)="372b86a4fba2b838da5bf0cef2e1e45e08a1e6df9e00d8febd3fe69335457c603c08e742467c2f95c1185204b0246ceb3d8183a6659fdc20ecdd9c0f603b98702dd54c915f8eb6960ade8758c3744966ae51894d98f448267e774f438a147bf87c", &(0x7f0000000140), 0x61}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) [ 1367.198338] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1367.203447] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1367.208468] ? trace_hardirqs_on+0xd/0x10 [ 1367.212622] ? ___ratelimit+0xaa/0x655 [ 1367.216517] ? idr_get_free+0x10c0/0x10c0 [ 1367.220678] ? kasan_check_write+0x14/0x20 [ 1367.224913] ? do_raw_spin_lock+0xc1/0x200 [ 1367.229156] oom_kill_process.cold.25+0x10/0x10bc [ 1367.234014] ? oom_evaluate_task+0x540/0x540 [ 1367.238430] ? find_held_lock+0x36/0x1c0 [ 1367.242503] ? lock_downgrade+0x8f0/0x8f0 07:48:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') writev(r0, &(0x7f00000011c0)=[{&(0x7f00000010c0)="11", 0x1}], 0x1) [ 1367.246661] ? kasan_check_read+0x11/0x20 [ 1367.250821] ? rcu_is_watching+0x8c/0x150 [ 1367.254975] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1367.259390] ? oom_badness+0xb00/0xb00 [ 1367.263288] ? rcu_read_unlock+0x35/0x70 [ 1367.267351] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1367.271590] ? css_task_iter_end+0x2ce/0x490 [ 1367.276002] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1367.280765] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1367.285789] ? trace_hardirqs_on+0xd/0x10 [ 1367.289940] ? _raw_spin_unlock_irq+0x27/0x70 [ 1367.294439] ? oom_badness+0xb00/0xb00 [ 1367.298332] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1367.303092] ? mem_cgroup_iter_break+0x30/0x30 [ 1367.307700] out_of_memory+0xa8a/0x14d0 [ 1367.311705] ? oom_killer_disable+0x3a0/0x3a0 [ 1367.316211] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1367.321238] ? trace_hardirqs_on+0xd/0x10 [ 1367.325401] mem_cgroup_out_of_memory+0x15e/0x210 [ 1367.330256] ? memcg_memory_event+0x40/0x40 [ 1367.334582] ? _raw_spin_unlock+0x22/0x30 [ 1367.338724] mem_cgroup_oom_synchronize+0x713/0x940 [ 1367.343732] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1367.349171] ? memcg_event_wake+0x450/0x450 [ 1367.353492] pagefault_out_of_memory+0xc8/0x197 [ 1367.358145] ? out_of_memory+0x14d0/0x14d0 [ 1367.362370] ? __handle_mm_fault+0x4460/0x4460 [ 1367.366941] mm_fault_error+0x1de/0x380 [ 1367.370906] __do_page_fault+0xd25/0xe50 [ 1367.374956] ? mm_fault_error+0x380/0x380 [ 1367.379088] ? __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1367.383745] do_page_fault+0xf6/0x8c0 [ 1367.387531] ? vmalloc_sync_all+0x30/0x30 [ 1367.391671] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1367.396412] ? do_syscall_64+0x820/0x820 [ 1367.400461] ? syscall_return_slowpath+0x31d/0x5e0 [ 1367.405381] ? sysret32_from_system_call+0x5/0x46 [ 1367.410206] ? page_fault+0x8/0x30 [ 1367.413730] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1367.418558] ? page_fault+0x8/0x30 [ 1367.422082] page_fault+0x1e/0x30 [ 1367.425520] RIP: 0023:0x8052a62 [ 1367.428775] Code: 00 83 c4 20 83 f8 ff 89 45 b0 0f 84 86 01 00 00 8b 45 b0 85 c0 0f 84 bb 04 00 00 8b 4d b0 8b 7d a8 8d 84 39 40 fb ff ff 89 c6 <89> 88 70 02 00 00 89 b8 74 02 00 00 89 45 b4 05 8c 00 00 00 c7 46 07:48:49 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) write$evdev(r0, &(0x7f0000000280)=[{{}, 0x1, 0x45, 0x2}, {}], 0x30) [ 1367.448001] RSP: 002b:000000000845fca0 EFLAGS: 00010286 [ 1367.453358] RAX: 00000000f5ee3b40 RBX: 0000000000020000 RCX: 00000000f5ec3000 [ 1367.460610] RDX: 0000000000000003 RSI: 00000000f5ee3b40 RDI: 0000000000021000 [ 1367.467870] RBP: 000000000845fd18 R08: 0000000000000000 R09: 0000000000000000 [ 1367.475122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1367.482376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1367.489859] Task in /ile0 killed as a result of limit of /ile0 [ 1367.495896] memory: usage 120kB, limit 0kB, failcnt 605 [ 1367.501303] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1367.508079] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1367.514260] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1367.534120] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 1367.542960] [15258] 0 15258 17659 8728 110592 0 0 syz-executor5 07:48:49 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0/file0\x00', 0x8) [ 1367.551879] Memory cgroup out of memory: Kill process 15258 (syz-executor5) score 8755000 or sacrifice child [ 1367.561935] Killed process 15258 (syz-executor5) total-vm:70636kB, anon-rss:2144kB, file-rss:32768kB, shmem-rss:0kB [ 1367.584456] IPVS: ftp: loaded support on port[0] = 21 07:48:49 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 07:48:49 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) close(r0) 07:48:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ec0)=ANY=[@ANYBLOB="6e61740018ab412ede88fcac14c3ceda000000000000000000000000000000000000000000000000000000001b00000005000000bcffffff9801000064020000cc0000006402000064020000300300003003000030"], 0x1) 07:48:49 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) write$evdev(r0, &(0x7f0000000280)=[{{}, 0x1, 0x45, 0x2}, {}], 0x30) 07:48:49 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r0, 0x8942, &(0x7f0000000000)) 07:48:49 executing program 2: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000200)}}, {{&(0x7f0000000280)=@nfc={0x1e}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 07:48:49 executing program 3: socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="500a000090780000"], &(0x7f00000002c0)) 07:48:49 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000080)='sockfs\x00', 0x0, &(0x7f0000000100)) 07:48:49 executing program 7: socket$inet_tcp(0x2, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x8000400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 07:48:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x80000000}, &(0x7f00000003c0)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0x20, 0x29, 0x2, "4bc333b8595a865187089d9bd700000004"}], 0x20}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x200}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={r1}, &(0x7f00000002c0)=0x14) keyctl$unlink(0x9, 0x0, 0x0) 07:48:50 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) write$evdev(r0, &(0x7f0000000280)=[{{}, 0x1, 0x45, 0x2}, {}], 0x30) 07:48:50 executing program 4: r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000000)="2400000058001f02ff07f4f9002304000a04f511080001000201009f0800028001000000", 0x24) 07:48:50 executing program 3: socketpair(0x18, 0x0, 0x2, &(0x7f0000000200)) 07:48:50 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote, @dev, @rand_addr=0xe0000000}}}}, &(0x7f0000000100)) 07:48:50 executing program 1: r0 = socket(0x10, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@generic={0x10, "aee9e146111e04e2df2ea3d8791ecfb98e9e36c45d8cbd4c8943a5a9e6e2f8cbd5c10363460b2cf870c4f7dd9d44b39c9a038b1de1af25618e2d40ba593707ad6f0947288f3cde5289b4751e097eeeb4d7e29d92b1b8b1703dcde61365a4ab48fe6c7692d010d5781c43f8c5985f8dcc30651cf93018bcf66bb383b01d2d"}, 0x80) getpeername$packet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x14) 07:48:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004000000000010000000000000025000000ffffffff00040000000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000860100000000000000305afa76"]) 07:48:50 executing program 3: socketpair(0x18, 0x0, 0x2, &(0x7f0000000200)) 07:48:50 executing program 7: r0 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 07:48:50 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000000500)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}}) 07:48:50 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021) write$evdev(r0, &(0x7f0000000280)=[{{}, 0x1, 0x45, 0x2}, {}], 0x30) 07:48:50 executing program 0: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 07:48:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00004ee64e)}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000440)}) 07:48:50 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="ba0200000000000000e99f7b", 0xc}], 0x1, &(0x7f0000000100)}, 0x0) [ 1368.219936] kvm [15380]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x76fa5a3000 07:48:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x800, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4}}}, 0x90) 07:48:50 executing program 3: socketpair(0x18, 0x0, 0x2, &(0x7f0000000200)) 07:48:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil}) preadv(r0, &(0x7f0000000040), 0x10000000000000a6, 0x0) [ 1368.278541] binder: 15398:15400 got new transaction with bad transaction stack, transaction 532 has target 15398:0 [ 1368.289248] binder: 15398:15400 transaction failed 29201/-71, size 0-0 line 2879 07:48:50 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') setns(r0, 0x0) 07:48:50 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r0, r1, 0x0) 07:48:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) write(r1, &(0x7f0000000300)="01500a08", 0x4) [ 1368.449375] binder: BINDER_SET_CONTEXT_MGR already set [ 1368.463336] binder_alloc: 15398: binder_alloc_buf, no vma [ 1368.469223] binder: 15398:15425 transaction failed 29189/-3, size 0-0 line 2967 [ 1368.491578] binder_alloc: 15398: binder_alloc_buf, no vma 07:48:50 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 07:48:50 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, r1}}, 0x24}}, 0x0) 07:48:50 executing program 3: socketpair(0x18, 0x0, 0x2, &(0x7f0000000200)) [ 1368.496312] binder: 15398:15421 ioctl 40046207 0 returned -16 [ 1368.497299] binder: 15398:15429 transaction failed 29189/-3, size 0-0 line 2967 [ 1368.507483] binder: send failed reply for transaction 532 to 15398:15400 07:48:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x800, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4}}}, 0x90) 07:48:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000021, 0xc0000081]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:50 executing program 6: unshare(0x2000400) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) [ 1368.566428] binder: undelivered TRANSACTION_COMPLETE [ 1368.571708] binder: undelivered TRANSACTION_ERROR: 29201 [ 1368.577209] binder: undelivered TRANSACTION_ERROR: 29189 07:48:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) close(r0) fsync(r1) 07:48:50 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) recvmsg$kcm(r0, &(0x7f00000018c0)={&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x2, &(0x7f0000000040)=""/45, 0x2d}, 0x0) write(r0, &(0x7f00000000c0)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c26485a3d5728", 0x22) [ 1368.678359] binder: undelivered TRANSACTION_ERROR: 29189 [ 1368.684011] binder: undelivered TRANSACTION_ERROR: 29189 07:48:50 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b40)={&(0x7f0000000000), 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)=@ipv6_newroute={0x1c, 0x18, 0xb03, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0x1c}}, 0x0) 07:48:50 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f0000000000), 0x4) 07:48:50 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x2}, 0x10) 07:48:50 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffff8, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) 07:48:51 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000028c0)={r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002940)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000002a80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x91}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0x88, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1d}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@dev}}, 0xe8) close(r4) close(r4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380), &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140), 0x8) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000013c0), &(0x7f0000000180)=0xb0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=@dstopts, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'sit0\x00', {0x2, 0x0, @remote}}) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) listen(r6, 0x0) 07:48:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') ioctl$fiemap(r0, 0xc0189436, &(0x7f0000000180)) 07:48:51 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003040)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000023c0)=[{&(0x7f0000002040), 0x10, &(0x7f0000002280)=[{&(0x7f0000002080)="18a4453ce50d09fcea8f9a93650072119691e661465e22718debf55c4924ff", 0x1f}, {&(0x7f0000002140)="28391478339504c6778411151a5aaae202f1702df2517c0cc8d68892e3a614eb2617ea1216f619f0de27bc745feb3a31bd361c7cfc3f030ef95decba4fd1556b3c96db3e420960f87c7a3f12a76b28b6dd156527fd9b6694137d6d9654e0af45c0f4641a92c710d753b619a32cd8961f842273ba25a82652773e11083fb2f55588bc69c9c1876d3eb5c8d80507cdbf87c393095ec159c0cb0cd300b9f3cc7ce8d095606ed021141c01bc15242666af3b89235773f7a275c3d38651b48c9c8f985981750526a322261940634f1874e750f1827c93f92982ad764ad3", 0xdb}], 0x2, &(0x7f0000002340)=[@sndrcv={0x2c, 0x84, 0x1, {0x8, 0x0, 0x206, 0x46, 0x1, 0x400, 0x401, 0x100000000}}, @init={0x14, 0x84, 0x0, {0x6, 0x1, 0x8, 0x1}}, @dstaddrv6={0x1c, 0x84, 0x8, @loopback}], 0x5c, 0xc801}], 0x1, 0x10) 07:48:51 executing program 7: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4000000031, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000400)) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000200)) 07:48:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}, 0x11, 0xf}], 0x18) 07:48:51 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100ffe, 0x0) 07:48:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x800, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4}}}, 0x90) 07:48:51 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000028c0)={r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002940)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000002a80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x91}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0x88, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1d}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@dev}}, 0xe8) close(r4) close(r4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380), &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140), 0x8) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000013c0), &(0x7f0000000180)=0xb0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=@dstopts, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'sit0\x00', {0x2, 0x0, @remote}}) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) listen(r6, 0x0) 07:48:51 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x9) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) sendmsg$rds(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x4e23}, 0x10, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x10}, 0x10) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x200000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000080), 0x2, r2, 0x1}) 07:48:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r0) 07:48:51 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) 07:48:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000280), 0x4) r1 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 07:48:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@loopback, @local, @loopback, 0x0, 0x0, 0x0, 0x0, 0x100000014}) 07:48:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x800, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4}}}, 0x90) 07:48:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r0) 07:48:52 executing program 3: prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 07:48:52 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000028c0)={r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002940)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000002a80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x91}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0x88, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1d}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@dev}}, 0xe8) close(r4) close(r4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380), &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140), 0x8) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000013c0), &(0x7f0000000180)=0xb0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=@dstopts, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'sit0\x00', {0x2, 0x0, @remote}}) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) listen(r6, 0x0) 07:48:52 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) 07:48:52 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x9) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) sendmsg$rds(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x4e23}, 0x10, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x10}, 0x10) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x200000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000080), 0x2, r2, 0x1}) 07:48:52 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r0) 07:48:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local, @multicast2}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000000040)=0x163) 07:48:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x28, 0x6}, 0x28) 07:48:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004000000000010000000000000025000000ffffffff00040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x38f}]}) 07:48:52 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r0) 07:48:52 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x9) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) sendmsg$rds(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x4e23}, 0x10, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x10}, 0x10) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x200000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000080), 0x2, r2, 0x1}) 07:48:52 executing program 5: setrlimit(0x9, &(0x7f0000000180)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 07:48:52 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) 07:48:52 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000028c0)={r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002940)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000002a80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x91}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0x88, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1d}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@dev}}, 0xe8) close(r4) close(r4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000380), &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140), 0x8) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000013c0), &(0x7f0000000180)=0xb0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=@dstopts, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'sit0\x00', {0x2, 0x0, @remote}}) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) listen(r6, 0x0) 07:48:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f000039a000)={0x5, 0x100, 0x100, 0xffffffffffffffff}, 0x2c) 07:48:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000100), 0xfffffffffffffffb, 0x2000000c, &(0x7f0000001680)={0xa, 0x4e20}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000dafff7)='net/tcp6\x00') sendfile(r0, r2, &(0x7f0000000040)=0xc000000, 0x1000000400000ff) 07:48:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x1}, [@typed={0x8, 0x2, @pid}]}, 0x1c}}, 0x0) [ 1370.595910] audit: type=1326 audit(1533196132.718:261): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15562 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74cb9 code=0xffff0000 07:48:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='+', 0x1}], 0x1, &(0x7f0000000140)}, 0xc100) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000840)="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", 0xbd0}], 0x1) close(0xffffffffffffffff) 07:48:52 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x9) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x4000) sendmsg$rds(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x4e23}, 0x10, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x10}, 0x10) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x200000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000080), 0x2, r2, 0x1}) 07:48:52 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) 07:48:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) fchown(r0, r1, r2) 07:48:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 07:48:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="67ff3d"], 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:52 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 07:48:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x4, 0x6, 0xffffffffffffffff}, 0x14}}, 0x0) 07:48:52 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc25c4110, &(0x7f0000000040)="02ef390676a2b8991ade3aec1e00000300000038e457aa4142c253ba3efe2536bfe1247f7f5ce64c3d2c01e58095920a7e5d05010d8cb328b9ebb980b69d2c0aa7a90300008f9255b6004dcc69a60408f80880a11056a38e795a849c165e90c2f163912960090a3fcb30137e71a7f5c24e4e0c3e040fd6547fd4df76c49a9be885e579d5424a999cf68a6c35db7990921dad5ba2bf0c4a8577d7f1cbae49c0ea6943403084b439b69959124d5bfe919c46964f4cd0672cdbe753e52cd4988cae762500e00cf0f56d5a2fa12cd1c93498899e45d33b3f07e65fe9fc29bd9f1b468f2a173b2ae195b9e9746b4095a17e3f17be5ef7e9896801000000987ee6c4a183bbdd60a8502c667ccb11b0d7ea05869abb0a76c72155b2389d452ea4b683b60193") 07:48:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0x40, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="8d56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) sendto$packet(r1, &(0x7f0000000300)="63b37a98ae586aea328609076bd19aff41372f34e2eef7d991adc88a37cb1f4a", 0x20, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)=""/193, 0xc1}], 0x1, &(0x7f0000000780)=""/159, 0x9f}}], 0x1, 0x0, &(0x7f0000001d00)={0x77359400}) 07:48:52 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000005480)="e180db4e3b23cdde4c4bca5351a6904cf9b043d46ee6610d0c6ab50da7d7a8b14a0ce29f33598307f5b1b9e233e646f4", 0x30) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) recvmmsg(r1, &(0x7f0000006480)=[{{&(0x7f0000001b40)=@generic, 0x80, &(0x7f0000001c80)=[{&(0x7f0000003140)=""/138, 0x8a}], 0x1, &(0x7f0000003200)=""/207, 0xcf}}, {{&(0x7f0000003300)=@nfc_llcp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000006540)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/81, 0x51}}], 0x2, 0x0, &(0x7f0000001d00)={0x77359400}) 07:48:52 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f48"], 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x37, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000001bc0)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001980)}]) 07:48:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000080)=[{}], 0x49, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000200), 0x8) 07:48:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x204}], 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f00000001c0), 0x8) dup3(r1, r0, 0x0) 07:48:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x8) 07:48:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xb9, &(0x7f0000000040)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x0, 0x0, @empty, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000775000)) 07:48:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0xc018ae85, &(0x7f0000000100)) 07:48:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local}, 0xfdf7) 07:48:53 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc202}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) close(r0) 07:48:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newrule={0x34, 0x20, 0x3, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @local}]}, 0x34}}, 0x0) 07:48:53 executing program 6: r0 = socket(0xa, 0x802, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bind$bt_rfcomm(r0, &(0x7f0000000100), 0xa) 07:48:53 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0x40045402, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x2, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) close(r0) 07:48:53 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendfile(r0, r0, &(0x7f00000006c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0x100005) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000001e00000"], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="187d6acf46ffc57e6102bf49483f298f035ae70438e91e71") setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f0000000180)=@dstopts, 0x7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, &(0x7f0000000580)=0x98) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e21, 0x8, @local}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340), &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000480), 0x1) setxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)=ANY=[], &(0x7f0000000600)='md5sum\x00', 0x7, 0x0) r5 = accept4$inet(r2, &(0x7f0000000040)={0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000004c0)={0x101ff, 0x0, &(0x7f0000ffa000/0x4000)=nil}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0x2, {0x0, @local}}, 0x1e) setsockopt(r3, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={&(0x7f0000000500), 0xc, &(0x7f0000000700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002c00010000006c0000006b5c5ab0"], 0x1}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) splice(r0, &(0x7f0000000640), r2, &(0x7f0000000680), 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000c00)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 07:48:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 07:48:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendto$unix(r1, &(0x7f0000000000), 0xfffffffffffffdd6, 0xffffffffffffffff, 0x0, 0xffffffffffffff37) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/62, 0x2000017e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000440)=""/33, 0x21}], 0x3, &(0x7f0000000700)=""/244, 0xf4}, 0x0) 07:48:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x201, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}}, 0x0) 07:48:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x200000002, 0x1d8, 0x2, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 07:48:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000001c0), 0x4) 07:48:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) [ 1371.485434] netlink: 'syz-executor7': attribute type 2 has an invalid length. [ 1371.536475] netlink: 'syz-executor7': attribute type 2 has an invalid length. 07:48:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x200000002, 0x1d8, 0x2, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 07:48:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000001c0), 0x4) [ 1371.594509] IPVS: ftp: loaded support on port[0] = 21 07:48:53 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b2fcbf4042d1", 0x4c}], 0x1}, 0x0) 07:48:53 executing program 5: unshare(0xc000000) mq_open(&(0x7f000084dff0)='.)\x00', 0x8c2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) 07:48:53 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2717, &(0x7f0000000000)=""/13, &(0x7f0000000080)=0xd) 07:48:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendto$unix(r1, &(0x7f0000000000), 0xfffffffffffffdd6, 0xffffffffffffffff, 0x0, 0xffffffffffffff37) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/62, 0x2000017e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000440)=""/33, 0x21}], 0x3, &(0x7f0000000700)=""/244, 0xf4}, 0x0) [ 1371.726790] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 07:48:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4) 07:48:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x200000002, 0x1d8, 0x2, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 07:48:53 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x22, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}], 0x10) 07:48:54 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendfile(r0, r0, &(0x7f00000006c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0x100005) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000001e00000"], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="187d6acf46ffc57e6102bf49483f298f035ae70438e91e71") setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f0000000180)=@dstopts, 0x7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, &(0x7f0000000580)=0x98) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e21, 0x8, @local}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340), &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000480), 0x1) setxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)=ANY=[], &(0x7f0000000600)='md5sum\x00', 0x7, 0x0) r5 = accept4$inet(r2, &(0x7f0000000040)={0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000004c0)={0x101ff, 0x0, &(0x7f0000ffa000/0x4000)=nil}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0x2, {0x0, @local}}, 0x1e) setsockopt(r3, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={&(0x7f0000000500), 0xc, &(0x7f0000000700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002c00010000006c0000006b5c5ab0"], 0x1}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) splice(r0, &(0x7f0000000640), r2, &(0x7f0000000680), 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000c00)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 07:48:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000001c0), 0x4) 07:48:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x200000002, 0x1d8, 0x2, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 07:48:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendto$unix(r1, &(0x7f0000000000), 0xfffffffffffffdd6, 0xffffffffffffffff, 0x0, 0xffffffffffffff37) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/62, 0x2000017e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000440)=""/33, 0x21}], 0x3, &(0x7f0000000700)=""/244, 0xf4}, 0x0) 07:48:54 executing program 7: futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000000ff8), &(0x7f0000000ffc), 0x40000000) 07:48:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 07:48:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 07:48:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x1d}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x47f]}) 07:48:54 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 07:48:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) [ 1372.416173] IPVS: ftp: loaded support on port[0] = 21 07:48:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000001c0), 0x4) 07:48:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendto$unix(r1, &(0x7f0000000000), 0xfffffffffffffdd6, 0xffffffffffffffff, 0x0, 0xffffffffffffff37) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@pppoe, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/62, 0x2000017e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000440)=""/33, 0x21}], 0x3, &(0x7f0000000700)=""/244, 0xf4}, 0x0) 07:48:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000000)={0x20000000000042, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x104) 07:48:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x8, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 07:48:54 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x400) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{}, 0x2000}) recvfrom(r0, &(0x7f0000000040)=""/4, 0x69, 0x0, 0x0, 0xfffffffffffffe92) prctl$seccomp(0x16, 0x1, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xe190, 0x5, 0x6, 0xfffffffffffffff7}, {0x100000001, 0x8, 0xfffffffffffffffd, 0x4}]}) keyctl$join(0x1, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @dev}, 0x10) getpid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000500)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe8) r4 = getgid() r5 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast2, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000780)=0xe8) getresgid(&(0x7f00000007c0)=0x0, &(0x7f0000000800), &(0x7f0000000840)) sendmsg$unix(r1, &(0x7f0000000900)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000380)="8acb83dce3c2f35dba91d5c6f3d2f187a5d8aa16f5cc626d8a67e8", 0x1b}], 0x1, &(0x7f0000000880)=[@rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r2, r3, r4}, @rights={0x24, 0x1, 0x1, [r1, r0, r0, r1, r0, r1]}, @cred={0x18, 0x1, 0x2, r5, r6, r7}], 0x64, 0x801}, 0x20040044) ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0xc799) r8 = request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)='/dev/audio#\x00', 0xfffffffffffffff9) keyctl$get_security(0x11, r8, &(0x7f0000000240)=""/130, 0x82) [ 1372.649277] IPVS: ftp: loaded support on port[0] = 21 [ 1372.651216] IPVS: ftp: loaded support on port[0] = 21 07:48:54 executing program 2: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) [ 1372.834932] audit: type=1326 audit(1533196134.957:262): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15813 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7f32cb9 code=0x0 07:48:55 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendfile(r0, r0, &(0x7f00000006c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0x100005) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000001e00000"], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="187d6acf46ffc57e6102bf49483f298f035ae70438e91e71") setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f0000000180)=@dstopts, 0x7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, &(0x7f0000000580)=0x98) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e21, 0x8, @local}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340), &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000480), 0x1) setxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)=ANY=[], &(0x7f0000000600)='md5sum\x00', 0x7, 0x0) r5 = accept4$inet(r2, &(0x7f0000000040)={0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000004c0)={0x101ff, 0x0, &(0x7f0000ffa000/0x4000)=nil}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0x2, {0x0, @local}}, 0x1e) setsockopt(r3, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={&(0x7f0000000500), 0xc, &(0x7f0000000700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002c00010000006c0000006b5c5ab0"], 0x1}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) splice(r0, &(0x7f0000000640), r2, &(0x7f0000000680), 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000c00)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 07:48:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000000)={0x20000000000042, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x104) 07:48:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x6, 0x4) 07:48:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 07:48:55 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 07:48:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) [ 1373.341233] IPVS: ftp: loaded support on port[0] = 21 07:48:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000000)={0x20000000000042, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x104) 07:48:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x400163}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18, 0xffffff85}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0xac3b42bc00d7f9cc, &(0x7f00001a7f05)=""/251}, 0x48) [ 1373.482542] IPVS: ftp: loaded support on port[0] = 21 [ 1373.491610] IPVS: ftp: loaded support on port[0] = 21 07:48:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000000)={0x20000000000042, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x104) [ 1373.611172] audit: type=1326 audit(1533196135.733:263): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15813 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=40000003 syscall=240 compat=1 ip=0xf7f32cb9 code=0x0 07:48:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 07:48:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 07:48:55 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00') write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0xffffffffffffffda, 0x2}, 0x10) 07:48:55 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) lseek(r0, 0x31, 0x0) 07:48:55 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0xf, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 07:48:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000640)=""/148, 0x94) 07:48:56 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x400000000000f, &(0x7f0000017000)=0x200002da7, 0xcc) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) listen(r1, 0x0) 07:48:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) sendfile(r0, r0, &(0x7f00000006c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0x100005) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000001e00000"], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="187d6acf46ffc57e6102bf49483f298f035ae70438e91e71") setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f0000000180)=@dstopts, 0x7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, &(0x7f0000000580)=0x98) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e21, 0x8, @local}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340), &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000480), 0x1) setxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000780)=ANY=[], &(0x7f0000000600)='md5sum\x00', 0x7, 0x0) r5 = accept4$inet(r2, &(0x7f0000000040)={0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000004c0)={0x101ff, 0x0, &(0x7f0000ffa000/0x4000)=nil}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0x2, {0x0, @local}}, 0x1e) setsockopt(r3, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={&(0x7f0000000500), 0xc, &(0x7f0000000700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002c00010000006c0000006b5c5ab0"], 0x1}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) splice(r0, &(0x7f0000000640), r2, &(0x7f0000000680), 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000c00)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 07:48:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 07:48:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4d0}]}) 07:48:56 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000280)={0x77359400}, 0x10) 07:48:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 07:48:56 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) 07:48:56 executing program 2: syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xe803, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0xf0ffff, 0x0, 0x8}}}}}, 0x0) 07:48:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) [ 1374.342441] IPVS: ftp: loaded support on port[0] = 21 [ 1374.349778] IPVS: ftp: loaded support on port[0] = 21 07:48:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000a00071008000100feffffff0800000000000000", 0x24) 07:48:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 07:48:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) close(r0) 07:48:56 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)="637075260b0900ff00") 07:48:56 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 07:48:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_bt(r1, 0x80047437, &(0x7f0000000000)) recvfrom(r1, &(0x7f0000000100)=""/79, 0x4f, 0x0, 0x0, 0x0) 07:48:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x600) 07:48:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 07:48:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(0x0, 0x0) 07:48:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0x44, 0x2, 0x28c, [0x0, 0x0, 0x200005c0], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x1, 0x0, 0x0, 'tunl0\x00', 'veth0_to_bridge\x00', 'tunl0\x00', 'rose0\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0x9c}}, @common=@mark={'mark\x00', 0x8, {{0x0, 0xfffffffffffffffe}}}}, {{{0x5, 0x0, 0x0, 'ifb0\x00', 'yam0\x00', 'team_slave_0\x00', 'sit0\x00', @empty, [], @broadcast, [], 0xc4, 0x118, 0x160, [@cgroup0={'cgroup\x00', 0x8}, @pkttype={'pkttype\x00', 0x4}]}, [@common=@AUDIT={'AUDIT\x00', 0x4}, @common=@mark={'mark\x00', 0x8, {{0x0, 0xffffffffffffffff}}}]}, @common=@log={'log\x00', 0x24, {{0x0, "00bf31456771b60ac574d84edbd08169581e22f659da2a4d6945a66badbf"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x2dc) 07:48:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x0, 0x100000000c8}) 07:48:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'irlan0\x00', {0x2, 0x0, @broadcast}}) 07:48:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x2, 0x0, [{}, {0x80000001}]}) 07:48:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000001340)={0xff, 0x2, 0x0, 0x3}, 0xffffffffffffffb2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f12f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:48:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0x50}}) 07:48:57 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 07:48:57 executing program 0: clock_gettime(0x0, &(0x7f0000000180)) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000b40), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) 07:48:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) write(r0, &(0x7f0000c34fff), 0xffffff0b) 07:48:57 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x854a, 0x101042) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x9) 07:48:57 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xffffffffffffff67) 07:48:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(0x0, 0x0) 07:48:57 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 07:48:57 executing program 1: getpriority(0x3, 0x0) 07:48:57 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000040), 0x0, &(0x7f0000000b80)=[@cred={0x18}], 0x18}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x80, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x2, 0x0) 07:48:57 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x854a, 0x101042) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x9) 07:48:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x5, 0x4) recvmsg(r1, &(0x7f00000013c0)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000001340), 0x0, &(0x7f0000001380)=""/45, 0x2d}, 0x0) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000018c0)}}], 0x1, 0x0) 07:48:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(0x0, 0x0) 07:48:57 executing program 1: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f000093afb8)='(}nodev.ppp1vboxnet1selinuxtrustedvboxnet0GPLposix_acl_access*\\\\md5sum@\x00', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}) 07:48:57 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 07:48:57 executing program 7: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="02000000010000feff0000000200f30000000000", 0x14, 0x0) [ 1375.601470] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 1375.621255] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1375.632294] syz-executor5 cpuset=/ mems_allowed=0 [ 1375.637291] CPU: 0 PID: 15979 Comm: syz-executor5 Not tainted 4.18.0-rc7+ #76 07:48:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000005) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r0, r2) 07:48:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"157bb63cf95bff4aadeeb0fc509a4670"}, 0x0, 0x81}}}, 0x90) [ 1375.644572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.653924] Call Trace: [ 1375.656524] dump_stack+0x1c9/0x2b4 [ 1375.660164] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1375.665364] ? trace_hardirqs_on+0x10/0x10 [ 1375.669612] dump_header+0x27b/0xf64 [ 1375.673342] ? pagefault_out_of_memory+0x197/0x197 [ 1375.678280] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 1375.683145] ? perf_trace_lock+0x920/0x920 [ 1375.687390] ? graph_lock+0x170/0x170 [ 1375.691197] ? print_usage_bug+0xc0/0xc0 [ 1375.695282] ? print_usage_bug+0xc0/0xc0 [ 1375.699362] ? lock_downgrade+0x8f0/0x8f0 [ 1375.703523] ? mark_held_locks+0xc9/0x160 [ 1375.707677] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1375.712265] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1375.717376] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1375.722400] ? trace_hardirqs_on+0xd/0x10 [ 1375.726558] ? ___ratelimit+0xaa/0x655 [ 1375.730451] ? idr_get_free+0x10c0/0x10c0 [ 1375.734611] ? kasan_check_write+0x14/0x20 [ 1375.738856] ? do_raw_spin_lock+0xc1/0x200 [ 1375.743105] oom_kill_process.cold.25+0x10/0x10bc [ 1375.747968] ? oom_evaluate_task+0x540/0x540 [ 1375.752393] ? find_held_lock+0x36/0x1c0 [ 1375.756477] ? lock_downgrade+0x8f0/0x8f0 [ 1375.760643] ? kasan_check_read+0x11/0x20 [ 1375.764796] ? rcu_is_watching+0x8c/0x150 [ 1375.768950] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1375.773368] ? oom_badness+0xb00/0xb00 [ 1375.777262] ? rcu_read_unlock+0x35/0x70 [ 1375.781332] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1375.785575] ? css_task_iter_end+0x2ce/0x490 [ 1375.789990] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1375.794755] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1375.799780] ? trace_hardirqs_on+0xd/0x10 [ 1375.803937] ? _raw_spin_unlock_irq+0x27/0x70 [ 1375.808442] ? oom_badness+0xb00/0xb00 [ 1375.812362] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1375.817127] ? mem_cgroup_iter_break+0x30/0x30 [ 1375.821732] out_of_memory+0xa8a/0x14d0 [ 1375.825722] ? oom_killer_disable+0x3a0/0x3a0 [ 1375.830229] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1375.835257] ? trace_hardirqs_on+0xd/0x10 [ 1375.839426] mem_cgroup_out_of_memory+0x15e/0x210 [ 1375.844279] ? memcg_memory_event+0x40/0x40 [ 1375.848605] ? _raw_spin_unlock+0x22/0x30 [ 1375.852758] mem_cgroup_oom_synchronize+0x713/0x940 [ 1375.857774] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1375.863214] ? memcg_event_wake+0x450/0x450 [ 1375.867531] pagefault_out_of_memory+0xc8/0x197 [ 1375.872186] ? out_of_memory+0x14d0/0x14d0 [ 1375.876410] ? __handle_mm_fault+0x4460/0x4460 [ 1375.880982] mm_fault_error+0x1de/0x380 [ 1375.884947] __do_page_fault+0xd25/0xe50 [ 1375.889021] ? mm_fault_error+0x380/0x380 [ 1375.893167] ? __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1375.897854] do_page_fault+0xf6/0x8c0 [ 1375.901652] ? vmalloc_sync_all+0x30/0x30 [ 1375.905790] ? do_syscall_64+0x820/0x820 [ 1375.909834] ? syscall_return_slowpath+0x31d/0x5e0 [ 1375.914751] ? sysret32_from_system_call+0x5/0x46 [ 1375.919586] ? page_fault+0x8/0x30 [ 1375.923122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1375.927947] ? page_fault+0x8/0x30 [ 1375.931473] page_fault+0x1e/0x30 [ 1375.934908] RIP: 0023:0x8052a62 [ 1375.938167] Code: 00 83 c4 20 83 f8 ff 89 45 b0 0f 84 86 01 00 00 8b 45 b0 85 c0 0f 84 bb 04 00 00 8b 4d b0 8b 7d a8 8d 84 39 40 fb ff ff 89 c6 <89> 88 70 02 00 00 89 b8 74 02 00 00 89 45 b4 05 8c 00 00 00 c7 46 [ 1375.957345] RSP: 002b:000000000845fca0 EFLAGS: 00010286 [ 1375.962701] RAX: 00000000f5f46b40 RBX: 0000000000020000 RCX: 00000000f5f26000 [ 1375.969962] RDX: 0000000000000003 RSI: 00000000f5f46b40 RDI: 0000000000021000 [ 1375.977219] RBP: 000000000845fd18 R08: 0000000000000000 R09: 0000000000000000 [ 1375.984477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1375.991733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1375.999395] Task in /ile0 killed as a result of limit of /ile0 [ 1376.005468] memory: usage 120kB, limit 0kB, failcnt 641 [ 1376.010878] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1376.017662] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1376.023854] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1376.043686] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 1376.052442] [15979] 0 15979 17560 8728 110592 0 0 syz-executor5 [ 1376.061323] Memory cgroup out of memory: Kill process 15979 (syz-executor5) score 8755000 or sacrifice child [ 1376.071338] Killed process 15979 (syz-executor5) total-vm:70240kB, anon-rss:2144kB, file-rss:32768kB, shmem-rss:0kB 07:48:58 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x200000002, 0x0) dup3(r0, r1, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) 07:48:58 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 07:48:58 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28}, 0x28) 07:48:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) 07:48:58 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x854a, 0x101042) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x9) 07:48:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000007ffe) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x1}, 0x8) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast1}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000600)={0x0, @broadcast, @rand_addr}, &(0x7f0000000640)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@ipv4={[], [], @local}}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000780)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000900)={0x0, @local}, &(0x7f0000000940)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000ec0)={{{@in6=@ipv4={[], [], @loopback}}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000fc0)=0xe8) getsockname$packet(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001040)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007a00)={'team0\x00'}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000007b00)={@empty, @rand_addr}, &(0x7f0000007b40)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000007b80)={@empty, @broadcast}, &(0x7f0000007bc0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000008300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000082c0)={&(0x7f0000007ec0)=ANY=[@ANYBLOB="a4170d00", @ANYBLOB="080029bd7000ffdbdf250100000008000100", @ANYBLOB="bc00020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400b106ffff08000600", @ANYBLOB="08000100", @ANYBLOB="f800020040240001007072696f72697479000000000000000000000000000000000000000000000000080203000e000000080004000200000008000600", @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d00003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYBLOB="08000100", @ANYBLOB="bc00020038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040005000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040009000000080007000000000008000100", @ANYBLOB="0001020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040003000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e"], 0xd}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x80000000, 0x6, @local, 0x7fffffff}, 0x1c) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, r3, r4) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) close(r1) mincore(&(0x7f0000003000/0x4000)=nil, 0x4000, &(0x7f0000001080)=""/4096) r5 = dup2(r2, r0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f00000007c0)) 07:48:58 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(0x0, 0x0) [ 1376.103936] netlink: 'syz-executor0': attribute type 5 has an invalid length. 07:48:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000), 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[]}}, 0x0) 07:48:58 executing program 6: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001040], 0x0, &(0x7f0000000700), &(0x7f00000000c0)=ANY=[@ANYRES16]}, 0x52) 07:48:58 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002640)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000480)}, &(0x7f0000000000)="204076b5d77c9abdf4713e2af5783391a95502907fa830123b91dfdeababcb5e84", &(0x7f0000001540)=""/145, 0x0, 0x0, 0x0, &(0x7f0000002600)}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 07:48:58 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000005061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:48:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x80, &(0x7f0000004100), 0x0, &(0x7f0000001ec0)=[{0x10, 0x1, 0x1, "c333edc8"}], 0x10}}], 0x2, 0x0) 07:48:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8f70000000000008000f0fffeffff090000dc2abbeabdcb9509000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:48:58 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x854a, 0x101042) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x9) 07:48:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) splice(r1, &(0x7f0000000940), r0, &(0x7f0000000980), 0x9, 0x0) 07:48:58 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) mkdir(&(0x7f0000001000)='./file0\x00', 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="aefc6002bffd94203d7dd7f918c0620c3155fb96fcc7ed209025f6adf935fd17472a051baa866128", 0x28, 0x0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f00000004c0)='rpc_pipefs\x00', 0x1000000, &(0x7f0000000280)="669993550dcec4e70e1841d7a66a0e5a2339d5740365a11862214b0bd2264d7007601febcc0ab3dff153e5e7b28756f86e8dde83c412d0f11af562e64931ea3062b3dde69d56c11707c38378dabbc27c0f0b61d29df8fddf27544f2390b2338c5d68fafabed1dfb54979701e090f65068ca895d6ad80b61c12551ca97b36fb7eb37012270b4bce1a3599d16704755c2c851e4f4768b5383fc95d5859ee56121fb01ff94b2cb545c7be790abf316d1012fdf672df4423a29cac5bd3c3c3549f717eac79beb6fa73bc") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc05c5340, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10000, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) renameat2(r3, &(0x7f0000000500)='./file0\x00', r4, &(0x7f0000000540)='./file0\x00', 0x1) ptrace$setregs(0xf, r2, 0x4, &(0x7f00000003c0)="fb6f21940841ecb72db9c942fe8330d8d6ff5880c6f1ba0d2442926f28a203edf980838624d71d8d0d746785a34fdb9deb815f5d86b6604f20d8cd3175a9994a0fa0715d6302473e148016ed9912e96678cc588dae1990dd9695f1e0691a144cd90f5436bc9be58c9775a47c87596716863c07cd4fcc7678ff5b4f07f0a5c00f16ce0c223c5325403a5095ed2e4a0e868b5c06d163a2c39c8616b1b5c036ef9efec7f000439606f650853ead4cf952e2aa139f507d26934f87ed") ptrace$peek(0xffffffffffffffff, r2, &(0x7f0000000140)) [ 1376.445911] sd 0:0:1:0: [sg0] tag#3152 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1376.454740] sd 0:0:1:0: [sg0] tag#3152 CDB: opcode=0x20 [ 1376.460178] sd 0:0:1:0: [sg0] tag#3152 CDB[00]: 20 40 76 b5 d7 7c 9a bd f4 71 3e 2a f5 78 33 91 [ 1376.469073] sd 0:0:1:0: [sg0] tag#3152 CDB[10]: a9 55 02 90 7f a8 30 12 3b 91 df de ab ab cb 5e [ 1376.478108] sd 0:0:1:0: [sg0] tag#3152 CDB[20]: 84 07:48:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0x7ffff000}], 0x1, 0xc3) 07:48:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="390000001300098417feb1ae7aa778f40000ff3f0e000000000000000000001419000a00430100000a00005d14a4e91ee438d2fd0000000000", 0x39}], 0x1) [ 1376.495340] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 1376.502866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 07:48:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x80, &(0x7f0000004100), 0x0, &(0x7f0000001ec0)=[{0x10, 0x1, 0x1, "c333edc8"}], 0x10}}], 0x2, 0x0) 07:48:58 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr}]}, 0x20}}, 0x0) [ 1376.593222] netlink: 'syz-executor6': attribute type 10 has an invalid length. 07:48:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0x7ffff000}], 0x1, 0xc3) [ 1376.636085] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 1376.643614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 07:48:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0x2, 0x7f}}, 0x18}}, 0x0) 07:48:59 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f00005f7ffa), 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000780)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0xa000, 0x0) 07:48:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x2d, 0x119, 0x0, 0x0, {0x3}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @u32=0xf0ffff}]}]}, 0x20}}, 0x0) 07:48:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12, [{}]}]}, 0x24}}, 0x0) 07:48:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00000003c0)) timer_gettime(0x0, &(0x7f00000004c0)) 07:48:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x80, &(0x7f0000004100), 0x0, &(0x7f0000001ec0)=[{0x10, 0x1, 0x1, "c333edc8"}], 0x10}}], 0x2, 0x0) 07:48:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0x7ffff000}], 0x1, 0xc3) 07:48:59 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr}]}, 0x20}}, 0x0) 07:48:59 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr}]}, 0x20}}, 0x0) 07:48:59 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='$,\x00') 07:48:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x80, &(0x7f0000004100), 0x0, &(0x7f0000001ec0)=[{0x10, 0x1, 0x1, "c333edc8"}], 0x10}}], 0x2, 0x0) 07:48:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0x7ffff000}], 0x1, 0xc3) 07:48:59 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x101) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x3, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) 07:48:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/125) 07:48:59 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280)=0xffffffffffffff93, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$unix(r1, &(0x7f0000000540), 0xfffffffffffffdd6, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/141, 0x8d}], 0x2}}], 0x1, 0x0, &(0x7f0000002780)={0x0, 0x989680}) 07:48:59 executing program 3: r0 = socket$inet6(0xa, 0x40000000002, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = dup2(r0, r0) sendto$inet(r1, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)}}], 0x1, 0x0) 07:48:59 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) statfs(&(0x7f0000000140)='./file0//ile0\x00', &(0x7f00000002c0)=""/48) close(r0) 07:48:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000000040)) 07:48:59 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr}]}, 0x20}}, 0x0) 07:48:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/125) 07:48:59 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x101) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x3, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) 07:48:59 executing program 6: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setpipe(r1, 0x407, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) dup2(r1, r3) 07:48:59 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000002000), &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r0, 0xfffffffffffffd87) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x10d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f0000000240)=""/226}, 0x18) 07:48:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 07:48:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') fchdir(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75702f00797a3000bbd3c2830f2a102ed2060bdc00ca0afc0a0ab40400005d8ec474c281f5f1a6d118bc38d1a31d6c7a9aa66f072682cf09de0cb8bef55a1a530a3d2cee9ed82516a500ca71b2d0426b9ecd1e2567f55fc232021cb7b1dc618056acf431027a552b2b37cf5317c9194789fbfbfec9159de60772992222334c67e84ec1", 0x1ff) 07:48:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/125) 07:48:59 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x101) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x3, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) 07:48:59 executing program 0: r0 = memfd_create(&(0x7f0000000280)="23656d31232b003492", 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x26852, r0, 0x0) mincore(&(0x7f0000003000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/137) 07:48:59 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000), 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 07:48:59 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x101) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x3, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) 07:49:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/125) 07:49:00 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$packet(r0, &(0x7f0000000100), 0x5e0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 07:49:00 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pread64(r0, &(0x7f00000001c0)=""/48, 0xffffffffffffff27, 0x0) 07:49:00 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], 0x2000000000000181) 07:49:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000), 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 07:49:00 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000000)='mqueue\x00', 0x0, &(0x7f000000a000)) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000016c0)='.\x00') 07:49:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='ramfs\x00', 0x1, &(0x7f00000004c0)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 07:49:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0), 0x35a) 07:49:00 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x402c5342, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000240)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 07:49:00 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) readv(r0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/61, 0x3d}], 0x1) 07:49:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001480)=[{{&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)=""/4096, 0x1000}}, {{&(0x7f0000001380)=@rc, 0x80, &(0x7f0000001400), 0x0, &(0x7f0000001440)=""/51, 0x33}}], 0x2, 0x0, &(0x7f00000014c0)={0x77359400}) 07:49:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000), 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 07:49:00 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 07:49:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x13}], 0x200000000000005b, 0x0) 07:49:01 executing program 1: mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 07:49:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x20c, [0x0, 0x20000000, 0x20000030, 0x200001dc], 0x0, &(0x7f0000000580), &(0x7f0000000000)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x19, 0x0, 0x0, "76657461315f746f5f0400", 'erspan0\x00', 'bridge_slave_1\x00', 'ip6tnl0\x00', @link_local, [], @dev, [], 0x10c, 0x134, 0x17c, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @dev, [], 0x0, 0x0, 0x0, 0x0, @dev}, 0x0, 0xa2535b7cb8e223f9}}}, @realm={'realm\x00', 0xc}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x4}]}, @common=@log={'log\x00', 0x24, {{0x0, "46aefdc2eedaf8ff6fcbbfa67ee31e6bfa4cf9f0761ffdac96c7d300bc1d"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x25c) 07:49:01 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0x8) futex(&(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x0) lseek(r2, 0x0, 0x3) close(r0) 07:49:01 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000), 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 07:49:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000140)}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000040)={{0x2c, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x2c, 0x8}}, 0x20) 07:49:01 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 07:49:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000100000000000000010000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48b}]}) 07:49:01 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 07:49:01 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}, @gre}}}}, &(0x7f0000000000)) 07:49:01 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbca17b2c0600000000000000ff1f75642558334444c9fe3d13", 0x42) r1 = syz_open_pts(r0, 0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x401}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)) 07:49:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000100)="0403000000c000ddb8460900ffb25bc202938207d9033780398d5375c5f73f2e5506dc5712f29513a7648f6575efe5eb8f5972eaecff8b307756e1955e65b195506149fb3055e05f0013de326fc26eb9c2ec6f5c0db8326430a35bee9fd7c0bf9c83bf58d94d77df1362670905f6b9261a5c5fdc3313fbdb0f1fc5ad75ace625007e45ac6c8c386878cb80b04ca3e1bafa5c26090343590c0e", 0x99, 0x0, &(0x7f00000000c0)={0xa, 0x100200000800, 0x8000800000005, @dev={0xfe, 0x80, [], 0x10}, 0x2074}, 0x1c) 07:49:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000006c0), 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x8000000) keyctl$read(0xb, r1, &(0x7f0000000700)=""/4096, 0x1000) 07:49:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) rename(&(0x7f0000000600)='./file0/file1\x00', &(0x7f0000000640)='./file0/file0/file0\x00') 07:49:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f00000003c0)="240000004a001f00ff07f4f9002304000a04f51108000100020100020800028001000000", 0x24) 07:49:01 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 07:49:01 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbca17b2c0600000000000000ff1f75642558334444c9fe3d13", 0x42) r1 = syz_open_pts(r0, 0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x401}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)) 07:49:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x10000}, 0x10}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, &(0x7f0000000cc0)=ANY=[], &(0x7f0000e6bffc)='GPL\x00', 0x0, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = socket(0x0, 0x1, 0x0) r2 = add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000bc0)="f2ad594f5334f2d4423c1c2a91f4cb195178b124a8f5eb0bee785172b0a14ff3d9bcdac1e17c7b06d24befc49a199d8192d4b5199be81c369fe175aa554a957a837037ea4c51e5f490b69dd015664fed25a27e9e0ec9a0e2100443570bc94f6c83dc544edafcca4941ff8ed5a58fb1b27545e961d23979c83372132367e5ad22f20f", 0x82, 0xfffffffffffffff8) request_key(&(0x7f00000006c0)='trusted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="0000001800", 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000800)) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@int=0xfffffffffffffffa, 0x4) r4 = socket$inet6(0xa, 0x202000000802, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000580)=0x1, 0xff0e) fcntl$setlease(r1, 0x400, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2, 0x80000000000041}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x1000000803, 0x0, 0xffffffffffffffff}, 0xffffffe6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r5, 0x50, &(0x7f0000000640)}, 0x10) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x280, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000440)='tunl0\x00') ioctl$BLKIOMIN(r5, 0x1278, &(0x7f00000005c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1, 0x14, 0xcc, 0xcfec, 0x2}, &(0x7f0000000540)=0x98) timerfd_create(0x0, 0x80000) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000002c0)={0x3, 0x1}, 0x311) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendfile(r4, r6, &(0x7f0000000340)=0x201, 0x7ffffffe) 07:49:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000740)=[{&(0x7f0000001180)="cc", 0x1}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:01 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 07:49:01 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x401, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480), &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x10001, 0x15}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={r3, 0x200}, 0x8) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000140)={{}, {r4, r5+30000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getpeername$packet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@empty, 0x15, r6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r3, @in={{0x2, 0x4e21, @local}}, 0x7fffffff, 0x100000001, 0x7, 0x18, 0x20}, &(0x7f0000000380)=0x98) tkill(r1, 0x1000000000016) 07:49:01 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) [ 1379.407223] QAT: Invalid ioctl [ 1379.422220] QAT: Invalid ioctl 07:49:01 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 07:49:01 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20001, 0x0) tee(r0, 0xffffffffffffffff, 0x9, 0x0) [ 1379.481164] QAT: Invalid ioctl [ 1379.512417] QAT: Invalid ioctl 07:49:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1b) 07:49:01 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbca17b2c0600000000000000ff1f75642558334444c9fe3d13", 0x42) r1 = syz_open_pts(r0, 0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x401}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)) 07:49:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, &(0x7f00000004c0)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 07:49:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0xd803}) io_setup(0xaf3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="fb", 0x1}]) 07:49:01 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 07:49:01 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="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", 0xfc) 07:49:01 executing program 4: clone(0xfffffffffffffffe, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000cd6f68)) 07:49:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x6f, &(0x7f0000000000), &(0x7f0000000040)=0xb) 07:49:01 executing program 7: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000000)='./control\x00') 07:49:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004000000000010000000000000025000000ffffffff00040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x38f}]}) [ 1379.800760] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 1379.808476] netlink: 188 bytes leftover after parsing attributes in process `syz-executor0'. 07:49:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0xd803}) io_setup(0xaf3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="fb", 0x1}]) 07:49:02 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbca17b2c0600000000000000ff1f75642558334444c9fe3d13", 0x42) r1 = syz_open_pts(r0, 0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x401}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)) 07:49:02 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x20000, 0x30) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r2}}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x74, 0x316) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 07:49:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 07:49:02 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) 07:49:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 07:49:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={0x0, @in, 0x0, 0x0, 0x401, 0x0, 0x10000000011}, 0x98) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 07:49:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0xd803}) io_setup(0xaf3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="fb", 0x1}]) 07:49:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000040)={{0x4000000080}, 'port1\x00', 0x42, 0xfffffffffffffffe}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) 07:49:02 executing program 6: r0 = memfd_create(&(0x7f0000000100)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000200)) 07:49:02 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) 07:49:02 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 07:49:02 executing program 4: clock_getres(0xfffffffffffffff3, &(0x7f0000000000)) 07:49:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 07:49:02 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0xc0684113, &(0x7f0000000040)) 07:49:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0xd803}) io_setup(0xaf3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="fb", 0x1}]) 07:49:02 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) 07:49:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a5e000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:02 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10102) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000140)=0x4) read(r0, &(0x7f00000000c0)=""/113, 0x71) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x8001, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x40004e23, 0x0, @loopback}, 0x1c) 07:49:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={0x0, @in, 0x0, 0x0, 0x401, 0x0, 0x10000000011}, 0x98) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 07:49:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @dev}}, 0x0, 0x6, 0x0, "b6f73b6e690dfa12c023fe736a343f8b70bbfadd0b2b7917794acb5f197a68d966aa0b5a5f41ca2b6204d8bac209c26d4b213ba809a1c6e983a2b18c3657b1710a93895ee1e98fb8566092d73d71d352"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000014c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x4b, 0x0, "4ae9645a4bdbefd0187f1e35cba955127c7ca8b982f7408054208a36ee7b341bc01b6d8d52e8ee57c61ec7f041e965466b7a2d4cec6a16d568c9683cac6791e3bef5d31b03d40e4f5f68137e44379c3b"}, 0xd8) 07:49:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 07:49:02 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x6}], 0x1, 0x0) 07:49:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x900}, 0xc, &(0x7f0000000a80)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0xfe80}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x3}}]}, 0x30}}, 0x0) 07:49:02 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0x408) [ 1380.757363] IPv6: Can't replace route, no match found 07:49:03 executing program 6: r0 = memfd_create(&(0x7f0000000100)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000200)) 07:49:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a5e000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:03 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a5e000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x44000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 07:49:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={0x0, @in, 0x0, 0x0, 0x401, 0x0, 0x10000000011}, 0x98) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 07:49:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/8, &(0x7f0000000080)=0x8) 07:49:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x400000000035, &(0x7f00000001c0)=0x7fff, 0x4) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 07:49:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 07:49:03 executing program 1: setrlimit(0x400000000000007, &(0x7f0000000000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) chdir(&(0x7f0000000000)='./file0\x00') 07:49:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 07:49:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@setneightbl={0x1c, 0x43, 0x601, 0x0, 0x0, {}, [@NDTA_NAME={0x8, 0x8, '\x00'}]}, 0x1c}}, 0x0) 07:49:03 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a5e000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a5e000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:03 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @local}}]}, 0x28}}, 0x0) 07:49:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 07:49:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={0x0, @in, 0x0, 0x0, 0x401, 0x0, 0x10000000011}, 0x98) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) [ 1381.720377] netlink: 'syz-executor2': attribute type 8 has an invalid length. 07:49:04 executing program 6: r0 = memfd_create(&(0x7f0000000100)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000200)) 07:49:04 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000380)="6e201ab0", 0x4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) 07:49:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0xffff}}]}) 07:49:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 07:49:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a5e000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a5e000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="01010000000af400000000409d925400", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="6f4c274ff96750106bccc8661e8641c8f6f2fd4de4592086d18b04cbbe68fb8a050bff46ad2cb81f14c8394da2680c8a911f90248d2de3e1eeb5c656ecefb674862ce4352983888100e6c53aec78bf0c8c56507763ef1a1160242d3a2f880addc0b4a4446885f1e5af0643b215f29af7372d2b754e4bf3ca04de153d61f35c89c3d5f8e8fbc00651c6f6ee5b176f4d271c89012448367699cc06a16fec1d3646956f", 0xa2}], 0x1, &(0x7f0000000a00)}}], 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) 07:49:04 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) getdents64(r0, &(0x7f00000001c0)=""/186, 0xfd63) 07:49:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="01010000000af400000000409d925400", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="6f4c274ff96750106bccc8661e8641c8f6f2fd4de4592086d18b04cbbe68fb8a050bff46ad2cb81f14c8394da2680c8a911f90248d2de3e1eeb5c656ecefb674862ce4352983888100e6c53aec78bf0c8c56507763ef1a1160242d3a2f880addc0b4a4446885f1e5af0643b215f29af7372d2b754e4bf3ca04de153d61f35c89c3d5f8e8fbc00651c6f6ee5b176f4d271c89012448367699cc06a16fec1d3646956f", 0xa2}], 0x1, &(0x7f0000000a00)}}], 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) 07:49:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="8908fe9f79df5ec9285df22db4a5172f3ffe636589c0adccc84a4630029ceda7ef00f88d344430fae1afde3dd42233784ab80d240cf683f571bf6e25388dca6fbf2162d5ec42ca90bef1249662d82f412774bb1ed1ecd40c7bd5bedbe4a2ae04391697fd3d6d232932", 0x69) 07:49:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000100)=""/208) 07:49:04 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) getpeername(r0, &(0x7f0000000300)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000380)=0x80) 07:49:04 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 07:49:04 executing program 1: get_thread_area(&(0x7f0000000000)={0x0, 0xffffffff}) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x200000}) 07:49:04 executing program 7: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@generic={0x0, "6c2dfc04690a4e3e9276f11379ffab33011fa707bcf10ca9b334a6e7477b1ad3767cfe5cd10dea21590bf8529c092ef4afe000eb680142a795fffeb01679b9a1dfd78bcb497e6522c02b85ef77c2a7ca30dcad3b324e7021d7c09e13d1be67c6b0e033cce97980bf3978a4f58d984efdefd4248fb624d4a8eefb8ba58744"}, 0x80) 07:49:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="01010000000af400000000409d925400", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="6f4c274ff96750106bccc8661e8641c8f6f2fd4de4592086d18b04cbbe68fb8a050bff46ad2cb81f14c8394da2680c8a911f90248d2de3e1eeb5c656ecefb674862ce4352983888100e6c53aec78bf0c8c56507763ef1a1160242d3a2f880addc0b4a4446885f1e5af0643b215f29af7372d2b754e4bf3ca04de153d61f35c89c3d5f8e8fbc00651c6f6ee5b176f4d271c89012448367699cc06a16fec1d3646956f", 0xa2}], 0x1, &(0x7f0000000a00)}}], 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) 07:49:05 executing program 6: r0 = memfd_create(&(0x7f0000000100)="736563757269747d917617cb0e3dbe4574656f00", 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xb516) clock_nanosleep(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000200)) 07:49:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c45513, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 'syz1\x00'}) 07:49:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="8908fe9f79df5ec9285df22db4a5172f3ffe636589c0adccc84a4630029ceda7ef00f88d344430fae1afde3dd42233784ab80d240cf683f571bf6e25388dca6fbf2162d5ec42ca90bef1249662d82f412774bb1ed1ecd40c7bd5bedbe4a2ae04391697fd3d6d232932", 0x69) 07:49:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) 07:49:05 executing program 3: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x24, &(0x7f0000000000)) 07:49:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000140)="7cda80ba7a163f9a8ca79369cbe19b18ab759a02fa15bdc57631cabc481a77ec5c", 0x21}], 0x1, &(0x7f0000001800)}, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000440)=""/162, 0xa2}], 0x2, &(0x7f0000000540)=""/17, 0x11}}], 0x1, 0x0, &(0x7f000000bc80)) 07:49:05 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140), &(0x7f0000000480)="06", 0x1, 0xfffffffffffffffd) 07:49:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="01010000000af400000000409d925400", 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="6f4c274ff96750106bccc8661e8641c8f6f2fd4de4592086d18b04cbbe68fb8a050bff46ad2cb81f14c8394da2680c8a911f90248d2de3e1eeb5c656ecefb674862ce4352983888100e6c53aec78bf0c8c56507763ef1a1160242d3a2f880addc0b4a4446885f1e5af0643b215f29af7372d2b754e4bf3ca04de153d61f35c89c3d5f8e8fbc00651c6f6ee5b176f4d271c89012448367699cc06a16fec1d3646956f", 0xa2}], 0x1, &(0x7f0000000a00)}}], 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) 07:49:05 executing program 5: r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 07:49:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="8908fe9f79df5ec9285df22db4a5172f3ffe636589c0adccc84a4630029ceda7ef00f88d344430fae1afde3dd42233784ab80d240cf683f571bf6e25388dca6fbf2162d5ec42ca90bef1249662d82f412774bb1ed1ecd40c7bd5bedbe4a2ae04391697fd3d6d232932", 0x69) 07:49:05 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x8) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000000040)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x70967c17166daa5c, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmsg(r1, &(0x7f0000000080)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/80, 0x50}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x4) 07:49:05 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="c7", 0x1}], 0x1) 07:49:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}, 0x2c) r0 = socket$kcm(0xa, 0x40122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000001c0), 0x4) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000002d40)}, 0x0) 07:49:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c45513, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 'syz1\x00'}) 07:49:05 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x3, 0x80000000000041}, 0x20) 07:49:05 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c45513, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 1383.771486] dccp_close: ABORT with 20 bytes unread 07:49:06 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e20, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @dev}, 0x0, [0x0, 0x0, 0x2d21]}, 0x5c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'veth1_to_bond\x00'}, 0x18) 07:49:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 07:49:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="8908fe9f79df5ec9285df22db4a5172f3ffe636589c0adccc84a4630029ceda7ef00f88d344430fae1afde3dd42233784ab80d240cf683f571bf6e25388dca6fbf2162d5ec42ca90bef1249662d82f412774bb1ed1ecd40c7bd5bedbe4a2ae04391697fd3d6d232932", 0x69) 07:49:06 executing program 3: r0 = socket(0x1e, 0x1, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "0103000000000000000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) close(r0) 07:49:06 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c45513, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 'syz1\x00'}) 07:49:06 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x8) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000000040)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x70967c17166daa5c, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmsg(r1, &(0x7f0000000080)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/80, 0x50}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x4) 07:49:06 executing program 6: madvise(&(0x7f0000b45000/0x4000)=nil, 0xfffffffffffffe77, 0x2) 07:49:06 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x102, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) 07:49:06 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e20, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @dev}, 0x0, [0x0, 0x0, 0x2d21]}, 0x5c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'veth1_to_bond\x00'}, 0x18) 07:49:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 07:49:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000279ffc)=0x7fff, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) 07:49:06 executing program 7: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:49:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="2fd6b1be27a3", @random="91477e3969a2", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f0000000040)) 07:49:06 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x6c, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr}, @mcast2, {[], @icmpv6=@dest_unreach={0xfc00, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0xffffff84, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) 07:49:06 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) 07:49:06 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000006, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) 07:49:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 07:49:06 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e20, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @dev}, 0x0, [0x0, 0x0, 0x2d21]}, 0x5c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'veth1_to_bond\x00'}, 0x18) 07:49:06 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700)='/dev/net/tun\x00', 0x80a, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={"0000cceb11ff0000000000000200", 0x101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0xe80, 0x8847}, @val, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local, @mcast2, @local}}, 0x42) 07:49:06 executing program 6: bpf$PROG_LOAD(0x2, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 07:49:06 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="2fd6b1be27a3", @random="91477e3969a2", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f0000000040)) [ 1384.731970] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1384.836849] device vcan0 left promiscuous mode [ 1384.853917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1384.869711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1384.900428] A link change request failed with some changes committed already. Interface vlan0000 may have been left with an inconsistent configuration, please check. [ 1384.939703] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1384.957107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1384.982946] A link change request failed with some changes committed already. Interface vlan0000 may have been left with an inconsistent configuration, please check. 07:49:07 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x8) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000000040)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x70967c17166daa5c, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmsg(r1, &(0x7f0000000080)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/80, 0x50}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x4) 07:49:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x2000000001}, 0x3d7) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x7}, 0x8) 07:49:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x5}, 0xfc94) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x201a7f1b, 0x0, 0x201a7fd7, 0xa, 0xab01, 0xffffffc0}]}, &(0x7f0000000000)="47504cc000", 0x8, 0x1ac, &(0x7f00001a7f05)=""/251}, 0x48) 07:49:07 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e20, 0x0, @local, 0x5}, {0xa, 0x0, 0x0, @dev}, 0x0, [0x0, 0x0, 0x2d21]}, 0x5c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'veth1_to_bond\x00'}, 0x18) 07:49:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), 0x4) listen(r1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) 07:49:07 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000015c0)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)="97", 0x1}], 0x1, &(0x7f0000001400)}, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000100)=@sco, 0x80, &(0x7f0000001200)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000001600)}, 0x0) close(r0) 07:49:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="2fd6b1be27a3", @random="91477e3969a2", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f0000000040)) 07:49:07 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x1, 0x1dc, [0x0, 0x200005c0, 0x2000073c, 0x2000076c], 0x0, &(0x7f0000000040), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x1, 0x800, 'eql\x00', 'ip6gre0\x00', 'tunl0\x00', 'irlan0\x00', @empty, [], @link_local, [], 0xe8, 0x124, 0x14c, [@ip={'ip\x00', 0x1c, {{@empty, @local}}}, @statistic={'statistic\x00', 0x14}]}, [@common=@RATEEST={'RATEEST\x00', 0x18, {{'syz0\x00'}}}]}, @common=@AUDIT={'AUDIT\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x22c) [ 1385.130157] dccp_close: ABORT with 20 bytes unread 07:49:07 executing program 7: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x200000000000004, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000046fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) 07:49:07 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x44e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x1) 07:49:07 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x2000000c8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="2fd6b1be27a3", @random="91477e3969a2", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0xffffff89}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f0000000040)) 07:49:07 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f00000000c0)='./control\x00') umount2(&(0x7f0000000040)='./control/file1\x00', 0x0) rmdir(&(0x7f0000000140)='./control/file0\x00') close(r0) 07:49:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x38}}, 0x0) 07:49:07 executing program 6: unshare(0x2000400) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:07 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000009061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 1385.384123] netlink: 'syz-executor5': attribute type 3 has an invalid length. 07:49:07 executing program 6: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000080), 0x98) [ 1385.478879] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 1385.486402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 1385.487947] dccp_close: ABORT with 20 bytes unread 07:49:07 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x8) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000000040)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x70967c17166daa5c, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmsg(r1, &(0x7f0000000080)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/80, 0x50}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x4) [ 1385.539496] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 1385.546997] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. [ 1385.683587] dccp_close: ABORT with 20 bytes unread 07:49:08 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x47) ioctl$sock_inet_SIOCGARP(r0, 0x2401, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @random="4a1d0a64d0f0"}, 0x0, {}, 'team0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 07:49:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [0x1d9]}) 07:49:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x81, 0x1, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x2c}}, 0x0) 07:49:08 executing program 3: prctl$getreaper(0x1b, &(0x7f0000000100)) 07:49:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000d2effc)=0x3eb00000, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00006f6ffc)=0x3, 0x2c7) 07:49:08 executing program 1: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x0) unshare(0x28000000) clone(0x34004000, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000000c0)) 07:49:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="81", 0x1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000e8e000)=[{{&(0x7f00008b6000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x80, &(0x7f0000231ff0)=[{&(0x7f0000f89000)='t', 0x1}], 0x1, &(0x7f0000dffeb8)}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a7ffc), 0x4) 07:49:08 executing program 7: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) shutdown(r2, 0x0) tkill(r0, 0x1004000000016) 07:49:08 executing program 3: r0 = memfd_create(&(0x7f0000000040)='b\n\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) 07:49:08 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000920000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) 07:49:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000280)}, 0x8000) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [{0x20, ')ppp0'}], 0xa, "1f7737f29244e8a592bd13"}, 0x1c) 07:49:08 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)={0x0, 0xfff, 0x1, 0x0, 0x0, [{}]}) 07:49:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0305302, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 07:49:08 executing program 6: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="6e65742f69665f696e65743600d9f72fa6be32f684c4d840e4ff810400000008de354b64e2198e23e8e429dd2a961f075eaba9a39714a202298c0796afc4796d02fe2630dd728fb52f7468cc48d6190e98277a21bb66563761f8f2c977cd255c5fb5371ded38da53620d0a8c239c45458cd94911ebc823f68e6b226f24ab884cfebbea71e8") lseek(r0, 0xfffe, 0x0) 07:49:08 executing program 3: nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000516000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff) 07:49:08 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000480)='./file0\x00') readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/189, 0xbd) 07:49:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x8b}]}) 07:49:08 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x3, 0x0) 07:49:08 executing program 7: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x1, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 07:49:08 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=@raw=[@alu, @alu], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f0000000000)=""/195}, 0x22) 07:49:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0x3, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000003880)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'}) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x0, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188}, {&(0x7f00000015c0)=""/4096}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0x0, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) 07:49:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x175}]}) 07:49:08 executing program 2: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x4}], 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x26a) 07:49:09 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x0, 0x0, 0x6}, 0x10) 07:49:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="00008000000099ee75450ba09ddb9dfeb6b1d747fac0e786bc54633a84d75d70d8a098acebf1b513ddb2229c444d36944a3d1389d7ad0879da1eb046a606488590990687533f4ec08aa13a4430ca173a0184bd4d2819b0431ac04f61104e"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:09 executing program 6: prctl$intptr(0x21, 0x8a) 07:49:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000002200)='0', 0x1, 0x800000000000000}]) 07:49:09 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f00000000c0)=0x98) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 07:49:09 executing program 6: r0 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000280), &(0x7f00000002c0)="ed8fb6c519", 0x5, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f00000003c0)=""/4, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) getpriority(0x2, r1) 07:49:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000100), 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xf00000000000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x22, 0x1, 0x0, 0x0, {0x2000000000000001}}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x7ff}, &(0x7f00000002c0)=0x8) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)={0xb}, 0xb) 07:49:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f0000000000), 0xc, &(0x7f0000001880)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000010002b000c00010055c7217b913cd5dce0cf4ef0caff2908007fff8879031f536f25c553f26e827a5eaf34925d7711d4535d3ad2e760d42bba5a6cce48ab95b67f5757bfb1462716ff87d9fab7dbc1e394d8decc546b", @ANYRES32], 0x2}}, 0x0) 07:49:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0305302, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 07:49:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x12, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0xfe56) 07:49:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, "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"}]}, 0x466) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000840)="a3", 0x1}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x20000142000007) 07:49:09 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) 07:49:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="00008000000099ee75450ba09ddb9dfeb6b1d747fac0e786bc54633a84d75d70d8a098acebf1b513ddb2229c444d36944a3d1389d7ad0879da1eb046a606488590990687533f4ec08aa13a4430ca173a0184bd4d2819b0431ac04f61104e"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000002c0)) sendto$packet(r0, &(0x7f0000000040)="daa4", 0x2, 0x0, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 07:49:09 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0, &(0x7f0000001b00)) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000240)='X', 0x1, 0x0, &(0x7f0000000140), 0x10) [ 1387.177799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:49:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="00008000000099ee75450ba09ddb9dfeb6b1d747fac0e786bc54633a84d75d70d8a098acebf1b513ddb2229c444d36944a3d1389d7ad0879da1eb046a606488590990687533f4ec08aa13a4430ca173a0184bd4d2819b0431ac04f61104e"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:09 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendto(r0, &(0x7f0000001900)="8f", 0x1, 0x0, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "3adb91317667"}, 0x80) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000880)=""/209, 0xd1}}, {{&(0x7f0000000280)=@hci, 0x80, &(0x7f00000009c0), 0x200000000000037c, &(0x7f0000000a00)=""/240, 0xf0}}], 0x2, 0x2042, &(0x7f0000000b80)={0x0, 0x1c9c380}) 07:49:09 executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000340), 0x1000000}], 0x1, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) dup2(r0, r2) 07:49:09 executing program 6: r0 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000280), &(0x7f00000002c0)="ed8fb6c519", 0x5, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f00000003c0)=""/4, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) getpriority(0x2, r1) 07:49:09 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000005faa)={@random="cd3997030f00", @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x18, 0x40000000003a, 0x3ff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@mld={0x87, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0) 07:49:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000002c0)) sendto$packet(r0, &(0x7f0000000040)="daa4", 0x2, 0x0, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 07:49:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="00008000000099ee75450ba09ddb9dfeb6b1d747fac0e786bc54633a84d75d70d8a098acebf1b513ddb2229c444d36944a3d1389d7ad0879da1eb046a606488590990687533f4ec08aa13a4430ca173a0184bd4d2819b0431ac04f61104e"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34d1634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:09 executing program 4: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3, 0x43, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000100), 0x0, &(0x7f0000fff000/0x1000)=nil, 0x2) 07:49:09 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000080)) umount2(&(0x7f0000000040)='./file0\x00', 0x4) chown(&(0x7f0000001140)='./file0\x00', 0x0, 0x0) 07:49:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0305302, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 07:49:10 executing program 6: r0 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000280), &(0x7f00000002c0)="ed8fb6c519", 0x5, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f00000003c0)=""/4, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) getpriority(0x2, r1) 07:49:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [], {0x0, 0x989680}}) 07:49:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000002c0)) sendto$packet(r0, &(0x7f0000000040)="daa4", 0x2, 0x0, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 07:49:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newrule={0x20, 0x20, 0xa3bc010931239d7f}, 0x20}}, 0x0) 07:49:10 executing program 7: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080), &(0x7f00000001c0)="da", 0x1, r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, r1) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000280), &(0x7f0000000440)='\x00', 0x1, r3) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r3) keyctl$update(0x2, r5, &(0x7f0000000580)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f", 0xc0) keyctl$dh_compute(0x17, &(0x7f00000006c0)={r4, r5, r2}, &(0x7f0000000540)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha512-generic\x00'}}) [ 1388.038427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 07:49:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1200}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0) 07:49:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) 07:49:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000002c0)) sendto$packet(r0, &(0x7f0000000040)="daa4", 0x2, 0x0, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 07:49:10 executing program 0: r0 = mq_open(&(0x7f0000000000)='-$.', 0x6e93ebbbcc0884f3, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x802}) r1 = dup2(r0, r0) mq_timedreceive(r1, &(0x7f00006b0f7d)=""/131, 0x83, 0x0, &(0x7f0000ccf000)) 07:49:10 executing program 6: r0 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000280), &(0x7f00000002c0)="ed8fb6c519", 0x5, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f00000003c0)=""/4, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) getpriority(0x2, r1) 07:49:10 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x200, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000280)={0xffffffff, 0x0, 0x0, 0x0, "a5ea8ce30b864428424f4303c62db5cd0e5ab8ebb46109a434700c442a10a8aa"}) 07:49:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x8924, &(0x7f0000000000)) 07:49:10 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x4}) fcntl$lock(r0, 0x800000007, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) 07:49:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) 07:49:10 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) 07:49:11 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfffffffffffffffd, 0xfffffdfd}) 07:49:11 executing program 2: setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x0, 0x1, [0x0]}, 0xa) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x200000}}, &(0x7f0000000140)=0xb0) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) 07:49:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) 07:49:11 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x35e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) 07:49:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) sendto$inet6(r2, &(0x7f0000000300), 0xfd5e, 0x0, 0x0, 0xfffffffffffffe48) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f00000000c0)) 07:49:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0305302, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 07:49:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) 07:49:11 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, r1, &(0x7f0000000040)='./file0\x00') 07:49:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) 07:49:11 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfffffffffffffffd, 0xfffffdfd}) 07:49:11 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc805}}}, 0x1c) 07:49:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) 07:49:11 executing program 0: r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x37, [], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000040)=""/55}, &(0x7f0000000300)=0x50) 07:49:11 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x4000000) 07:49:11 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfffffffffffffffd, 0xfffffdfd}) 07:49:11 executing program 4: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040), &(0x7f0000000140)='\x00', 0xfffffffffffffffe) 07:49:11 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) 07:49:11 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x11, 0x5c831, 0xffffffffffffffff, 0x40000000) syz_open_procfs(0x0, &(0x7f0000000080)='net/nfsfs\x00') 07:49:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket(0x1, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'bond0\x00', 0x81}) 07:49:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) 07:49:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) recvfrom$inet(r0, &(0x7f0000000080)=""/218, 0xda, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) shutdown(r0, 0x1) 07:49:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000380), 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=@ipv4_newrule={0x34, 0x18, 0x703, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'erspan0\x00'}]}, 0x34}}, 0x0) 07:49:11 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x12, &(0x7f0000000300)={@loopback}, 0x14) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000002540)}, 0x0) 07:49:11 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xfffffffffffffffd, 0xfffffdfd}) 07:49:12 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='9'], 0x1) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f000069b000/0x1000)=nil, 0x1000}) 07:49:12 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4008af03, 0x0) 07:49:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 07:49:12 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @empty=[0xffffa888], [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) gettid() 07:49:12 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)) stat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0xfffffffffffffff9, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 07:49:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x8}], 0x18}, 0x0) 07:49:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) 07:49:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close(r0) 07:49:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x10000000}) [ 1390.045274] dccp_v6_rcv: dropped packet with invalid checksum [ 1390.077617] dccp_v6_rcv: dropped packet with invalid checksum 07:49:12 executing program 1: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x20002) pwrite64(r0, &(0x7f0000000180)="151ef3868668222f610e9d23bfb9d4e17e8065157d0db21be225fa0b5715a09013a06829633831e59b5c42fa918ed82f1140743d05ea93a3e6e12631d88f315dcdc6690845a939e2c000f7d917b00721378e9e2b", 0x54, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, "7175657565300000000000000000000000000080004000000000000000000000080000000000030000e7d4e77cff5b680f430000000600000000000000001000"}) write$sndseq(r0, &(0x7f0000001400)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) sendfile(r1, r0, &(0x7f0000000000), 0x800) 07:49:12 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) 07:49:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x102, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x45c) 07:49:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close(r0) 07:49:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 07:49:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x10000000}) 07:49:12 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x175}]}) 07:49:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 07:49:12 executing program 5: perf_event_open(&(0x7f0000001440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) accept4$inet(r0, &(0x7f0000000140)={0x0, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0x80800) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'irlan0\x00'}, 0x18) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'veth1\x00'}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast1}}}, 0x84) 07:49:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close(r0) 07:49:12 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) io_setup(0x7ff, &(0x7f0000000f40)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) 07:49:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f00000004c0)=0x0) io_pgetevents(r0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0) 07:49:12 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00') r1 = dup(r0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) 07:49:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x10000000}) 07:49:12 executing program 1: sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f000000aa80)=[{&(0x7f0000004bc0)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000007240)=[{&(0x7f0000006000)="5aa73cd409debbbbf127f75571af6774b889e516f707151a4f0cf3ea2fc9bcdc", 0x20}], 0x1, &(0x7f00000073c0)}], 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 07:49:12 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f00000000c0), 0x0) [ 1390.493282] IPVS: stopping master sync thread 17281 ... [ 1390.498914] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 07:49:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close(r0) 07:49:12 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev}]}, &(0x7f0000000200)=0x10) listen(r0, 0xfffc) r1 = accept4(r0, &(0x7f0000000100)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x80, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0xfb}, 0x8) 07:49:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) 07:49:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000080)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 1390.583132] binder: 17294:17296 transaction failed 29201/-22, size 0--4919094034175318182 line 2967 [ 1390.594974] IPVS: stopping master sync thread 17299 ... [ 1390.598815] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 07:49:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x10000000}) 07:49:12 executing program 5: perf_event_open(&(0x7f0000001440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) accept4$inet(r0, &(0x7f0000000140)={0x0, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0x80800) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'irlan0\x00'}, 0x18) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'veth1\x00'}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast1}}}, 0x84) 07:49:12 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180), 0x20000180) [ 1390.714443] binder_alloc: binder_alloc_mmap_handler: 17294 20001000-20004000 already mapped failed -16 [ 1390.738558] binder: BINDER_SET_CONTEXT_MGR already set 07:49:12 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f00000000c0), 0x0) 07:49:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="39000000110009e369001b00810800000700fd3f16000000450000001419001a000400230007000f000200000400000083a8a5000200f026dea1", 0x3a}], 0x1) 07:49:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x4e, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0xfe56) [ 1390.770056] binder: undelivered TRANSACTION_ERROR: 29201 [ 1390.810300] binder: 17294:17316 ioctl 40046207 0 returned -16 07:49:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10040000000000b}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast, @local={[], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1, @dev, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) 07:49:13 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f00000000c0), 0x0) 07:49:13 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="050000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) [ 1390.897155] IPVS: stopping master sync thread 17341 ... [ 1390.900097] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 07:49:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x2, @rand_addr}]}}}]}, 0x38}}, 0x0) 07:49:13 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000280)='loginuid\x00') exit(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x0) 07:49:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000080)=0x4) 07:49:13 executing program 5: perf_event_open(&(0x7f0000001440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) accept4$inet(r0, &(0x7f0000000140)={0x0, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0x80800) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'irlan0\x00'}, 0x18) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'veth1\x00'}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast1}}}, 0x84) [ 1391.188747] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 1391.189132] IPVS: stopping master sync thread 17380 ... 07:49:13 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)={0x0, 0x4f01, 0x0, 0x0, "4f019b55a1be58df7b55762023ad56d08f16133d2099807ad4d300"}) 07:49:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x0) 07:49:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000340)={&(0x7f0000000140)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0xc) 07:49:13 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f00000000c0), 0x0) 07:49:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) 07:49:13 executing program 3: r0 = memfd_create(&(0x7f0000000180)=',,,eth0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x286}) 07:49:13 executing program 5: perf_event_open(&(0x7f0000001440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) accept4$inet(r0, &(0x7f0000000140)={0x0, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0x80800) listen(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'irlan0\x00'}, 0x18) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'veth1\x00'}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast1}}}, 0x84) [ 1391.499864] sctp: [Deprecated]: syz-executor7 (pid 17326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1391.499864] Use struct sctp_sack_info instead 07:49:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000340)={&(0x7f0000000140)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0xc) 07:49:13 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) 07:49:13 executing program 3: r0 = memfd_create(&(0x7f0000000180)=',,,eth0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x286}) 07:49:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/ptmx\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000018c0)}}, {{0x0, 0x0, &(0x7f0000001a40), 0x379, &(0x7f0000001a80)}}, {{&(0x7f0000001e40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x80, &(0x7f0000004100), 0x0, &(0x7f0000004180)}}], 0x3, 0x0) [ 1391.619325] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 1391.633837] IPVS: stopping master sync thread 17402 ... 07:49:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x402000000000005, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x0, @dev}], 0x10) 07:49:13 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001700)={@mcast1}, 0x14) 07:49:14 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='cgroup.controllers\x00', 0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000280)=""/162, 0xa2}], 0x1) 07:49:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x80802) writev(r0, &(0x7f0000000040)=[{&(0x7f0000001880)="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", 0x66b}], 0x1) 07:49:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000340)={&(0x7f0000000140)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0xc) 07:49:14 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002000), 0x10165) write$FUSE_OPEN(r0, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) ioctl(r1, 0xffffffffffffffff, &(0x7f0000000b40)) 07:49:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0xbff, [0xc2, 0x0, 0x40000021]}) 07:49:14 executing program 3: r0 = memfd_create(&(0x7f0000000180)=',,,eth0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x286}) 07:49:14 executing program 7: unshare(0x20000400) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 07:49:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 07:49:14 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @local={[], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}, @mcast2}}}}}}}, 0x0) 07:49:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f0000000340)={&(0x7f0000000140)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0xc) 07:49:14 executing program 3: r0 = memfd_create(&(0x7f0000000180)=',,,eth0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x286}) [ 1391.974623] kvm [17438]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 07:49:14 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffac8f158e380000bc5b586973f4d12be200070000007f0000017f000001ac1414aae010"], 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x90) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 07:49:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) r3 = syz_open_pts(r0, 0x0) dup2(r1, r3) 07:49:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x2ba}], 0x1, &(0x7f0000000200)}, 0x8000) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="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", 0x2d5}], 0x1, &(0x7f0000003b40)}, 0x0) 07:49:14 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f00005ff000/0x4000)=nil, 0x4000) mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000540), 0x1, 0x2) 07:49:14 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x80001000824ffe0) 07:49:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) connect$inet6(r0, &(0x7f000090b000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x2, 0x8}}}}}}, &(0x7f0000775000)) 07:49:14 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x3c1, 0x2, 0x26c, [0x20000140], 0x0, &(0x7f0000000040), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'bcsh0\x00', 'gretap0\x00', 'bond_slave_0\x00', 'bcsh0\x00', @dev, [], @dev, [], 0x9c, 0xcc, 0xfc, [@cgroup0={'cgroup\x00', 0x8, {{0x0, 0x8}}}]}, [@arpreply={'arpreply\x00', 0xc, {{@dev}}}]}, @snat={'snat\x00', 0xc}}, {{{0x13, 0x0, 0x0, 'yam0\x00', 'ip6tnl0\x00', 'bond_slave_1\x00', 'veth1_to_bond\x00', @random="34d92186f650", [], @local, [], 0x70, 0x70, 0xe0}}, @common=@NFLOG={'NFLOG\x00', 0x4c, {{0x0, 0x0, 0x0, 0x0, 0x0, "851000f75c8b49658ee19851a01521c045cf019eee270023d251bccb45e53b282340dcf088aa288a3bcf7a295156c16c57ff67df1b5f41488815552f58418751"}}}}]}, {0x0, '\x00', 0x2, 0xffbfffffffffffff}]}, 0x2bc) 07:49:14 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='keyring\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) vmsplice(r0, &(0x7f0000001900)=[{&(0x7f0000000380)}, {&(0x7f0000000540)="f9e23b333704822c92a9baf9c3b82aedc3f11743f58859099a74fb3d255c3068553180d023b2c9b10d27bdeb929cf20df60278200501b91bba4f43e3c8289b48aef5afe52c62c8802cbd7c0b6885154e653bd880ac3cdd98fa78d6131d5be7649747a4b3fa43c23ef9f72f1c4ad514a4222905e6b428535386e1fd50588554d224523c2189e4a40af1017932c591908a6f58b83cab3c7385a208bc01fa25b81b92dddcb4d82bf3a8052e9f49a2fa6929560c5140e36ced581cd72611c7d747b8042a865390", 0xc5}, {&(0x7f0000000640)="89af6977875ec76b5d0ef1f8e0dfeb4a9ef6c249ba60c6b0548562865ef788898d5c0f9a191f0cd44d14a417de599f161565c3d8cc35bdfdd9fbbbdd79c73036516743080f7f32dc6dc98107621863ab8a00e609b5e75a98ffcb6fbbb1ea960c3792aae9ca0974c1a6dd3a56f58cc330b75e8ccb0abaf3bb6b6f31a152e4ab8f510094f8dc905553be7926", 0x8b}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001800)="debccddc34d3e4e0d4576851515b022287ee777477f2343e66264d94ba183c9d162ba4fa4c3fc06c1e0c58a9d60c33127740046781923b94bfbb1324feed3dfdc5b1311f1225a6f27dcd17a55fbd6e5bed7b50054f7343ff7515b6ecce8ca74a97a87ec9c78753bd3f3a46d47f12822510c336ed53847ecaaa079972407135ba753a0405f5baa66282ab89a31655f415e881eee87676f585bd104e025c51dbaed6ca0d1ba27e779becb61a65bd0ffad10cfbc4ef74bd9034b17b26ba6825f7490566a5ae0ce24504", 0xc8}], 0x5, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) 07:49:14 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0x7fffffff, 0xa}, {}, 0x3ff}) 07:49:14 executing program 0: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000643ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) chroot(&(0x7f0000000380)='./file0/file0\x00') r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00009b9000)="0500de00667300", 0x1008, &(0x7f0000000100)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') renameat2(r2, &(0x7f00000001c0)='./file0/file0/file0/file0\x00', r2, &(0x7f0000284000)='./file0/file0/file0/file0\x00', 0x0) 07:49:14 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000006240)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x4}]]}}}]}, 0x3c}}, 0x0) 07:49:14 executing program 4: socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4), 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@generic="7b6c6e6606"]}, 0x1c}}, 0x0) 07:49:14 executing program 6: r0 = socket(0x10, 0x80002, 0x0) read(r0, &(0x7f0000000080)=""/70, 0x46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=@bridge_getlink={0x20, 0x12, 0x101}, 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 07:49:14 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) 07:49:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x6) 07:49:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x18, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1) 07:49:14 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) [ 1392.823212] netlink: 'syz-executor7': attribute type 4 has an invalid length. 07:49:15 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 07:49:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 07:49:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x6) 07:49:15 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f0000000540)='affs\x00', 0x1006, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='efivarfs\x00', 0x3083, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 07:49:15 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 07:49:15 executing program 6: r0 = socket(0x10, 0x80002, 0x0) read(r0, &(0x7f0000000080)=""/70, 0x46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=@bridge_getlink={0x20, 0x12, 0x101}, 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 07:49:15 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x1, 0xfffffffffffffff8) r6 = dup2(r4, r5) fcntl$setown(r6, 0x8, r3) tkill(r3, 0x15) 07:49:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x18, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1) 07:49:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x60d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 07:49:15 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000180)=""/4096) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x30, &(0x7f0000000000), 0x8e3e) 07:49:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x18, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1) 07:49:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendfile64(r0, r1, 0x0, 0x1ff) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/161, 0xa1}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1004000000016) 07:49:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond0\x00'}) [ 1393.174620] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1393.187252] syz-executor3 cpuset=/ mems_allowed=0 [ 1393.192216] CPU: 0 PID: 17549 Comm: syz-executor3 Not tainted 4.18.0-rc7+ #76 [ 1393.199500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1393.208883] Call Trace: [ 1393.211487] dump_stack+0x1c9/0x2b4 [ 1393.215137] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1393.220347] ? trace_hardirqs_on+0x10/0x10 07:49:15 executing program 6: r0 = socket(0x10, 0x80002, 0x0) read(r0, &(0x7f0000000080)=""/70, 0x46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=@bridge_getlink={0x20, 0x12, 0x101}, 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 1393.224599] dump_header+0x27b/0xf64 [ 1393.228340] ? pagefault_out_of_memory+0x197/0x197 [ 1393.233284] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 1393.238150] ? perf_trace_lock+0x920/0x920 [ 1393.242404] ? graph_lock+0x170/0x170 [ 1393.246217] ? print_usage_bug+0xc0/0xc0 [ 1393.250306] ? print_usage_bug+0xc0/0xc0 [ 1393.254391] ? lock_downgrade+0x8f0/0x8f0 [ 1393.258558] ? mark_held_locks+0xc9/0x160 [ 1393.262709] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1393.267311] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1393.272423] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1393.277449] ? trace_hardirqs_on+0xd/0x10 [ 1393.281614] ? ___ratelimit+0xaa/0x655 [ 1393.285514] ? idr_get_free+0x10c0/0x10c0 [ 1393.289678] ? kasan_check_write+0x14/0x20 [ 1393.293928] ? do_raw_spin_lock+0xc1/0x200 [ 1393.298183] oom_kill_process.cold.25+0x10/0x10bc [ 1393.303046] ? oom_evaluate_task+0x540/0x540 [ 1393.307461] ? find_held_lock+0x36/0x1c0 [ 1393.311543] ? lock_downgrade+0x8f0/0x8f0 [ 1393.315703] ? kasan_check_read+0x11/0x20 [ 1393.319868] ? rcu_is_watching+0x8c/0x150 07:49:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x6) [ 1393.324024] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1393.328442] ? oom_badness+0xb00/0xb00 [ 1393.332338] ? rcu_read_unlock+0x35/0x70 [ 1393.336408] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1393.340652] ? css_task_iter_end+0x2ce/0x490 [ 1393.345072] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1393.349838] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1393.352511] bond0: cannot enslave bond to itself. [ 1393.354862] ? trace_hardirqs_on+0xd/0x10 [ 1393.354878] ? _raw_spin_unlock_irq+0x27/0x70 [ 1393.354894] ? oom_badness+0xb00/0xb00 [ 1393.354912] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1393.354929] ? mem_cgroup_iter_break+0x30/0x30 [ 1393.354966] out_of_memory+0xa8a/0x14d0 [ 1393.385678] ? oom_killer_disable+0x3a0/0x3a0 [ 1393.390202] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1393.395238] ? trace_hardirqs_on+0xd/0x10 [ 1393.399407] mem_cgroup_out_of_memory+0x15e/0x210 [ 1393.404361] ? memcg_memory_event+0x40/0x40 [ 1393.408687] ? _raw_spin_unlock+0x22/0x30 [ 1393.412838] mem_cgroup_oom_synchronize+0x713/0x940 [ 1393.417869] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1393.423351] ? memcg_event_wake+0x450/0x450 [ 1393.427679] pagefault_out_of_memory+0xc8/0x197 [ 1393.432353] ? out_of_memory+0x14d0/0x14d0 [ 1393.436596] ? __handle_mm_fault+0x4460/0x4460 [ 1393.441170] mm_fault_error+0x1de/0x380 [ 1393.445140] __do_page_fault+0xd25/0xe50 [ 1393.449198] ? mm_fault_error+0x380/0x380 [ 1393.453336] ? do_fast_syscall_32+0x150/0xfb2 [ 1393.457835] do_page_fault+0xf6/0x8c0 [ 1393.461625] ? vmalloc_sync_all+0x30/0x30 [ 1393.465768] ? syscall_slow_exit_work+0x500/0x500 [ 1393.470601] ? do_syscall_64+0x820/0x820 [ 1393.474656] ? syscall_return_slowpath+0x31d/0x5e0 [ 1393.479587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1393.485115] ? retint_user+0x18/0x18 [ 1393.488821] ? page_fault+0x8/0x30 [ 1393.492352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1393.497197] ? page_fault+0x8/0x30 [ 1393.500731] page_fault+0x1e/0x30 [ 1393.504172] RIP: 0023:0x806a00f [ 1393.507431] Code: 03 00 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 e9 73 02 <66> a5 f3 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90 f7 05 34 2f 46 [ 1393.526787] RSP: 002b:000000000845fd1c EFLAGS: 00010203 [ 1393.532141] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 1393.539404] RDX: 0000000000000000 RSI: 0000000008150390 RDI: 000000002051cff6 [ 1393.546662] RBP: 00000000083500ac R08: 0000000000000000 R09: 0000000000000000 [ 1393.553926] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1393.561184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1393.568713] Task in /ile0 killed as a result of limit of /ile0 07:49:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@setlink={0x3c, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_PORT_SELF={0x1c, 0x19, [@nested={0x18, 0x4, [@generic="f762d9f887497461645ad27e8caab00c20"]}]}]}, 0x3c}}, 0x0) [ 1393.574787] memory: usage 112kB, limit 0kB, failcnt 650 [ 1393.580203] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1393.587042] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1393.593232] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1393.613124] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name 07:49:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x10eff5bfca45c79e}, 0x20) [ 1393.622010] [17549] 0 17549 17527 8729 110592 0 0 syz-executor3 [ 1393.630990] Memory cgroup out of memory: Kill process 17549 (syz-executor3) score 8756000 or sacrifice child [ 1393.641088] Killed process 17549 (syz-executor3) total-vm:70108kB, anon-rss:2148kB, file-rss:32768kB, shmem-rss:0kB 07:49:15 executing program 6: r0 = socket(0x10, 0x80002, 0x0) read(r0, &(0x7f0000000080)=""/70, 0x46) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=@bridge_getlink={0x20, 0x12, 0x101}, 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 07:49:15 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@getlink={0x28, 0x12, 0x11, 0x0, 0x0, {}, [@IFLA_IF_NETNSID={0x8}]}, 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x4924aac, 0x0) [ 1393.683791] oom_reaper: reaped process 17549 (syz-executor3), now anon-rss:0kB, file-rss:32092kB, shmem-rss:0kB 07:49:15 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x1c4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth1_to_team\x00', 'ip6tnl0\x00', 'irlan0\x00', 'ifb0\x00', @broadcast, [], @dev, [], 0xe4, 0x10c, 0x134, [@devgroup={'devgroup\x00', 0x14, {{0x9}}}, @quota={'quota\x00', 0x18}]}, [@common=@redirect={'redirect\x00', 0x4}]}, @common=@AUDIT={'AUDIT\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x214) 07:49:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="65381dffe70b4eaa7bf5e24ef06a80a0", 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 07:49:15 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001f40)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 07:49:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x18, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1) 07:49:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x6) 07:49:15 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000280)) 07:49:16 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x6, 0x4, 0x5, 0xfb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 07:49:16 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) read(r0, &(0x7f0000000100)=""/182, 0xb6) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x7ff) write$FUSE_ATTR(r0, &(0x7f00000001c0)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}}, 0x78) 07:49:16 executing program 2: capset(&(0x7f0000000100)={0x4000019980330}, &(0x7f0000000000)={0x800000, 0xfffffffffff7ffff}) ioprio_set$pid(0x2, 0x0, 0x0) 07:49:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 07:49:16 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x1c}]}]}, 0x28}}, 0x0) 07:49:16 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524009ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c704411", 0x2bc, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x3c4, 0x20c, 0x0, 0xffffffff, 0x328, 0x0, 0x414, 0x414, 0xffffffff, 0x414, 0x414, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x98, 0xcc}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xcc}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xcc}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast2, @remote, @port, @icmp_id}}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'syz_tun\x00', 'eql\x00'}, 0x0, 0x98, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @loopback, @gre_key, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x420) 07:49:16 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pptp(r0, &(0x7f0000000040), 0x43) 07:49:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)="fb", 0x80000000000006) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) 07:49:16 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x6, 0x4, 0x5, 0xfb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 07:49:16 executing program 2: r0 = socket$kcm(0x2, 0x6, 0x0) getsockopt$bt_hci(r0, 0x10d, 0x5, &(0x7f0000000000)=""/86, &(0x7f0000000180)=0x56) 07:49:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 07:49:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x6, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, r0, 0x0, 0xffffffffffffffff, 0x0) 07:49:16 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='nfs4\x00', 0x0, 0x0) 07:49:16 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="58d484f7de60325c143686ef6925dbb20c57e3c5028cb555404ca261747439d0f33d6143c0bd0f0ae6863d3f2f1a23935271cc39c6fb2b3fb8c1ff7a1b66", 0x3e}], 0x1, &(0x7f0000000540)}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYRES16], 0x543) write$binfmt_script(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="2321202e2f66696c65300af3264fb93ebc8b66ef2f4c4aae5bfafb785c7874bc05ec8cfd732c6097d916cccf91ecd2474d3d3900d7eda8902a44756965686a0f2b432429744d120e3a0304d75db24e33472786f15c24d3cca943589ec6d45638f1c247ec7626b9a92647ad3c44f02a47d3a6aaafee963a7edb5322140864a4406961a9e746f940da389ef942cc6099e6a116439d85fe51689d50a103c84caf391748b3a72038fc87939f8510ea19da640c7fc3c57d4f8a8ff12d050d8f42ae12d81c10114108faa55a40783b0b5ef8f5675a914adc486aba97c9ddbb69475ad7c5a86b078ac78711cd12a4b7b42b9973f78e452123f15b2b230457ef9b4a7d0469318c04daffbc7a9d1e6418d9a2c375f5cf317b6c3f5b8399924b6f4cd82a86c54490ce86942fc8f2102bebea1db3d39d4acc12000084b8d2d2530e513e055fb6dcde904878a3b3035fa0bdf787218238647e6e6d3d28f7ef78a9f285dea61138c33595e8d1554ec3e22ed4ac00f8682ce52e27cf9866c486a1c7c1e9296c169b54e304afd81966b7450c89abb05909b48b3c"], 0x193) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000001480)=""/20, 0x14}, 0x100000000100) write$binfmt_elf64(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x8ec) 07:49:16 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') sendfile(r0, r0, &(0x7f0000000000)=0x100000, 0x7fffffff) 07:49:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)="fb", 0x80000000000006) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) 07:49:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 07:49:16 executing program 2: r0 = socket$kcm(0x2, 0x6, 0x0) getsockopt$bt_hci(r0, 0x10d, 0x5, &(0x7f0000000000)=""/86, &(0x7f0000000180)=0x56) 07:49:16 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt(r2, 0x1, 0x7, &(0x7f0000000180)=""/139, &(0x7f0000000000)=0x8b) 07:49:16 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x6, 0x4, 0x5, 0xfb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 07:49:16 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='.', &(0x7f0000000040), 0x1004, 0x0) mkdir(&(0x7f0000000ec0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000f80)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x80000, &(0x7f0000000900)) 07:49:16 executing program 7: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) clone(0x0, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000100)=""/100, 0x64) 07:49:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)="fb", 0x80000000000006) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) 07:49:16 executing program 2: r0 = socket$kcm(0x2, 0x6, 0x0) getsockopt$bt_hci(r0, 0x10d, 0x5, &(0x7f0000000000)=""/86, &(0x7f0000000180)=0x56) 07:49:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 07:49:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000080)) 07:49:16 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f00005fafe4)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, &(0x7f00008e3fb8)}}, {{&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000632000)}}], 0x2, 0x0) 07:49:16 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt(r2, 0x1, 0x7, &(0x7f0000000180)=""/139, &(0x7f0000000000)=0x8b) 07:49:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)="fb", 0x80000000000006) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) 07:49:16 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x6, 0x4, 0x5, 0xfb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 07:49:16 executing program 2: r0 = socket$kcm(0x2, 0x6, 0x0) getsockopt$bt_hci(r0, 0x10d, 0x5, &(0x7f0000000000)=""/86, &(0x7f0000000180)=0x56) 07:49:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback}, 0x10) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "965c0066142a49bc64c8813f9d60e9a21ed64ff5a2fa76cdc562707ef8e16f43"}) 07:49:16 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@bridge_getlink={0x28, 0x12, 0xa01, 0x0, 0x0, {}, [@IFLA_IF_NETNSID={0x8}]}, 0x28}}, 0x0) 07:49:16 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000600fe7f0f00bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000010f80)}, 0x0) 07:49:16 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt(r2, 0x1, 0x7, &(0x7f0000000180)=""/139, &(0x7f0000000000)=0x8b) 07:49:17 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30}, 0x30) 07:49:17 executing program 2: prctl$void(0x3) [ 1394.975874] netlink: 'syz-executor6': attribute type 6 has an invalid length. [ 1394.983341] netlink: 17 bytes leftover after parsing attributes in process `syz-executor6'. 07:49:17 executing program 7: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) clone(0x0, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000100)=""/100, 0x64) 07:49:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0xe1) sendto$inet6(r1, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 07:49:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="6f2b7e27d75e9889ccec13b7ffccd435", 0x10}], 0x1, &(0x7f0000000400)}, 0x0) io_setup(0x7ff, &(0x7f0000000f40)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) 07:49:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 07:49:17 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt(r2, 0x1, 0x7, &(0x7f0000000180)=""/139, &(0x7f0000000000)=0x8b) 07:49:17 executing program 1: r0 = getpid() ioprio_set$pid(0x1, r0, 0x0) 07:49:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1263) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 07:49:17 executing program 6: r0 = socket$rds(0x2, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000002fc8)={&(0x7f0000002000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002000)=""/181, 0xb5}], 0x1}, 0x0) setsockopt$RDS_RECVERR(r0, 0x84, 0x6, &(0x7f0000001ffc), 0x84) 07:49:17 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x223}, @local}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 07:49:17 executing program 1: r0 = epoll_create(0x5) r1 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf8ff4)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001300)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000100)=""/4096}, &(0x7f0000001100)="44be86ddbaefc2b669743ed8163cfa3b7c030219aa79f094497f7689d4591c5364", &(0x7f0000001200)=""/190, 0x0, 0x0, 0x0, &(0x7f00000012c0)}) 07:49:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0xe1) sendto$inet6(r1, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 07:49:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {}, 0x0, {0x2, 0xfffffffffffffffd, @local}, 'vcan0\x00'}) 07:49:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="6f2b7e27d75e9889ccec13b7ffccd435", 0x10}], 0x1, &(0x7f0000000400)}, 0x0) io_setup(0x7ff, &(0x7f0000000f40)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) 07:49:17 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1263) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 07:49:17 executing program 3: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000740)=@req3={0xff, 0x8}, 0x1c) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 07:49:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="6f2b7e27d75e9889ccec13b7ffccd435", 0x10}], 0x1, &(0x7f0000000400)}, 0x0) io_setup(0x7ff, &(0x7f0000000f40)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) 07:49:18 executing program 7: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) clone(0x0, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000100)=""/100, 0x64) 07:49:18 executing program 1: pipe(&(0x7f00000001c0)={0x0, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0xc0189436, &(0x7f0000000000)) 07:49:18 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 07:49:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0xe1) sendto$inet6(r1, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 07:49:18 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x7530}}, &(0x7f00000000c0)) 07:49:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="6f2b7e27d75e9889ccec13b7ffccd435", 0x10}], 0x1, &(0x7f0000000400)}, 0x0) io_setup(0x7ff, &(0x7f0000000f40)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) 07:49:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1263) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 07:49:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0xffffffffffffff7f, &(0x7f0000ffe000/0x2000)=nil, 0x2000000000003) madvise(&(0x7f0000c74000/0x3000)=nil, 0x3000, 0x4) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 07:49:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0xe1) sendto$inet6(r1, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 07:49:18 executing program 1: pipe(&(0x7f00000001c0)={0x0, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0xc0189436, &(0x7f0000000000)) 07:49:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0x6}]}}}]}, 0x3c}}, 0x0) 07:49:18 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 07:49:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5040000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) 07:49:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1263) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 07:49:18 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)) 07:49:18 executing program 1: pipe(&(0x7f00000001c0)={0x0, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0xc0189436, &(0x7f0000000000)) 07:49:19 executing program 7: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) clone(0x0, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000100)=""/100, 0x64) 07:49:19 executing program 4: pkey_alloc(0x0, 0xfffffffffffffffe) 07:49:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2e, 0x313, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x23}}, 0x0) 07:49:19 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000060000)) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) epoll_wait(r0, &(0x7f0000b70000)=[{}], 0x1, 0x800) epoll_wait(r0, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xfb, 0x0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x190, 0xcd14) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 07:49:19 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8188aea6, &(0x7f0000000040)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 07:49:19 executing program 1: pipe(&(0x7f00000001c0)={0x0, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0xc0189436, &(0x7f0000000000)) 07:49:19 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) write(r0, &(0x7f0000000240)="16344e8e54d74958823342235ba704", 0xf) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x5, 0x400000000000082) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) clone(0x20000000, &(0x7f0000001f37), &(0x7f00000002c0), &(0x7f0000001000), &(0x7f00000003c0)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000300)) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000)=0x6000000000000000, 0x2000005) 07:49:19 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x4}, 0x2f) [ 1397.171368] syz-executor6 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1397.182411] syz-executor6 cpuset=/ mems_allowed=0 [ 1397.187372] CPU: 1 PID: 17907 Comm: syz-executor6 Not tainted 4.18.0-rc7+ #76 [ 1397.194645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1397.203999] Call Trace: [ 1397.206586] dump_stack+0x1c9/0x2b4 [ 1397.210206] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1397.215388] ? trace_hardirqs_on+0x10/0x10 [ 1397.219612] dump_header+0x27b/0xf64 [ 1397.223320] ? pagefault_out_of_memory+0x197/0x197 [ 1397.228239] ? perf_trace_lock+0xde/0x920 [ 1397.232375] ? __lock_acquire+0x7fc/0x5020 [ 1397.236597] ? graph_lock+0x170/0x170 [ 1397.240388] ? zap_class+0x740/0x740 [ 1397.244087] ? print_usage_bug+0xc0/0xc0 [ 1397.248132] ? print_usage_bug+0xc0/0xc0 [ 1397.252182] ? perf_trace_lock+0xde/0x920 [ 1397.256338] ? graph_lock+0x170/0x170 [ 1397.260124] ? print_usage_bug+0xc0/0xc0 [ 1397.264174] ? zap_class+0x740/0x740 [ 1397.267881] ? print_usage_bug+0xc0/0xc0 [ 1397.271943] ? lock_downgrade+0x8f0/0x8f0 [ 1397.276085] ? mark_held_locks+0xc9/0x160 [ 1397.280231] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1397.284813] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1397.289905] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1397.294916] ? trace_hardirqs_on+0xd/0x10 [ 1397.299053] ? ___ratelimit+0xaa/0x655 [ 1397.302943] ? idr_get_free+0x10c0/0x10c0 [ 1397.307079] ? kasan_check_write+0x14/0x20 [ 1397.311308] ? do_raw_spin_lock+0xc1/0x200 [ 1397.315537] oom_kill_process.cold.25+0x10/0x10bc [ 1397.320375] ? oom_evaluate_task+0x540/0x540 [ 1397.324771] ? find_held_lock+0x36/0x1c0 [ 1397.328825] ? lock_downgrade+0x8f0/0x8f0 [ 1397.332966] ? rcu_is_watching+0x8c/0x150 [ 1397.337100] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1397.341499] ? oom_badness+0xb00/0xb00 [ 1397.345376] ? rcu_read_unlock+0x35/0x70 [ 1397.349422] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1397.353643] ? css_task_iter_end+0x2ce/0x490 [ 1397.358039] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1397.362782] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1397.367796] ? trace_hardirqs_on+0xd/0x10 [ 1397.371932] ? _raw_spin_unlock_irq+0x27/0x70 [ 1397.376414] ? oom_badness+0xb00/0xb00 [ 1397.380298] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1397.385040] ? mem_cgroup_iter_break+0x30/0x30 [ 1397.389623] out_of_memory+0xa8a/0x14d0 [ 1397.393597] ? oom_killer_disable+0x3a0/0x3a0 [ 1397.398084] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1397.403087] ? trace_hardirqs_on+0xd/0x10 [ 1397.407233] mem_cgroup_out_of_memory+0x15e/0x210 [ 1397.412064] ? memcg_memory_event+0x40/0x40 [ 1397.416382] ? _raw_spin_unlock+0x22/0x30 [ 1397.420521] mem_cgroup_oom_synchronize+0x713/0x940 [ 1397.425526] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1397.430966] ? memcg_event_wake+0x450/0x450 [ 1397.435275] ? rwsem_wake+0x2eb/0x460 [ 1397.439063] ? __rwsem_mark_wake.constprop.5+0xd0/0xd0 [ 1397.444332] pagefault_out_of_memory+0xc8/0x197 [ 1397.448984] ? out_of_memory+0x14d0/0x14d0 [ 1397.453216] mm_fault_error+0x1de/0x380 [ 1397.457221] __do_page_fault+0xd25/0xe50 [ 1397.461276] ? mm_fault_error+0x380/0x380 [ 1397.465415] ? do_fast_syscall_32+0x150/0xfb2 [ 1397.469905] do_page_fault+0xf6/0x8c0 [ 1397.473694] ? vmalloc_sync_all+0x30/0x30 [ 1397.477830] ? _raw_spin_unlock_irq+0x27/0x70 [ 1397.482312] ? finish_task_switch+0x1d3/0x870 [ 1397.486797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1397.492320] ? syscall_return_slowpath+0x31d/0x5e0 [ 1397.497249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1397.502774] ? retint_user+0x18/0x18 [ 1397.506477] ? page_fault+0x8/0x30 [ 1397.510009] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1397.514940] ? page_fault+0x8/0x30 [ 1397.518470] page_fault+0x1e/0x30 [ 1397.521912] RIP: 0023:0x8049b12 [ 1397.525172] Code: 8b 84 24 a0 04 00 00 83 e8 0b 83 f8 01 0f 86 cd 00 00 00 65 f0 83 05 e4 ff ff ff 01 65 a1 00 00 00 00 83 ec 0c 05 48 ff ff ff <50> e8 28 10 01 00 83 c4 10 85 c0 0f 84 fd 00 00 00 65 f0 83 2d e4 [ 1397.544434] RSP: 002b:00000000f5f25c34 EFLAGS: 00010287 [ 1397.549784] RAX: 00000000f5f26a88 RBX: 00000000080de227 RCX: 0000000000000001 [ 1397.557038] RDX: 00000000080e483c RSI: 00000000083500a0 RDI: 00000000ffffffff [ 1397.564292] RBP: 00000000f5f26168 R08: 0000000000000000 R09: 0000000000000000 [ 1397.571547] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1397.578805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1397.586293] Task in /ile0 killed as a result of limit of /ile0 [ 1397.592352] memory: usage 112kB, limit 0kB, failcnt 667 [ 1397.597782] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1397.604585] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 07:49:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x4012, r1, 0x0) 07:49:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000000)=0x622, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa}}}}}}}, &(0x7f0000000080)) [ 1397.610987] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1397.630912] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 1397.639824] [17903] 0 17903 17527 8732 110592 0 0 syz-executor6 [ 1397.648758] Memory cgroup out of memory: Kill process 17903 (syz-executor6) score 8759000 or sacrifice child [ 1397.658825] Killed process 17903 (syz-executor6) total-vm:70108kB, anon-rss:2160kB, file-rss:32768kB, shmem-rss:0kB 07:49:19 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) truncate(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) 07:49:19 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000060000)) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) epoll_wait(r0, &(0x7f0000b70000)=[{}], 0x1, 0x800) epoll_wait(r0, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xfb, 0x0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x190, 0xcd14) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) [ 1397.685453] oom_reaper: reaped process 17903 (syz-executor6), now anon-rss:0kB, file-rss:32092kB, shmem-rss:0kB 07:49:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2a}}) 07:49:19 executing program 6: r0 = socket$inet6(0x10, 0x8000000000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000140)=@nl, 0x80, &(0x7f0000000000)=[{&(0x7f0000014f79)="5500000018007fcdb72d1cb2a4a280a80a06050000a84302910523692500080008000a40010000001400a3070d000000030000dc1338d54400009b84226eb75afb83de448daa7227c43ab8220000060cec4f8b91d4", 0x55}], 0x1, &(0x7f0000000000)}, 0x0) 07:49:19 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xffffffee) read(r2, &(0x7f0000000000)=""/126, 0xfffffeab) 07:49:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x3c, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0xa, 'ifb0\x00'}]}, 0x3c}}, 0x0) [ 1397.824155] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1397.836926] netlink: 17 bytes leftover after parsing attributes in process `syz-executor6'. 07:49:20 executing program 4: r0 = socket$inet6(0xa, 0x20000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240), 0x8) 07:49:20 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x10, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xf}}) 07:49:20 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r1}) 07:49:20 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000060000)) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) epoll_wait(r0, &(0x7f0000b70000)=[{}], 0x1, 0x800) epoll_wait(r0, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xfb, 0x0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x190, 0xcd14) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) [ 1397.970940] netlink: 'syz-executor0': attribute type 10 has an invalid length. 07:49:20 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) dup3(r0, r1, 0x0) 07:49:20 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000300)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) [ 1398.027520] netlink: 'syz-executor0': attribute type 10 has an invalid length. [ 1398.090119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1398.097270] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1398.108252] syz-executor3 cpuset=/ mems_allowed=0 [ 1398.113194] CPU: 1 PID: 17951 Comm: syz-executor3 Not tainted 4.18.0-rc7+ #76 [ 1398.115968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1398.120473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1398.120479] Call Trace: [ 1398.120504] dump_stack+0x1c9/0x2b4 [ 1398.120527] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1398.120549] ? trace_hardirqs_on+0x10/0x10 [ 1398.120571] dump_header+0x27b/0xf64 [ 1398.120599] ? pagefault_out_of_memory+0x197/0x197 [ 1398.160865] ? perf_trace_lock+0xde/0x920 [ 1398.165023] ? __lock_acquire+0x7fc/0x5020 [ 1398.169258] ? zap_class+0x740/0x740 [ 1398.172960] ? print_usage_bug+0xc0/0xc0 [ 1398.177035] ? perf_trace_lock+0xde/0x920 [ 1398.181179] ? graph_lock+0x170/0x170 [ 1398.184970] ? print_usage_bug+0xc0/0xc0 [ 1398.189029] ? zap_class+0x740/0x740 [ 1398.192746] ? print_usage_bug+0xc0/0xc0 [ 1398.196812] ? lock_downgrade+0x8f0/0x8f0 [ 1398.200962] ? mark_held_locks+0xc9/0x160 [ 1398.205099] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1398.209676] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1398.214776] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1398.219783] ? trace_hardirqs_on+0xd/0x10 [ 1398.223925] ? ___ratelimit+0xaa/0x655 [ 1398.227806] ? idr_get_free+0x10c0/0x10c0 [ 1398.231946] ? kasan_check_write+0x14/0x20 [ 1398.236173] ? do_raw_spin_lock+0xc1/0x200 [ 1398.240407] oom_kill_process.cold.25+0x10/0x10bc [ 1398.245253] ? oom_evaluate_task+0x540/0x540 [ 1398.249652] ? find_held_lock+0x36/0x1c0 [ 1398.253718] ? lock_downgrade+0x8f0/0x8f0 [ 1398.257867] ? rcu_is_watching+0x8c/0x150 [ 1398.262011] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1398.266431] ? oom_badness+0xb00/0xb00 [ 1398.270324] ? rcu_read_unlock+0x35/0x70 [ 1398.274377] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1398.278603] ? css_task_iter_end+0x2ce/0x490 [ 1398.283004] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1398.287758] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1398.292766] ? trace_hardirqs_on+0xd/0x10 [ 1398.296905] ? _raw_spin_unlock_irq+0x27/0x70 [ 1398.301394] ? oom_badness+0xb00/0xb00 [ 1398.305274] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1398.310037] ? mem_cgroup_iter_break+0x30/0x30 [ 1398.314628] out_of_memory+0xa8a/0x14d0 [ 1398.318603] ? oom_killer_disable+0x3a0/0x3a0 [ 1398.323094] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1398.328105] ? trace_hardirqs_on+0xd/0x10 [ 1398.332274] mem_cgroup_out_of_memory+0x15e/0x210 [ 1398.337124] ? memcg_memory_event+0x40/0x40 [ 1398.341456] ? _raw_spin_unlock+0x22/0x30 [ 1398.345606] mem_cgroup_oom_synchronize+0x713/0x940 [ 1398.350614] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1398.356055] ? memcg_event_wake+0x450/0x450 [ 1398.360384] pagefault_out_of_memory+0xc8/0x197 [ 1398.365044] ? out_of_memory+0x14d0/0x14d0 [ 1398.369279] ? __handle_mm_fault+0x4460/0x4460 [ 1398.373858] mm_fault_error+0x1de/0x380 [ 1398.377832] __do_page_fault+0xd25/0xe50 [ 1398.381891] ? mm_fault_error+0x380/0x380 [ 1398.386038] ? __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1398.390702] do_page_fault+0xf6/0x8c0 [ 1398.394494] ? vmalloc_sync_all+0x30/0x30 [ 1398.398650] ? do_syscall_64+0x820/0x820 [ 1398.402705] ? syscall_return_slowpath+0x31d/0x5e0 [ 1398.407630] ? sysret32_from_system_call+0x5/0x46 [ 1398.412463] ? page_fault+0x8/0x30 [ 1398.415993] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1398.420837] ? page_fault+0x8/0x30 [ 1398.424372] page_fault+0x1e/0x30 [ 1398.427814] RIP: 0023:0x809403c [ 1398.431081] Code: 8d b4 26 00 00 00 00 8d bc 27 00 00 00 00 55 57 56 53 81 ec cc 20 00 00 8b 58 68 85 db 0f 85 2b 01 00 00 c7 40 68 ff ff ff ff <89> 84 24 b0 00 00 00 89 c3 8d 84 24 c0 00 00 00 c7 84 24 80 00 00 [ 1398.450439] RSP: 002b:000000000845d720 EFLAGS: 00010246 [ 1398.455797] RAX: 0000000008120dc0 RBX: 00000000ffffffff RCX: 000000000845fd24 [ 1398.463058] RDX: 00000000080d6e23 RSI: 00000000ffffffff RDI: 0000000009439900 [ 1398.470329] RBP: 000000000845fcc8 R08: 0000000000000000 R09: 0000000000000000 [ 1398.477590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.484859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 07:49:20 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x47) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0xfffffffffffffffc) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 1398.492404] Task in /ile0 killed as a result of limit of /ile0 [ 1398.498494] memory: usage 112kB, limit 0kB, failcnt 710 [ 1398.503948] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1398.510778] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1398.516979] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB 07:49:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x3c, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0xa, 'ifb0\x00'}]}, 0x3c}}, 0x0) 07:49:20 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000060000)) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) epoll_wait(r0, &(0x7f0000b70000)=[{}], 0x1, 0x800) epoll_wait(r0, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xfb, 0x0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x190, 0xcd14) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 07:49:20 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=""/193, &(0x7f0000000280)=""/97, &(0x7f00000001c0)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x1, 0x1, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=""/4096, &(0x7f00000003c0)}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 1398.537299] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 1398.546202] [17951] 0 17951 17527 8729 110592 0 0 syz-executor3 [ 1398.555146] Memory cgroup out of memory: Kill process 17951 (syz-executor3) score 8756000 or sacrifice child [ 1398.565271] Killed process 17951 (syz-executor3) total-vm:70108kB, anon-rss:2148kB, file-rss:32768kB, shmem-rss:0kB 07:49:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)) 07:49:20 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r1}) 07:49:20 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000040)={0x2, 0x0, [{0x1}, {0x7}]}) [ 1398.666210] netlink: 'syz-executor0': attribute type 10 has an invalid length. 07:49:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000002c0)=0xfff, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/177, &(0x7f0000000000)=0xb1) 07:49:20 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r1}) 07:49:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89b1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @tcp_ip4_spec={@multicast1, @loopback}, {"d4b6", @broadcast}, @esp_ip6_spec={@ipv4={[], [], @multicast1}, @mcast2}, {"8617", @broadcast}}}}) 07:49:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x5, 0x0, "1ab7670182978f0300000000000004bf764095d43a5094f4b23c1c29b51dda91c51e08a14591eacd58d1107eb341398d6cef6fcdd1579b31460082f27dabdcdbeae7f5d8e8f9706468579ae10010a75b"}, 0xd8) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) 07:49:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d) 07:49:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)='\f', 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000040), 0x6) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:49:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x3c, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0xa, 'ifb0\x00'}]}, 0x3c}}, 0x0) 07:49:21 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x2) 07:49:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}}, 0x0) 07:49:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) 07:49:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d) [ 1398.993608] print_req_error: I/O error, dev loop0, sector 0 [ 1399.023256] netlink: 'syz-executor0': attribute type 10 has an invalid length. 07:49:21 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r1}) 07:49:21 executing program 1: r0 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000005a0007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 07:49:21 executing program 7: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000cf1ff4), 0xc, &(0x7f0000703000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840000000000000000000000000000000046659a62290ffc380c2dbfc75e89e106ba4206274d760dfe0597260617e101000006000000001cb4e2bf501db1bb9427ecd8337f6d63cc8769c29c4d91b00ffff0be48b748d3050bc1700612dbc3080c91125fa158cf0d70309f7f19007c8262d732940142ab1cf90b11e0141c63f5f94035"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f000053b000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 07:49:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffcce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)}]) 07:49:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x3c, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0xa, 'ifb0\x00'}]}, 0x3c}}, 0x0) 07:49:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d) 07:49:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}}, 0x0) 07:49:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x7, 0x4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, &(0x7f0000001740)="ee50000074d6179be92999120e1234932655996a6d088119", 0x18}]) 07:49:21 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r0 = socket(0x2, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0x3}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x203, 0x8103) 07:49:21 executing program 6: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e28000000080affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 1399.300867] netlink: 'syz-executor0': attribute type 10 has an invalid length. 07:49:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffcce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)}]) 07:49:21 executing program 7: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000850000)=@file={0x0, './file0\x00'}, 0x1) 07:49:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d) 07:49:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}}, 0x0) [ 1399.415644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.422489] bridge0: port 1(bridge_slave_0) entered disabled state 07:49:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="26230026c6ed"], 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000280)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x64, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/71, 0x47}, 0x3) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 07:49:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffcce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)}]) 07:49:21 executing program 7: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000850000)=@file={0x0, './file0\x00'}, 0x1) 07:49:21 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 07:49:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}}, 0x0) 07:49:21 executing program 7: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000850000)=@file={0x0, './file0\x00'}, 0x1) 07:49:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x6) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000100)) 07:49:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffcce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)}]) 07:49:21 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) 07:49:22 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r0 = socket(0x2, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0x3}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x203, 0x8103) 07:49:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x67d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) 07:49:22 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000204000/0x200000)=nil], &(0x7f0000000080), &(0x7f00000000c0), 0x0) 07:49:22 executing program 7: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000850000)=@file={0x0, './file0\x00'}, 0x1) 07:49:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) dup2(r1, r0) 07:49:22 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$TCSETSF(r0, 0x80045105, &(0x7f0000000000)) 07:49:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x404ffff8000]}) [ 1400.344370] syz-executor5: vmalloc: allocation failure: 8631877568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1400.356276] syz-executor5 cpuset=/ mems_allowed=0 [ 1400.361294] CPU: 1 PID: 18165 Comm: syz-executor5 Not tainted 4.18.0-rc7+ #76 [ 1400.368618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1400.377998] Call Trace: [ 1400.380622] dump_stack+0x1c9/0x2b4 [ 1400.384287] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1400.389508] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 1400.394404] warn_alloc.cold.117+0xb7/0x1bd [ 1400.398757] ? zone_watermark_ok_safe+0x3d0/0x3d0 [ 1400.403635] ? __schedule+0x884/0x1ec0 [ 1400.407526] ? print_usage_bug+0xc0/0xc0 [ 1400.411605] __vmalloc_node_range+0x472/0x760 [ 1400.416096] ? lock_acquire+0x1e4/0x540 [ 1400.420069] ? graph_lock+0x170/0x170 [ 1400.423874] ? kvm_arch_create_memslot+0xc0/0x570 [ 1400.428714] __vmalloc_node_flags_caller+0x75/0x90 [ 1400.433642] ? kvm_arch_create_memslot+0xc0/0x570 [ 1400.438487] kvmalloc_node+0xd7/0xf0 [ 1400.442201] kvm_arch_create_memslot+0xc0/0x570 [ 1400.446876] __kvm_set_memory_region+0x1d35/0x2e60 [ 1400.451819] ? kvm_vcpu_block+0x1070/0x1070 [ 1400.456142] ? zap_class+0x740/0x740 [ 1400.459858] ? kasan_check_write+0x14/0x20 [ 1400.464102] ? do_raw_spin_lock+0xc1/0x200 [ 1400.468336] ? graph_lock+0x170/0x170 [ 1400.472145] ? get_futex_value_locked+0xcb/0xf0 [ 1400.476835] ? print_usage_bug+0xc0/0xc0 [ 1400.480988] ? futex_wait_setup+0x281/0x410 [ 1400.485325] ? find_held_lock+0x36/0x1c0 [ 1400.489399] ? lock_downgrade+0x8f0/0x8f0 [ 1400.493555] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 1400.498683] kvm_set_memory_region+0x2e/0x50 [ 1400.503101] kvm_vm_ioctl+0x664/0x1d80 [ 1400.506986] ? perf_trace_lock+0x49d/0x920 [ 1400.511229] ? kvm_set_memory_region+0x50/0x50 [ 1400.515807] ? zap_class+0x740/0x740 [ 1400.519523] ? perf_trace_lock+0x920/0x920 [ 1400.523751] ? do_futex+0x249/0x27d0 [ 1400.527462] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1400.531864] ? graph_lock+0x170/0x170 [ 1400.536184] ? _raw_spin_unlock_irq+0x27/0x70 [ 1400.540688] ? exit_robust_list+0x290/0x290 [ 1400.545040] ? lock_downgrade+0x8f0/0x8f0 [ 1400.549195] ? rcu_is_watching+0x8c/0x150 [ 1400.553350] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1400.557766] ? __fget+0x414/0x670 [ 1400.561236] ? expand_files.part.8+0x9c0/0x9c0 [ 1400.565815] ? trace_hardirqs_off+0xd/0x10 [ 1400.570044] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1400.575164] ? kasan_check_read+0x11/0x20 [ 1400.579316] ? __fget_light+0x2f7/0x440 [ 1400.583297] kvm_vm_compat_ioctl+0x143/0x430 [ 1400.587705] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 1400.591858] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 1400.596801] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 1400.602504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1400.608042] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 1400.612198] __ia32_compat_sys_ioctl+0x221/0x640 [ 1400.616971] do_fast_syscall_32+0x34d/0xfb2 [ 1400.621312] ? do_int80_syscall_32+0x890/0x890 [ 1400.625900] ? kasan_check_write+0x14/0x20 [ 1400.630135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1400.635687] ? syscall_return_slowpath+0x31d/0x5e0 [ 1400.640619] ? sysret32_from_system_call+0x5/0x46 [ 1400.645471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1400.650329] entry_SYSENTER_compat+0x70/0x7f [ 1400.654742] RIP: 0023:0xf7f6bcb9 [ 1400.658105] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1400.677563] RSP: 002b:00000000f5f670cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1400.685281] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 000000004020ae46 [ 1400.692543] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1400.699805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1400.707075] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1400.714343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1400.722000] Mem-Info: [ 1400.724551] active_anon:38230 inactive_anon:338 isolated_anon:0 [ 1400.724551] active_file:6180 inactive_file:15334 isolated_file:0 [ 1400.724551] unevictable:0 dirty:58 writeback:0 unstable:0 [ 1400.724551] slab_reclaimable:10275 slab_unreclaimable:107291 [ 1400.724551] mapped:74511 shmem:346 pagetables:966 bounce:0 [ 1400.724551] free:844064 free_pcp:512 free_cma:0 [ 1400.758255] Node 0 active_anon:152920kB inactive_anon:1352kB active_file:24720kB inactive_file:61336kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:298044kB dirty:232kB writeback:0kB shmem:1384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 126976kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1400.786641] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1400.812980] lowmem_reserve[]: 0 2844 6351 6351 [ 1400.817750] Node 0 DMA32 free:2915936kB min:30192kB low:37740kB high:45288kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2916680kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:744kB local_pcp:132kB free_cma:0kB [ 1400.845636] lowmem_reserve[]: 0 0 3507 3507 [ 1400.850110] Node 0 Normal free:444868kB min:37224kB low:46528kB high:55832kB active_anon:153004kB inactive_anon:1340kB active_file:24720kB inactive_file:61348kB unevictable:0kB writepending:260kB present:4718592kB managed:3591240kB mlocked:0kB kernel_stack:7648kB pagetables:3732kB bounce:0kB free_pcp:1236kB local_pcp:588kB free_cma:0kB [ 1400.880131] lowmem_reserve[]: 0 0 0 0 [ 1400.884063] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 1400.897951] Node 0 DMA32: 4*4kB (UM) 4*8kB (UM) 5*16kB (M) 5*32kB (UM) 1*64kB (M) 2*128kB (M) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 709*4096kB (M) = 2915936kB [ 1400.914096] Node 0 Normal: 2546*4kB (UME) 682*8kB (UME) 542*16kB (UME) 325*32kB (UME) 214*64kB (UME) 59*128kB (UME) 68*256kB (UME) 35*512kB (UME) 73*1024kB (UME) 6*2048kB (UM) 65*4096kB (UM) = 444568kB [ 1400.932502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.941127] 21862 total pagecache pages [ 1400.945153] 0 pages in swap cache [ 1400.948668] Swap cache stats: add 0, delete 0, find 0/0 [ 1400.954080] Free swap = 0kB [ 1400.957131] Total swap = 0kB [ 1400.960182] 1965969 pages RAM [ 1400.963323] 0 pages HighMem/MovableOnly [ 1400.967359] 335012 pages reserved 07:49:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000140)}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a80)="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", 0x585}], 0x1, &(0x7f0000000280)}, 0x0) 07:49:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffff9c}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 07:49:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x67d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) 07:49:23 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x2ff}]}) 07:49:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') sendfile64(r0, r0, &(0x7f0000000080), 0x1002) 07:49:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x20, 0x22, 0x1, 0x0, 0x0, {0x3}, [@nested={0xc, 0x2, [@generic="d63f5dda70"]}]}, 0x20}}, 0x0) [ 1401.009799] syz-executor5: vmalloc: allocation failure: 8631877568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1401.021581] syz-executor5 cpuset=/ mems_allowed=0 [ 1401.026514] CPU: 1 PID: 18165 Comm: syz-executor5 Not tainted 4.18.0-rc7+ #76 [ 1401.033798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1401.043159] Call Trace: [ 1401.045747] dump_stack+0x1c9/0x2b4 [ 1401.049400] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1401.054593] warn_alloc.cold.117+0xb7/0x1bd [ 1401.058911] ? zone_watermark_ok_safe+0x3d0/0x3d0 [ 1401.063751] ? __schedule+0x884/0x1ec0 [ 1401.067639] ? print_usage_bug+0xc0/0xc0 [ 1401.071706] __vmalloc_node_range+0x472/0x760 [ 1401.076194] ? lock_acquire+0x1e4/0x540 [ 1401.080160] ? graph_lock+0x170/0x170 [ 1401.083958] ? kvm_arch_create_memslot+0xc0/0x570 [ 1401.088795] __vmalloc_node_flags_caller+0x75/0x90 [ 1401.093713] ? kvm_arch_create_memslot+0xc0/0x570 [ 1401.098547] kvmalloc_node+0xd7/0xf0 [ 1401.102255] kvm_arch_create_memslot+0xc0/0x570 [ 1401.106925] __kvm_set_memory_region+0x1d35/0x2e60 [ 1401.111858] ? kvm_vcpu_block+0x1070/0x1070 [ 1401.116178] ? zap_class+0x740/0x740 [ 1401.119884] ? refill_pi_state_cache.part.8+0x320/0x320 [ 1401.125244] ? kasan_check_write+0x14/0x20 [ 1401.129471] ? do_raw_spin_lock+0xc1/0x200 [ 1401.133696] ? graph_lock+0x170/0x170 [ 1401.137488] ? get_futex_value_locked+0xcb/0xf0 [ 1401.142150] ? print_usage_bug+0xc0/0xc0 [ 1401.146202] ? futex_wait_setup+0x281/0x410 [ 1401.150528] ? find_held_lock+0x36/0x1c0 [ 1401.154591] ? lock_downgrade+0x8f0/0x8f0 [ 1401.158741] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 1401.163852] kvm_set_memory_region+0x2e/0x50 [ 1401.168256] kvm_vm_ioctl+0x664/0x1d80 [ 1401.172154] ? perf_trace_lock+0x49d/0x920 [ 1401.176384] ? kvm_set_memory_region+0x50/0x50 [ 1401.180956] ? zap_class+0x740/0x740 [ 1401.184662] ? do_futex+0x249/0x27d0 [ 1401.188366] ? rcu_is_watching+0x8c/0x150 [ 1401.192505] ? graph_lock+0x170/0x170 [ 1401.196298] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1401.200701] ? exit_robust_list+0x290/0x290 [ 1401.205042] ? lock_downgrade+0x8f0/0x8f0 [ 1401.209189] ? rcu_is_watching+0x8c/0x150 [ 1401.213329] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1401.217736] ? __fget+0x414/0x670 [ 1401.221185] ? expand_files.part.8+0x9c0/0x9c0 [ 1401.225759] ? trace_hardirqs_off+0xd/0x10 [ 1401.229984] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1401.235084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1401.240616] ? kasan_check_read+0x11/0x20 [ 1401.244750] ? rcu_is_watching+0x8c/0x150 [ 1401.248885] ? rcu_pm_notify+0xc0/0xc0 [ 1401.252767] ? __fget_light+0x2f7/0x440 [ 1401.256740] kvm_vm_compat_ioctl+0x143/0x430 [ 1401.261144] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 1401.265280] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 1401.270206] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 1401.275921] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 1401.280061] __ia32_compat_sys_ioctl+0x221/0x640 [ 1401.284815] do_fast_syscall_32+0x34d/0xfb2 [ 1401.289146] ? do_int80_syscall_32+0x890/0x890 [ 1401.293718] ? kasan_check_write+0x14/0x20 [ 1401.297947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1401.303473] ? syscall_return_slowpath+0x31d/0x5e0 [ 1401.308397] ? sysret32_from_system_call+0x5/0x46 [ 1401.313244] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1401.318082] entry_SYSENTER_compat+0x70/0x7f [ 1401.322482] RIP: 0023:0xf7f6bcb9 [ 1401.325828] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1401.345167] RSP: 002b:00000000f5f670cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1401.352867] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 000000004020ae46 07:49:23 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r0 = socket(0x2, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0x3}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x203, 0x8103) 07:49:23 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}}) clone(0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000100)) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000003840)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000003900)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033", 0x29}], 0x1}, 0x0) [ 1401.360128] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1401.367735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1401.374994] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1401.382258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 07:49:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000680)) 07:49:23 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x100000001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc2c45513, &(0x7f0000000200)={{0x5, 0x0, 0x0, 0x0, "86195c5f6d862e013a2f76442ee8b753ffe838973c28fddca83501e3463516037660c46107d1ab965d3aa901"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "260a799355392df37b409772ec0b18ad45f8393ae38dfa72eb8a4c6cb6de26c4c869de5ed38f81dbb4b0b77d9c52f5836999c6f111f4769edd21d83716cbf3be", &(0x7f00000001c0), 0x7}) 07:49:23 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r0 = socket(0x2, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0x3}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x203, 0x8103) 07:49:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') sendfile64(r0, r0, &(0x7f0000000080), 0x1002) 07:49:23 executing program 7: munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) io_pgetevents(0x0, 0xfffffffffffffffe, 0xb22, &(0x7f0000000100), &(0x7f0000000280)={0x77359400}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in=@multicast2, @in6=@loopback, 0x4e24, 0x5, 0x4e22, 0x3, 0x2, 0x20, 0x20, 0x73, r1, r2}, {0x101, 0x3, 0x5, 0x7f, 0x0, 0x1, 0x0, 0x80000001}, {0x9, 0x0, 0x0, 0x7}, 0x0, 0x6e6bbe, 0x2, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x2, 0x0, 0x80000000, 0x5, 0x81}}, 0xe8) getrandom(&(0x7f0000000080)=""/82, 0x52, 0x2) prctl$setname(0xf, &(0x7f0000000240)='&wlan0\'nvrelf\x00\x00\x00\x00') setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x8, 0x4) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff}) read(r3, &(0x7f00000002c0)=""/4096, 0x1000) 07:49:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x67d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) 07:49:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0xfffffffff7ffff9c, 0x0, 'client0\x00', 0x0, "0000000000000005", "21584122836a19aeff833672a7e0a3b5770c88c9965f25bac89f61888c2ed633"}) 07:49:24 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x10000009, 0xffffffffffffffff, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x7) syz_open_dev$mouse(&(0x7f0000001e40)='/dev/input/mouse#\x00', 0x0, 0x200300) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000003000)=ANY=[], &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001f80)={0x0, 0x2, 0x7fff, 0x2}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x131280) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000300)={0x2, 0x7, 0x80, 0x2}, 0x8) 07:49:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}}) clone(0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000100)) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000003840)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000003900)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033", 0x29}], 0x1}, 0x0) 07:49:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 07:49:24 executing program 1: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084503, &(0x7f0000002ffc)) 07:49:24 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @rand_addr=0xfffffffffffeffff}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @random="9f97af2700d1", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000040)) 07:49:24 executing program 7: munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) io_pgetevents(0x0, 0xfffffffffffffffe, 0xb22, &(0x7f0000000100), &(0x7f0000000280)={0x77359400}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in=@multicast2, @in6=@loopback, 0x4e24, 0x5, 0x4e22, 0x3, 0x2, 0x20, 0x20, 0x73, r1, r2}, {0x101, 0x3, 0x5, 0x7f, 0x0, 0x1, 0x0, 0x80000001}, {0x9, 0x0, 0x0, 0x7}, 0x0, 0x6e6bbe, 0x2, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x2, 0x0, 0x80000000, 0x5, 0x81}}, 0xe8) getrandom(&(0x7f0000000080)=""/82, 0x52, 0x2) prctl$setname(0xf, &(0x7f0000000240)='&wlan0\'nvrelf\x00\x00\x00\x00') setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x8, 0x4) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff}) read(r3, &(0x7f00000002c0)=""/4096, 0x1000) 07:49:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') sendfile64(r0, r0, &(0x7f0000000080), 0x1002) 07:49:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x67d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) 07:49:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x13}, 0x14}}, 0x0) 07:49:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') sendfile64(r0, r0, &(0x7f0000000080), 0x1002) 07:49:24 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000016000)=[{&(0x7f0000010fd1)="2f000000210003fd6dd40000060000000203000000000000000000c8080001000000737e0beee2ff005867855e7fa5", 0x2f}], 0x1}, 0x0) 07:49:24 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0xffffffffffffffff, 0x800}, 0x18) 07:49:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}}) clone(0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000100)) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000003840)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000003900)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033", 0x29}], 0x1}, 0x0) 07:49:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00001a6ff0)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f0000fdefc8)={&(0x7f000058e000)=@ll, 0x14, &(0x7f0000f42000), 0x0, &(0x7f0000fde000)=""/30, 0x1e}, 0x0) [ 1402.223511] netlink: 11 bytes leftover after parsing attributes in process `syz-executor4'. 07:49:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={"6c6f3a8ca23a2330cc3000"}) 07:49:24 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x8004745a, &(0x7f0000000180)) 07:49:24 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x10000009, 0xffffffffffffffff, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x7) syz_open_dev$mouse(&(0x7f0000001e40)='/dev/input/mouse#\x00', 0x0, 0x200300) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000003000)=ANY=[], &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001f80)={0x0, 0x2, 0x7fff, 0x2}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x131280) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000300)={0x2, 0x7, 0x80, 0x2}, 0x8) 07:49:24 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="275f6f650ab2", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xffffffea, 0x0, 0x0, 0x0, @empty, @rand_addr}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 07:49:24 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(0xffffffffffffffff, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000fbc000)) 07:49:24 executing program 2: r0 = socket(0x10000000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000f56fdc)="240000002e001f811f101a00000000002300f9ffffffffffffffffff08ffffff04010061", 0x24) 07:49:24 executing program 7: munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) io_pgetevents(0x0, 0xfffffffffffffffe, 0xb22, &(0x7f0000000100), &(0x7f0000000280)={0x77359400}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in=@multicast2, @in6=@loopback, 0x4e24, 0x5, 0x4e22, 0x3, 0x2, 0x20, 0x20, 0x73, r1, r2}, {0x101, 0x3, 0x5, 0x7f, 0x0, 0x1, 0x0, 0x80000001}, {0x9, 0x0, 0x0, 0x7}, 0x0, 0x6e6bbe, 0x2, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x2, 0x0, 0x80000000, 0x5, 0x81}}, 0xe8) getrandom(&(0x7f0000000080)=""/82, 0x52, 0x2) prctl$setname(0xf, &(0x7f0000000240)='&wlan0\'nvrelf\x00\x00\x00\x00') setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x8, 0x4) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff}) read(r3, &(0x7f00000002c0)=""/4096, 0x1000) 07:49:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00001a6ff0)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f0000fdefc8)={&(0x7f000058e000)=@ll, 0x14, &(0x7f0000f42000), 0x0, &(0x7f0000fde000)=""/30, 0x1e}, 0x0) 07:49:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000007c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}}) clone(0x0, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000100)) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000003840)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000003900)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033", 0x29}], 0x1}, 0x0) 07:49:24 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000d40)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000dc0)=""/208, 0xd0}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000000ec0)=""/219, 0xdb}], 0x6, &(0x7f00000012c0)=""/41, 0x29}}], 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) 07:49:24 executing program 3: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @broadcast}, 0xc) rt_sigaction(0x7, &(0x7f0000000000)={0xffffffffffffff0f}, &(0x7f0000d4efe8), 0x8, &(0x7f0000312ff8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)="050200000000008f00") 07:49:24 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0xffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0), 0xae) 07:49:24 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000140)=0x6e, 0x80800) fchmod(r3, 0x4) bind$alg(r2, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) fdatasync(r5) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x800, 0x7, 0x4000000000000000, 0x3e9}, &(0x7f0000000300)=0x14) 07:49:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socket$inet6(0xa, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffec4}, 0x100) shutdown(r1, 0x1) 07:49:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)) 07:49:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) [ 1402.976785] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1402.987885] syz-executor4 cpuset=/ mems_allowed=0 [ 1402.992840] CPU: 0 PID: 18322 Comm: syz-executor4 Not tainted 4.18.0-rc7+ #76 [ 1403.000207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.009570] Call Trace: [ 1403.012171] dump_stack+0x1c9/0x2b4 [ 1403.015796] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1403.020992] ? trace_hardirqs_on+0x10/0x10 [ 1403.025226] dump_header+0x27b/0xf64 [ 1403.028939] ? pagefault_out_of_memory+0x197/0x197 [ 1403.033859] ? perf_trace_lock+0xde/0x920 [ 1403.038022] ? __lock_acquire+0x7fc/0x5020 [ 1403.042252] ? zap_class+0x740/0x740 [ 1403.045954] ? print_usage_bug+0xc0/0xc0 [ 1403.050019] ? perf_trace_lock+0xde/0x920 [ 1403.054161] ? graph_lock+0x170/0x170 [ 1403.057952] ? print_usage_bug+0xc0/0xc0 [ 1403.062021] ? zap_class+0x740/0x740 [ 1403.065736] ? print_usage_bug+0xc0/0xc0 [ 1403.069797] ? lock_downgrade+0x8f0/0x8f0 [ 1403.073943] ? mark_held_locks+0xc9/0x160 [ 1403.078079] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1403.082654] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1403.087748] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1403.092756] ? trace_hardirqs_on+0xd/0x10 [ 1403.096896] ? ___ratelimit+0xaa/0x655 [ 1403.100775] ? idr_get_free+0x10c0/0x10c0 [ 1403.104912] ? kasan_check_write+0x14/0x20 [ 1403.109135] ? do_raw_spin_lock+0xc1/0x200 [ 1403.113363] oom_kill_process.cold.25+0x10/0x10bc [ 1403.118222] ? oom_evaluate_task+0x540/0x540 [ 1403.122620] ? find_held_lock+0x36/0x1c0 [ 1403.126681] ? lock_downgrade+0x8f0/0x8f0 [ 1403.130824] ? rcu_is_watching+0x8c/0x150 [ 1403.134960] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1403.139367] ? oom_badness+0xb00/0xb00 [ 1403.143247] ? rcu_read_unlock+0x35/0x70 [ 1403.147296] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1403.151521] ? css_task_iter_end+0x2ce/0x490 [ 1403.155920] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1403.160665] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1403.165672] ? trace_hardirqs_on+0xd/0x10 [ 1403.169808] ? _raw_spin_unlock_irq+0x27/0x70 [ 1403.174291] ? oom_badness+0xb00/0xb00 [ 1403.178170] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1403.182917] ? mem_cgroup_iter_break+0x30/0x30 [ 1403.187504] out_of_memory+0xa8a/0x14d0 [ 1403.191478] ? oom_killer_disable+0x3a0/0x3a0 [ 1403.195971] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1403.200986] ? trace_hardirqs_on+0xd/0x10 [ 1403.205136] mem_cgroup_out_of_memory+0x15e/0x210 [ 1403.209973] ? memcg_memory_event+0x40/0x40 [ 1403.214288] ? _raw_spin_unlock+0x22/0x30 [ 1403.218430] mem_cgroup_oom_synchronize+0x713/0x940 [ 1403.223436] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1403.228877] ? memcg_event_wake+0x450/0x450 [ 1403.233202] pagefault_out_of_memory+0xc8/0x197 [ 1403.237872] ? out_of_memory+0x14d0/0x14d0 [ 1403.242106] ? __handle_mm_fault+0x4460/0x4460 [ 1403.246681] mm_fault_error+0x1de/0x380 [ 1403.250650] __do_page_fault+0xd25/0xe50 [ 1403.254707] ? mm_fault_error+0x380/0x380 [ 1403.258847] ? __ia32_sys_mmap_pgoff+0xdd/0x1a0 [ 1403.263510] do_page_fault+0xf6/0x8c0 [ 1403.267311] ? vmalloc_sync_all+0x30/0x30 [ 1403.271454] ? do_syscall_64+0x820/0x820 [ 1403.275507] ? syscall_return_slowpath+0x31d/0x5e0 [ 1403.280433] ? sysret32_from_system_call+0x5/0x46 [ 1403.285276] ? page_fault+0x8/0x30 [ 1403.288806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1403.293640] ? page_fault+0x8/0x30 [ 1403.297171] page_fault+0x1e/0x30 [ 1403.300614] RIP: 0023:0x809403c [ 1403.304136] Code: 8d b4 26 00 00 00 00 8d bc 27 00 00 00 00 55 57 56 53 81 ec cc 20 00 00 8b 58 68 85 db 0f 85 2b 01 00 00 c7 40 68 ff ff ff ff <89> 84 24 b0 00 00 00 89 c3 8d 84 24 c0 00 00 00 c7 84 24 80 00 00 [ 1403.323469] RSP: 002b:000000000845d720 EFLAGS: 00010246 [ 1403.328834] RAX: 0000000008120dc0 RBX: 00000000ffffffff RCX: 000000000845fd24 [ 1403.336091] RDX: 00000000080d6e23 RSI: 00000000ffffffff RDI: 0000000009c54900 [ 1403.343348] RBP: 000000000845fcc8 R08: 0000000000000000 R09: 0000000000000000 [ 1403.350616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.357872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1403.365302] Task in /ile0 killed as a result of limit of /ile0 [ 1403.371385] memory: usage 112kB, limit 0kB, failcnt 742 [ 1403.376821] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1403.383660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1403.389876] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1403.409773] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 1403.418643] [18322] 0 18322 17527 8730 110592 0 0 syz-executor4 07:49:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00001a6ff0)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f0000fdefc8)={&(0x7f000058e000)=@ll, 0x14, &(0x7f0000f42000), 0x0, &(0x7f0000fde000)=""/30, 0x1e}, 0x0) 07:49:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x2f, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000004c0)) 07:49:25 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x10000009, 0xffffffffffffffff, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x7) syz_open_dev$mouse(&(0x7f0000001e40)='/dev/input/mouse#\x00', 0x0, 0x200300) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000003000)=ANY=[], &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001f80)={0x0, 0x2, 0x7fff, 0x2}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x131280) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000300)={0x2, 0x7, 0x80, 0x2}, 0x8) 07:49:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dsp\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/181, 0xb5) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10813, r0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x8) [ 1403.427610] Memory cgroup out of memory: Kill process 18322 (syz-executor4) score 8757000 or sacrifice child [ 1403.437683] Killed process 18322 (syz-executor4) total-vm:70108kB, anon-rss:2152kB, file-rss:32768kB, shmem-rss:0kB [ 1403.450752] oom_reaper: reaped process 18322 (syz-executor4), now anon-rss:0kB, file-rss:32092kB, shmem-rss:0kB 07:49:25 executing program 2: r0 = socket(0x15, 0x80005, 0x0) connect$can_bcm(r0, &(0x7f0000000040), 0x10) 07:49:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000180)="bf", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 07:49:25 executing program 7: munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) io_pgetevents(0x0, 0xfffffffffffffffe, 0xb22, &(0x7f0000000100), &(0x7f0000000280)={0x77359400}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000012c0)={{{@in=@multicast2, @in6=@loopback, 0x4e24, 0x5, 0x4e22, 0x3, 0x2, 0x20, 0x20, 0x73, r1, r2}, {0x101, 0x3, 0x5, 0x7f, 0x0, 0x1, 0x0, 0x80000001}, {0x9, 0x0, 0x0, 0x7}, 0x0, 0x6e6bbe, 0x2, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in=@remote, 0x0, 0x4, 0x2, 0x0, 0x80000000, 0x5, 0x81}}, 0xe8) getrandom(&(0x7f0000000080)=""/82, 0x52, 0x2) prctl$setname(0xf, &(0x7f0000000240)='&wlan0\'nvrelf\x00\x00\x00\x00') setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x8, 0x4) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff}) read(r3, &(0x7f00000002c0)=""/4096, 0x1000) 07:49:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00001a6ff0)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f0000fdefc8)={&(0x7f000058e000)=@ll, 0x14, &(0x7f0000f42000), 0x0, &(0x7f0000fde000)=""/30, 0x1e}, 0x0) 07:49:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x2f, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000004c0)) 07:49:25 executing program 6: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) 07:49:25 executing program 2: getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001000)={0x0, 0x8367, 0x0, 0x7fffffff}, &(0x7f000000affc)=0x20) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000ff8)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000)) 07:49:25 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x9) 07:49:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x2f, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000004c0)) 07:49:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x200}]}) 07:49:26 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffd}) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000002c0)={0x8}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 07:49:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x7, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000300)=0x3) 07:49:26 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x10000009, 0xffffffffffffffff, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x7) syz_open_dev$mouse(&(0x7f0000001e40)='/dev/input/mouse#\x00', 0x0, 0x200300) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000003000)=ANY=[], &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001f80)={0x0, 0x2, 0x7fff, 0x2}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x131280) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000300)={0x2, 0x7, 0x80, 0x2}, 0x8) 07:49:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x2f, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000004c0)) 07:49:26 executing program 2: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="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") sendfile(r0, r1, &(0x7f0000000040), 0xfffffffe) 07:49:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/2) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x1, {{0x7}}}, 0x28) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x10, 0x0, 0x2}, 0x10) 07:49:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x200}]}) 07:49:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0xfffffffffffffda3, 0x800020, &(0x7f0000009000)}) [ 1404.317011] binder: 18433:18435 transaction failed 29189/-22, size 40-8 line 2852 [ 1404.353497] binder: 18433:18438 transaction failed 29189/-22, size 40-8 line 2852 07:49:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:49:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x200}]}) 07:49:26 executing program 5: syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x0, 0x0, 0x4, 0xf000, 0x0, 0x0, 0x0, 0x2, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)) 07:49:26 executing program 3: r0 = getpid() ioprio_set$pid(0x2, r0, 0x0) 07:49:26 executing program 2: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="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") sendfile(r0, r1, &(0x7f0000000040), 0xfffffffe) 07:49:26 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_PIT2(r1, 0xc048ae65, &(0x7f00000001c0)) 07:49:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000540)={'S\x00', "e7a7aeabec2e36b39ccecf31f70940e92ad92aba8c8ac9590000000013abdd543c9622afd49687b492c6821702590851d92a873dd3532c452ae8708a6a31ce3c4fd0813809eab69bb22c35b2457638f6d2a0222d"}, 0x58) 07:49:26 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\n'], 0x1) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000180), &(0x7f00000003c0), 0x1000) 07:49:26 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1) 07:49:26 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"73797a5f74756e00000000000000e8ff", 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 07:49:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x200}]}) 07:49:26 executing program 0: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, &(0x7f0000000000), &(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES32]]]}, 0x54) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1}, 0x6e) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r2, &(0x7f0000000200)=@abs={0x1}, 0x6e) 07:49:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:49:27 executing program 7: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="3b00000002000000ff42f18d9b"]}) 07:49:27 executing program 2: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f000000000000000045cc6158f031528844209c7ed05b160ef336721bf89686ff472f71dfca5353f6323ddf8006ffc1052d6a80985adc68017065648b35c7d321fc5c0466062fbfad5acbe7ff6cefe53c88c05ab970ceebdfa589098ad40d080deb2488f9e4069682b14483f113cb6979b2f390179a18e26b4088f1f31ed04a0a681f002e007436947475ab073711c98ae3b4259f1a1aff9b09aa66cb90ca43a1dbc6de15abb4ae739f9e8f047cd29ec76b9ef6beb7839f8071aaea4d247e6a9514748c93d0bb01a7c37ca6c856327af81f296d2c2c07c2d63b") sendfile(r0, r1, &(0x7f0000000040), 0xfffffffe) 07:49:27 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/217, 0xd9}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000440)=""/109, 0x6d}], 0x7}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f00000002c0), 0x13, &(0x7f00000036c0)=""/64, 0x40}}], 0x6, 0x0, &(0x7f0000000300)={0x77359400}) 07:49:27 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:49:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x100000001}, 0xffffffffffffff3a) 07:49:27 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x65) shutdown(r0, 0x0) 07:49:27 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 07:49:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010a07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 07:49:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000), 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10}, 0x10}}, 0x0) 07:49:27 executing program 1: r0 = memfd_create(&(0x7f0000003000)='\x00', 0x0) r1 = fcntl$dupfd(r0, 0x40a, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000000080), 0x20) 07:49:27 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, "4f019b55a1be58df7b55762023ad56d08f16133d2099807ad4d300"}) 07:49:27 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000001edaaea25b8ab856e52adfe344022e1ede4bc4263561792b2fecfffffffffffffc89"]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={"736974300000000000000200", @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 07:49:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000000200000001"]) 07:49:27 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000280)) 07:49:27 executing program 1: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000180)=""/176) 07:49:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x0, 0x0) close(r0) 07:49:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000), 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10}, 0x10}}, 0x0) 07:49:27 executing program 2: r0 = socket(0x10, 0x3, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="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") sendfile(r0, r1, &(0x7f0000000040), 0xfffffffe) 07:49:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000), 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10}, 0x10}}, 0x0) 07:49:28 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x1, @rand_addr=0x1}}, 0x1e) 07:49:28 executing program 7: syz_open_procfs(0x0, &(0x7f0000ff6ff7)="0000d70000000000c2") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$int_out(r0, 0x1, &(0x7f0000fd3ffc)) 07:49:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) 07:49:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x4) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000f62000)=""/89, 0x59}}], 0x40000000000004e, 0x2042, 0x0) 07:49:28 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000), 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10}, 0x10}}, 0x0) 07:49:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:49:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000), 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10}, 0x10}}, 0x0) 07:49:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 07:49:28 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0xc, 0x1, [@typed={0x8, 0x0, @uid}]}]}]}, 0x30}}, 0x0) 07:49:28 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x7d, &(0x7f0000000100), 0x0) 07:49:28 executing program 5: capget(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)) 07:49:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000), 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10}, 0x10}}, 0x0) 07:49:28 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_crypto(r1, &(0x7f000037ffc8)={&(0x7f0000041000), 0xc, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10}, 0x10}}, 0x0) 07:49:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) 07:49:28 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400021b, 0xb605) 07:49:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2710, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0xc08) 07:49:28 executing program 7: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 07:49:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) 07:49:28 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0xff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000008c0)) r1 = getpgrp(0xffffffffffffffff) r2 = getpgid(r1) sched_setparam(r2, &(0x7f0000000080)=0x6) r3 = getpgid(0x0) wait4(r3, &(0x7f00000000c0), 0x4, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0xc0) ioctl$BLKFRASET(r4, 0x1264, &(0x7f00000001c0)=0x10002) r5 = dup(r0) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e22, 0x0, @loopback, 0x8}}, 0x101, 0x5, 0x80000000, "5ce2fc3d1009e47916df0df1ca216fca0a270b6d2059748740c99d9f366cf3fe835110a7b9a044c9f0e41bf02fc5c0c8be55fc176376870f235747b90b0ab2fcb9daa2b3b9c7a434277497039c2f676c"}, 0xd8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) sendmsg$nl_netfilter(r4, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000054}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x164, 0xb, 0xb, 0x104, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x5}, [@typed={0x54, 0x43, @binary="62f2449660d2ee8f4bb678cccb301ce9b150106aa00737dbb20ed96817cedb69ba4611fb7335013a1685fec161c1024ed674a740d3057ab758f0799071306c3582189c2d0ee3d4ca72bd511f5556bc"}, @typed={0x8, 0x7a, @uid=r6}, @generic="07bb20d4e32e24528a25a795da75162b822082469d5c45c9d6aacb188d7e18dad291f810bcc87bc48755294ba832f4881ed0569c35b609b52fa44597ecc2a5d5ecb1e3c86d8ca08b03cbb1c2e9e7e55b9d526b04439800af5dc45ec2044121a1e762a72201eb4dcd149ef48597b082aa8de38544e845eb5d4d9c60b0bc707642d99c897909336925b638207948bf119f98332468d43e59eb3546c9f797e46c95d0372f9f564dfa8e772d50152332eb8c78f953dcd2f1f1f805651da62f90627e3ad518ba3d0ff2b1ac4d2d138e1d987478c3369c4871bc93032c4f6f8cc0925a15d67a631425e5870ba62bf137577e5698"]}, 0x164}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getcwd(&(0x7f00000003c0)=""/209, 0xd1) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000240)={0xb49, 0x7, 0xde00000000000, 0x0, 0x2, 0x750e, 0x8, 0x5d6d, 0x6, 0x8, 0x7, 0x8, 0x0, 0x2, 0x101, 0x4, 0x5, 0x6, 0x400}) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x2) ftruncate(r7, 0x7fff) sendfile(r5, r7, &(0x7f0000000000), 0x8000fffffffe) 07:49:28 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) pwritev(r0, &(0x7f0000f65000)=[{&(0x7f0000000180)="80fd3ca8e08c", 0x6}], 0x1, 0x0) 07:49:28 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000200)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}, @sadb_lifetime={0x4, 0x3, 0x9}]}, 0xa0}}, 0x0) 07:49:28 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 07:49:28 executing program 4: sched_setaffinity(0x0, 0xffffffffffffff92, &(0x7f0000000140)=0xfff) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = memfd_create(&(0x7f0000000000)="2f6465762f6ca49b0e694e", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) 07:49:28 executing program 2: rt_sigaction(0x9, &(0x7f0000000fe8), &(0x7f0000000fe8), 0x8, &(0x7f0000fbc000)) 07:49:28 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pause() ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0), 0x0) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)}, 0x0) 07:49:28 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x2}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) dup3(r0, r1, 0x0) socket$xdp(0x2c, 0x3, 0x0) 07:49:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x10400003) 07:49:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) 07:49:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x800, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f00000012c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/158, 0x9e}], 0x1, &(0x7f0000004480)=""/42, 0x2a}}], 0x1, 0x0, &(0x7f0000004a80)) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x42f, &(0x7f0000001200), 0x322}, 0x0) 07:49:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r0}) 07:49:28 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000006cc0)=@nfc={0x1e}, 0x80, &(0x7f0000000000), 0x20000000000001ba, &(0x7f0000009d00)}}], 0x2, 0x0) [ 1406.746298] print_req_error: I/O error, dev loop0, sector 0 07:49:28 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x2}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) dup3(r0, r1, 0x0) socket$xdp(0x2c, 0x3, 0x0) [ 1406.829116] print_req_error: I/O error, dev loop0, sector 4096 07:49:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffcfc) recvmsg(r1, &(0x7f0000002840)={&(0x7f0000001480)=@hci, 0x80, &(0x7f0000002780)=[{&(0x7f0000001640)=""/4, 0x4}, {&(0x7f0000002680)=""/223, 0xdf}], 0x2, &(0x7f00000027c0)=""/121, 0x79}, 0x0) 07:49:29 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="f1cec3281d34", @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, &(0x7f0000000280)) 07:49:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bbf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35010000000000000000") flistxattr(r0, &(0x7f0000000080)=""/156, 0xffffffffffffff3f) 07:49:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x7a}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2c, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 07:49:29 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x2}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) dup3(r0, r1, 0x0) socket$xdp(0x2c, 0x3, 0x0) 07:49:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 07:49:29 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pause() ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:29 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr}, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) 07:49:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x2}}]}, 0x2c}}, 0x0) 07:49:29 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd, 0x0, 0x2}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) dup3(r0, r1, 0x0) socket$xdp(0x2c, 0x3, 0x0) 07:49:29 executing program 1: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf401, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x4, 0x0, 0x0, @broadcast}}}}}, &(0x7f0000000040)) 07:49:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000080)=0xffe00000, 0x4) 07:49:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@random="cb9672fb8a00", @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xac1414bb, @multicast1=0xac14140a}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 07:49:29 executing program 2: socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 07:49:29 executing program 0: r0 = eventfd2(0x0, 0x1) read$eventfd(r0, &(0x7f0000000080), 0xfffffffffffffdf4) io_setup(0x800000020, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) 07:49:29 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x4143, &(0x7f0000000040)) [ 1407.636062] netlink: 'syz-executor3': attribute type 21 has an invalid length. 07:49:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffcfc) recvmsg(r1, &(0x7f0000002840)={&(0x7f0000001480)=@hci, 0x80, &(0x7f0000002780)=[{&(0x7f0000001640)=""/4, 0x4}, {&(0x7f0000002680)=""/223, 0xdf}], 0x2, &(0x7f00000027c0)=""/121, 0x79}, 0x0) 07:49:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 07:49:29 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffff90}}) read$eventfd(r0, &(0x7f0000000100), 0xfffffffffffffe32) 07:49:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{0x1}, {0x80000008}, {0x80000000, 0xfffffffffffffffe}]}) 07:49:29 executing program 2: socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 07:49:29 executing program 3: select(0x8048000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)={0x77359400}) 07:49:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pause() ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:30 executing program 2: socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 07:49:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000000c0), 0x10) 07:49:30 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x84e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000100)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000000)='4', 0x1, 0x8080, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) close(r0) 07:49:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{0x1}, {0x80000008}, {0x80000000, 0xfffffffffffffffe}]}) 07:49:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffcfc) recvmsg(r1, &(0x7f0000002840)={&(0x7f0000001480)=@hci, 0x80, &(0x7f0000002780)=[{&(0x7f0000001640)=""/4, 0x4}, {&(0x7f0000002680)=""/223, 0xdf}], 0x2, &(0x7f00000027c0)=""/121, 0x79}, 0x0) 07:49:30 executing program 3: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f00000000c0)="1f00000056000d6dfcffff05bc0203030701ff2104173f8100000002030039", 0x1f) getpid() 07:49:30 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) 07:49:30 executing program 0: r0 = eventfd2(0x0, 0x1) read$eventfd(r0, &(0x7f0000000080), 0xfffffffffffffdf4) io_setup(0x800000020, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) 07:49:30 executing program 2: socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 07:49:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{0x1}, {0x80000008}, {0x80000000, 0xfffffffffffffffe}]}) 07:49:30 executing program 1: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) 07:49:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"6c6f3a2c000081800000faffdff700", &(0x7f0000000100)=@ethtool_cmd={0x14}}) 07:49:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x200000088) connect$inet6(r0, &(0x7f0000000280), 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:49:30 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffe07, &(0x7f00000012c0)) 07:49:30 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x11, @loopback, 0x0, 0x0, 'sh\x00', 0x2}, 0x2c) [ 1408.723699] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b3a/0x1d80 [ 1408.738397] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b3a/0x1d80 07:49:31 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pause() ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f00000001c0)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623692500080004001000080000000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 07:49:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{0x1}, {0x80000008}, {0x80000000, 0xfffffffffffffffe}]}) 07:49:31 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f}}, 0xfffffffffffffec8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0xb, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @dev}}}, 0xff81) 07:49:31 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000ac0)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000a40)='ramfs\x00', 0x0, &(0x7f0000000b80)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 07:49:31 executing program 1: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x38}, [{}]}, 0x58) uselib(&(0x7f00000001c0)='./file0\x00') 07:49:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffcfc) recvmsg(r1, &(0x7f0000002840)={&(0x7f0000001480)=@hci, 0x80, &(0x7f0000002780)=[{&(0x7f0000001640)=""/4, 0x4}, {&(0x7f0000002680)=""/223, 0xdf}], 0x2, &(0x7f00000027c0)=""/121, 0x79}, 0x0) 07:49:31 executing program 6: ptrace(0xfff0000000000000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigreturn() 07:49:31 executing program 0: r0 = eventfd2(0x0, 0x1) read$eventfd(r0, &(0x7f0000000080), 0xfffffffffffffdf4) io_setup(0x800000020, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) 07:49:31 executing program 1: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x38}, [{}]}, 0x58) uselib(&(0x7f00000001c0)='./file0\x00') 07:49:31 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x57, &(0x7f0000000040)) io_setup(0x5, &(0x7f0000000080)) io_setup(0x8000, &(0x7f00000000c0)) io_setup(0x800, &(0x7f0000000100)) io_setup(0x1f, &(0x7f0000000140)) 07:49:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0x20, 0x29, 0x2, "4bc333b8595a865187089d9bd700000004"}], 0x20}}], 0x2, 0x0) 07:49:31 executing program 3: syz_emit_ethernet(0x14, &(0x7f00000c5fe8)={@local, @empty, [], {@generic={0x8863, "94a7030000e8"}}}, &(0x7f0000b0c000)) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @remote}}, 0x5c) 07:49:31 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x57, &(0x7f0000000040)) io_setup(0x5, &(0x7f0000000080)) io_setup(0x8000, &(0x7f00000000c0)) io_setup(0x800, &(0x7f0000000100)) io_setup(0x1f, &(0x7f0000000140)) 07:49:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f0000000000)={&(0x7f00003c0fdc)={0x24, 0x0, 0x1, 0x800000003, 0x0, 0x0, {0xf}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff}}]}]}, 0x24}}, 0x0) 07:49:31 executing program 1: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x38}, [{}]}, 0x58) uselib(&(0x7f00000001c0)='./file0\x00') [ 1409.573875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 07:49:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x0, {0xa, 0x4e24, 0x1, @loopback, 0x4}, r2}}, 0x38) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="e10066b8010000000f01c1f2afbaf80c66b826d0288666efbafc0cedba200066ed0fc1f7640f30b8e9000f00d066b80500000066b9f8ffffff0f01c166b9190600000f32", 0x44}], 0x15555555555558b1, 0x8, &(0x7f0000000100), 0x0) setitimer(0x3, &(0x7f0000000340)={{}, {0x0, 0x2710}}, 0x0) 07:49:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:49:32 executing program 5: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0xfffffffffffffff9, 0x93a, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 07:49:32 executing program 1: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x38}, [{}]}, 0x58) uselib(&(0x7f00000001c0)='./file0\x00') 07:49:32 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x57, &(0x7f0000000040)) io_setup(0x5, &(0x7f0000000080)) io_setup(0x8000, &(0x7f00000000c0)) io_setup(0x800, &(0x7f0000000100)) io_setup(0x1f, &(0x7f0000000140)) 07:49:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0f35"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x890b, &(0x7f0000000080)={"696662300200", @ifru_names='veth1_to_bridge\x00'}) 07:49:32 executing program 6: perf_event_open(&(0x7f0000003040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x1, &(0x7f0000000000)=""/244, &(0x7f00000001c0)=0xf4) 07:49:32 executing program 0: r0 = eventfd2(0x0, 0x1) read$eventfd(r0, &(0x7f0000000080), 0xfffffffffffffdf4) io_setup(0x800000020, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000ddc000), 0x0, 0x0, 0x0, 0x1, r0}]) 07:49:32 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0x7, &(0x7f0000000040)={0x0, 0x18, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000440)}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, r1+30000000}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 07:49:32 executing program 5: setitimer(0x0, &(0x7f0000000080)={{0x0, 0x2710}}, 0x0) 07:49:32 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x57, &(0x7f0000000040)) io_setup(0x5, &(0x7f0000000080)) io_setup(0x8000, &(0x7f00000000c0)) io_setup(0x800, &(0x7f0000000100)) io_setup(0x1f, &(0x7f0000000140)) 07:49:32 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0xb, &(0x7f0000000100)={@rand_addr, @dev}, 0x10) 07:49:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000080)=0x80000000002, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000200)=""/120, 0x78}], 0x2, &(0x7f0000000340)=""/24, 0x18}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x40000000000014b, 0x0) 07:49:32 executing program 6: r0 = gettid() capset(&(0x7f0000002740)={0x20080522, r0}, &(0x7f0000002780)={0x0, 0xfffffffffffffffa}) 07:49:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000), 0xffffffffffffff9d) 07:49:32 executing program 4: capset(&(0x7f0000001000)={0x19980330}, &(0x7f0000001040)) prctl$intptr(0x26, 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) 07:49:32 executing program 3: r0 = gettid() exit(0x0) ioprio_get$pid(0x1, r0) 07:49:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x0, 0x0, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) r3 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r4 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r1, r1, &(0x7f00000000c0), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) ioctl(r2, 0x800000000008982, &(0x7f0000000080)) signalfd4(r3, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x9}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e21, 0x7, @mcast2}}}, 0x84) ioctl(r6, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r9, 0x8400ae8e, &(0x7f00000001c0)) gettid() getpgrp(0x0) fstat(r1, &(0x7f0000000580)) 07:49:32 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x3a, 0x2}, {}], 0x30) 07:49:32 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)='debugfs\x00', 0x44000, &(0x7f0000000540)) 07:49:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x7, 0x6}, 0xc) 07:49:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1d, 0x305, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) 07:49:32 executing program 6: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) shutdown(r0, 0x0) 07:49:33 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039fffc)=0x400000000000001, 0x4) listen(r0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000965fec)={0x0, 0x0, 0xfffffffffffffffe}, 0x14) shutdown(r0, 0x0) 07:49:33 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000001c0), 0x20, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 07:49:33 executing program 7: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000000240)="2f0000001c0005c5ffffff000d0000000200001f01000000ec0002c91300010000000000000000005867000043050b", 0x2f}], 0x1}, 0x0) 07:49:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3400f}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0) 07:49:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1d, 0x305, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) 07:49:33 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1, &(0x7f00000001c0)) unlink(&(0x7f0000000080)='./file0/file0\x00') 07:49:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x800000000000000d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1) fcntl$notify(r0, 0x402, 0x2) 07:49:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1d, 0x305, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) 07:49:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x2}, 0x0) [ 1411.210425] netlink: get zone limit has 4 unknown bytes [ 1411.227608] netlink: get zone limit has 4 unknown bytes 07:49:33 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0048001b07d82c99240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000003b40)={'filter\x00', 0x0, 0x4, 0xb9, [], 0x5, &(0x7f0000003a00)=[{}, {}, {}, {}, {}], &(0x7f0000003a80)=""/185}, &(0x7f0000000500)=0x78) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x12, r2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f00000003c0)={0x0, 0x7530}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000000c0)={@empty, @multicast2, @multicast1}, &(0x7f0000000100)=0xc) bind$inet(r4, &(0x7f0000dc9ff0)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000440)='/dev/snd/midiC#D#\x00', 0x2, 0x92000) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000004c0)) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000140)=0x17f, 0x2e1) r5 = syz_open_dev$mice(&(0x7f0000000680)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000600)={0xa8, 0x9, 0x7}) r6 = openat$cgroup_ro(r5, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xe0c9, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000002c0)=0x10, 0x3) ioctl$TIOCEXCL(r6, 0x540c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x50}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x85}, 0x20000000) r7 = socket$inet6_sctp(0xa, 0x1000000005, 0x84) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000005c0)=0x31d) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x6, @in6=@remote, 0x4e23, 0x0, 0x4e24, 0x7, 0xa, 0xa0, 0xa0, 0xff, 0x0, r8}, {0x1fffc000, 0xc5a, 0x4, 0x9, 0x3, 0x8, 0x7}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@dev}}, 0xe8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000300)='./file0\x00', r6}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r4, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 07:49:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3400f}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0) 07:49:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x18, 0x521, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) 07:49:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000000)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000300), 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4080, 0x0) read(r0, &(0x7f0000000200)=""/137, 0x89) 07:49:33 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) getrandom(&(0x7f0000000080)=""/33, 0xfffffffffffffeaa, 0x2) tkill(r0, 0x1000000000016) 07:49:33 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 07:49:33 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1d, 0x305, 0x0, 0x0, {0x2}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) 07:49:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x2}, 0x0) 07:49:33 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@multicast1, @remote}, 0xc) 07:49:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x2}, 0x0) 07:49:33 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) inotify_init() unshare(0x400) pselect6(0x40, &(0x7f0000000000)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 1411.709186] netlink: get zone limit has 4 unknown bytes 07:49:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200b, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b7605afb988de9bba6df5fdc54d81bf6ba5629eef628582fba5bf4af44acfe05900", "ee42e3ef1d1772a9432c220303b70b708ad791137e2982fcce5d747a3180005a"}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) 07:49:33 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 07:49:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3400f}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0) 07:49:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f00000002c0)=0x10000) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=""/209, &(0x7f0000000140)=0xd1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x2, &(0x7f0000f1dff8)) 07:49:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x2}, 0x0) [ 1411.883442] netlink: get zone limit has 4 unknown bytes 07:49:35 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x7fb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x28b, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000280), 0x0) 07:49:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)) 07:49:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3400f}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0) 07:49:35 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 07:49:35 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x5101, &(0x7f0000000040)) 07:49:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200b, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b7605afb988de9bba6df5fdc54d81bf6ba5629eef628582fba5bf4af44acfe05900", "ee42e3ef1d1772a9432c220303b70b708ad791137e2982fcce5d747a3180005a"}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) 07:49:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f00000002c0)=0x10000) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=""/209, &(0x7f0000000140)=0xd1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x2, &(0x7f0000f1dff8)) 07:49:35 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) getrandom(&(0x7f0000000080)=""/33, 0xfffffffffffffeaa, 0x2) tkill(r0, 0x1000000000016) 07:49:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)}, 0xcbe8}}], 0x0, 0x0, &(0x7f0000000200)}) 07:49:35 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) [ 1412.951168] netlink: get zone limit has 4 unknown bytes 07:49:35 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents64(r0, &(0x7f0000000100)=""/81, 0x4a) getdents(r0, &(0x7f0000000500)=""/4096, 0x1000) 07:49:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200b, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b7605afb988de9bba6df5fdc54d81bf6ba5629eef628582fba5bf4af44acfe05900", "ee42e3ef1d1772a9432c220303b70b708ad791137e2982fcce5d747a3180005a"}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) 07:49:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f00000002c0)=0x10000) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=""/209, &(0x7f0000000140)=0xd1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x2, &(0x7f0000f1dff8)) 07:49:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2, &(0x7f0000000200)=[@flat], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 1413.078383] binder: 19131:19137 transaction failed 29201/-28, size 0-0 line 2967 [ 1413.116201] binder_alloc: binder_alloc_mmap_handler: 19131 20001000-20004000 already mapped failed -16 07:49:35 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) [ 1413.131765] binder: BINDER_SET_CONTEXT_MGR already set [ 1413.137570] binder_alloc: 19131: binder_alloc_buf, no vma [ 1413.143286] binder: 19131:19141 transaction failed 29189/-3, size 0-0 line 2967 [ 1413.153457] binder: 19131:19137 ioctl 40046207 0 returned -16 [ 1413.160518] binder: undelivered TRANSACTION_ERROR: 29201 07:49:35 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents64(r0, &(0x7f0000000100)=""/81, 0x4a) getdents(r0, &(0x7f0000000500)=""/4096, 0x1000) [ 1413.179741] binder_alloc: binder_alloc_mmap_handler: 19146 20001000-20004000 already mapped failed -16 [ 1413.212107] binder: BINDER_SET_CONTEXT_MGR already set [ 1413.217751] binder: undelivered TRANSACTION_ERROR: 29189 [ 1413.222809] binder_alloc: 19146: binder_alloc_buf, no vma [ 1413.228939] binder: 19146:19162 transaction failed 29189/-3, size 24-2 line 2967 [ 1413.239469] binder: 19146:19148 ioctl 40046207 0 returned -16 [ 1413.297777] binder: undelivered TRANSACTION_ERROR: 29189 07:49:35 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008002d00000008dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d400000000000000006de400000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 07:49:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200b, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b7605afb988de9bba6df5fdc54d81bf6ba5629eef628582fba5bf4af44acfe05900", "ee42e3ef1d1772a9432c220303b70b708ad791137e2982fcce5d747a3180005a"}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) 07:49:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f00000002c0)=0x10000) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000040)=""/209, &(0x7f0000000140)=0xd1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x2, &(0x7f0000f1dff8)) 07:49:35 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x6c, 0x0, 0x0, 0x0, 0x2000d06f}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 07:49:35 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, &(0x7f0000000080)) 07:49:35 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents64(r0, &(0x7f0000000100)=""/81, 0x4a) getdents(r0, &(0x7f0000000500)=""/4096, 0x1000) 07:49:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x80043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x16d}, 0x14) [ 1413.538841] IPv6: Can't replace route, no match found 07:49:35 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) getrandom(&(0x7f0000000080)=""/33, 0xfffffffffffffeaa, 0x2) tkill(r0, 0x1000000000016) 07:49:35 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x6c, 0x0, 0x0, 0x0, 0x2000d06f}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 07:49:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000004c0)="a918315bc409176d1236911e1c08718c7f836b24a97671708a9214e1fae92e2a2d1900af305dd7b3391387a104075274c51342e4584a3b31c4ded20566f52525375c3acdff251af91a8464232ad6b3f2b6088fb78c2933a1ced94188c8201d619557f38dca6d434e04683efa8f4b46ea0bd112bb97e5a82f4b67fc8f455146b8", 0x80}], 0x1, &(0x7f0000000180)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 07:49:35 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4) 07:49:35 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x760) getdents64(r0, &(0x7f0000000100)=""/81, 0x4a) getdents(r0, &(0x7f0000000500)=""/4096, 0x1000) 07:49:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20000000000017, &(0x7f0000000000), 0x4) 07:49:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000040), 0x47, 0x0) 07:49:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f0000000080)="020300000700000000000000fff55b4202938207d9fb3780398d5375000060007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2d1594c3b50035110f118d0000f55dc62600009b000000faffffff00010000aeb46245004bae1356642490a7b5fc88046a0930a36ea0cc98ba2d414ac7800a7708356e6641", 0x80, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x2000000000d, @mcast2}, 0x1c) 07:49:35 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x6c, 0x0, 0x0, 0x0, 0x2000d06f}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 07:49:35 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4) 07:49:36 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4) 07:49:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)) stat(&(0x7f0000000640)='./file0/file1\x00', &(0x7f00000005c0)) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x11084}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 07:49:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[]}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_newneigh={0x24, 0x1c, 0x9, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) 07:49:36 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, &(0x7f0000000080)) 07:49:36 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x6c, 0x0, 0x0, 0x0, 0x2000d06f}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 07:49:36 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4) 07:49:36 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) 07:49:36 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r1}, {0x0, 0x9}}, &(0x7f0000040000)) getrandom(&(0x7f0000000080)=""/33, 0xfffffffffffffeaa, 0x2) tkill(r0, 0x1000000000016) 07:49:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x80043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x16d}, 0x14) 07:49:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="020b04010200000000000000053d0000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 07:49:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0f08"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0xffff, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x104) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf8) 07:49:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20000000000017, &(0x7f0000000000), 0x4) 07:49:36 executing program 1: creat(&(0x7f0000000480)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x23800, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x0, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)) 07:49:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c50400aeb995298992ea5c00c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000500)=[{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000001740)="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", 0xa01}], 0x1}], 0x1, 0x0) 07:49:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x4, "64082d19"}}) 07:49:36 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40106f33, &(0x7f0000000040)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 07:49:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x4, "64082d19"}}) 07:49:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c50400aeb995298992ea5c00c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000500)=[{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000001740)="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", 0xa01}], 0x1}], 0x1, 0x0) 07:49:37 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, &(0x7f0000000080)) 07:49:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$vnet(r1, &(0x7f0000000480)={0x1, {&(0x7f0000000600)=""/143, 0x8f, &(0x7f0000000400)=""/75, 0x3, 0x3}}, 0x68) socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r2, &(0x7f0000002480)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x81003) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x9) 07:49:37 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x5, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 07:49:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c50400aeb995298992ea5c00c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000500)=[{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000001740)="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", 0xa01}], 0x1}], 0x1, 0x0) 07:49:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c50400aeb995298992ea5c00c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000500)=[{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000001740)="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", 0xa01}], 0x1}], 0x1, 0x0) 07:49:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x4, "64082d19"}}) 07:49:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20000000000017, &(0x7f0000000000), 0x4) 07:49:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40045569, 0x0) 07:49:37 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x5381, &(0x7f0000000000)) 07:49:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x80043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x16d}, 0x14) 07:49:37 executing program 4: r0 = memfd_create(&(0x7f0000000340)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) 07:49:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x20, 0x4, "64082d19"}}) 07:49:37 executing program 1: r0 = socket(0x200040000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0xf00, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/40, 0x28, 0x0, 0x0, 0x0) 07:49:37 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x203d, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)}}, 0xffffffffffffffa5) ioctl$int_in(r0, 0x80000000005000, &(0x7f00000004c0)) 07:49:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000000000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) 07:49:37 executing program 0: r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f00000000c0)=""/4, &(0x7f0000000000)=0x4) 07:49:38 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, &(0x7f0000000080)) 07:49:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20000000000017, &(0x7f0000000000), 0x4) 07:49:38 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f00000008c0)='.', &(0x7f0000000180)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) 07:49:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) read$FUSE(r0, &(0x7f00000050c0), 0x1000) read$FUSE(r0, &(0x7f00000040c0), 0x1000) 07:49:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000000000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) 07:49:38 executing program 7: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) tkill(0x0, 0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 07:49:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000000000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) 07:49:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000002c0), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000000), 0x20) 07:49:38 executing program 7: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='tunl0\x00') 07:49:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x80043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x16d}, 0x14) 07:49:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000000000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) 07:49:38 executing program 4: r0 = socket(0x400000000010, 0x20000000802, 0x0) write(r0, &(0x7f0000001140)="240000001a0025f00018000400edfc0e80000000000000000000000008000f0040030000", 0x24) 07:49:38 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x76, &(0x7f00000000c0), &(0x7f0000000100)=0x20) 07:49:38 executing program 7: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='tunl0\x00') 07:49:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/netstat\x00') read(r0, &(0x7f00000000c0)=""/240, 0xf0) 07:49:38 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$KDGKBLED(r1, 0x8905, &(0x7f0000000000)) 07:49:38 executing program 0: r0 = eventfd2(0x5bb, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0x7}], 0x2) 07:49:38 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f000028a000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x7ffff000}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x31, 0xffffffffffffffff, 0x0) close(r0) 07:49:38 executing program 7: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='tunl0\x00') 07:49:38 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) write$binfmt_script(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="a9"], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) dup2(r1, r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48400, 0x4) 07:49:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) r3 = syz_open_pts(r0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x9) 07:49:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000180), &(0x7f00000001c0)) 07:49:38 executing program 6: unshare(0x2060400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2}) 07:49:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) close(r0) 07:49:39 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200b200b42d87402e"], &(0x7f00000016c0)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x6, &(0x7f0000000040), 0x1be) 07:49:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="9520", 0x2, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) getpid() 07:49:39 executing program 7: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='tunl0\x00') 07:49:39 executing program 6: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100), &(0x7f0000000180)="a43b", 0x2, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000300)="94", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400), &(0x7f0000000440)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000480)={r0, r1, r2}, &(0x7f00000004c0)=""/155, 0x9b, &(0x7f0000000600)={&(0x7f0000000580)={'sha3-256\x00'}, &(0x7f00000005c0)}) 07:49:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000c26fec)={0x1, 0xc, 0xff, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f000000a000), &(0x7f0000006000)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, &(0x7f00000002c0)}, 0x10) 07:49:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) 07:49:39 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 07:49:39 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 07:49:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000300)={0xa0}, 0xa0) 07:49:39 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(rmd160-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0xfa) 07:49:39 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0a45352, &(0x7f000004d000)={0x80, 0x0, "636c69656e743100fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008", 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eaa961ef6c6992b6900000000f9ffff7711be18a3d918e0"}) 07:49:39 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newtclass={0x24}, 0x24}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc25c4110, &(0x7f0000000080)="9a67dfa30000000000000001a0c72a58c14aec6704b7defc685e0a34b414ca450921898f8c5c53b74555aeb04da3ee4c2dd591200ab2e7e2bd86078aac874ab2c16063f669") 07:49:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x101}) 07:49:39 executing program 6: keyctl$set_reqkey_keyring(0x4, 0xfffffffffffffffc) 07:49:39 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 07:49:39 executing program 7: r0 = socket(0x18, 0x0, 0x2) connect(r0, &(0x7f0000000100)=@pppol2tpin6, 0x32) 07:49:39 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044d76, &(0x7f0000000100)) 07:49:40 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 07:49:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0xd}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000cd, 0x0) 07:49:40 executing program 6: r0 = socket(0x200000000000011, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000003, r1}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000240)) 07:49:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback, @rand_addr}, 0xc) 07:49:40 executing program 0: setrlimit(0x7, &(0x7f0000000000)={0x14, 0x88}) r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) 07:49:40 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 07:49:40 executing program 5: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf47}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 07:49:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="8ecd"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:40 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 07:49:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syncfs(r0) 07:49:40 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 07:49:40 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x2) listen(r0, 0x0) 07:49:40 executing program 6: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f00000005c0)=""/211, 0xd3}], 0x5, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0x2, 0x0, &(0x7f0000003700)={0x77359400}) 07:49:40 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 07:49:40 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 07:49:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001280)='vegas\x00', 0x6) 07:49:40 executing program 4: io_setup(0x57, &(0x7f0000000040)) io_setup(0x5, &(0x7f0000000080)) io_setup(0x8000, &(0x7f00000000c0)) io_setup(0x800, &(0x7f0000000100)) io_setup(0x1f, &(0x7f0000000140)) 07:49:40 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[]}}, 0x0) 07:49:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback, @rand_addr}, 0xc) 07:49:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syncfs(r0) 07:49:40 executing program 6: mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e71000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x3, 0x0, {0xa, 0x2, 0x3, @remote, 0x4}}}, 0x32) getpeername(r1, &(0x7f0000000080)=@vsock={0x0, 0x0, 0x0, @reserved}, &(0x7f0000000000)=0x80) 07:49:40 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 07:49:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) close(r0) 07:49:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f0000000040)={r1}, &(0x7f00000001c0)=0x10) listen(r2, 0x0) 07:49:41 executing program 5: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') writev(r0, &(0x7f0000000080), 0x1a6) 07:49:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2, 0x0) 07:49:41 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x4008af30, &(0x7f0000000300)) close(r0) 07:49:41 executing program 1: r0 = gettid() r1 = getpgrp(0x0) kcmp(r0, r1, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) 07:49:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syncfs(r0) 07:49:41 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000340)}]) 07:49:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2, 0x0) 07:49:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x80247008) 07:49:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @local, 'ip6gretap0\x00'}}, 0x1e) 07:49:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x100be) 07:49:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback, @rand_addr}, 0xc) 07:49:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syncfs(r0) 07:49:41 executing program 5: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@rr={0x44, 0x3}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000000)) 07:49:41 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_REMOTE={0x8, 0xa, @dev}]}}}]}, 0x38}}, 0x0) 07:49:41 executing program 7: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="1656610de99efc3b62ab0bb7", 0xc}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000480)="06f8a9bb", 0x4}], 0x1, &(0x7f0000000380)}, 0x0) 07:49:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2, 0x0) 07:49:41 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0xff, 0x0, &(0x7f0000000080)=""/166, &(0x7f0000000000)=0xa6) 07:49:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x8) 07:49:41 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, &(0x7f0000000140)) [ 1419.364653] netlink: 'syz-executor6': attribute type 10 has an invalid length. 07:49:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2, 0x0) 07:49:41 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @loopback}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) sendto$inet6(r0, &(0x7f00002a0b14)="f6", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback}, 0x1c) 07:49:41 executing program 5: syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x0, 0x0) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000000000)=@nfc={0x1e}, 0x80, &(0x7f0000000000), 0x20000000000000f8, &(0x7f0000000100)}}], 0x2, 0x0) 07:49:41 executing program 1: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000080), &(0x7f0000000100), 0x8) 07:49:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000000e80001040000040d000300ea1100000005000000", 0x29}], 0x1) [ 1419.482836] gfs2: path_lookup on ./file1 returned error -2 07:49:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2d, 0xa, 0x1}, 0x2c) readv(r0, &(0x7f0000001640)=[{&(0x7f0000001600)=""/2, 0x2}], 0x1) 07:49:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) sendmmsg$alg(r0, &(0x7f0000001640)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)='z', 0x1}], 0x1, &(0x7f00000005c0)}], 0x1, 0x0) 07:49:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback, @rand_addr}, 0xc) 07:49:41 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x1}) 07:49:41 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3) 07:49:41 executing program 4: r0 = socket(0x10, 0x800000802, 0x0) write(r0, &(0x7f00000002c0)="220000005a00070300be02000005e50e80ff000000000000f8b16f04bb5e688e6739", 0x22) 07:49:41 executing program 7: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x20000800, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 07:49:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000000e80001040000040d000300ea1100000005000000", 0x29}], 0x1) 07:49:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2d, 0xa, 0x1}, 0x2c) readv(r0, &(0x7f0000001640)=[{&(0x7f0000001600)=""/2, 0x2}], 0x1) 07:49:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bind$alg(r0, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f000025d000), 0x734) 07:49:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000000e80001040000040d000300ea1100000005000000", 0x29}], 0x1) 07:49:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2d, 0xa, 0x1}, 0x2c) readv(r0, &(0x7f0000001640)=[{&(0x7f0000001600)=""/2, 0x2}], 0x1) 07:49:41 executing program 4: r0 = socket(0x10, 0x800000802, 0x0) write(r0, &(0x7f00000002c0)="220000005a00070300be02000005e50e80ff000000000000f8b16f04bb5e688e6739", 0x22) 07:49:41 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)}, 0x0) 07:49:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x3, 0x835}]]}}}]}, 0x3c}}, 0x0) 07:49:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x6, 0x2000000000000001, 0x0, 0x2, 0x0, 0x70bd2a}, 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 07:49:42 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2d, 0xa, 0x1}, 0x2c) readv(r0, &(0x7f0000001640)=[{&(0x7f0000001600)=""/2, 0x2}], 0x1) 07:49:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000000e80001040000040d000300ea1100000005000000", 0x29}], 0x1) [ 1419.930555] netlink: 'syz-executor5': attribute type 3 has an invalid length. 07:49:42 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x0) write$binfmt_aout(r1, &(0x7f00000002c0), 0x20) 07:49:42 executing program 4: r0 = socket(0x10, 0x800000802, 0x0) write(r0, &(0x7f00000002c0)="220000005a00070300be02000005e50e80ff000000000000f8b16f04bb5e688e6739", 0x22) 07:49:42 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{r1}, {r0}], 0x2, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 07:49:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) 07:49:42 executing program 7: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x20000800, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 07:49:42 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000000ff8), &(0x7f0000000ffc), 0x40000000) 07:49:42 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='0,file:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) 07:49:42 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x4}) read(r2, &(0x7f0000481000)=""/128, 0x80) 07:49:42 executing program 4: r0 = socket(0x10, 0x800000802, 0x0) write(r0, &(0x7f00000002c0)="220000005a00070300be02000005e50e80ff000000000000f8b16f04bb5e688e6739", 0x22) 07:49:42 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0xffffbffeffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 07:49:42 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x4e22}, @in6={0xa, 0x4e21, 0x80000001, @ipv4}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000500)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000540)={0x0, 0xc3}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000005c0)={r3, 0x40000000, 0x800, 0x61, 0x0, 0x9, 0x4, 0xfffffffffffffffb, {r4, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}, 0x4}}, 0x1, 0x9, 0x6, 0x5, 0x5}}, &(0x7f0000000680)=0xb0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) write(0xffffffffffffffff, &(0x7f0000000240)="16344e8e54d7495882334223", 0xc) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x400000000000082) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r6 = open(&(0x7f00000003c0)='./file1\x00', 0x80000, 0x1) clone(0x20000000, &(0x7f0000001f37), &(0x7f00000002c0), &(0x7f0000001000), &(0x7f00000003c0)) r7 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r7) sendfile(r5, r5, &(0x7f0000000000)=0x6000000000000000, 0x2000005) connect$unix(r6, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) [ 1420.579447] libceph: parse_ips bad ip '0,file' [ 1420.616600] rpcbind: RPC call returned error 22 07:49:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x6, 0x0, [0x12, 0x0, 0xc0010058, 0x3]}) [ 1420.637119] rpcbind: RPC call returned error 22 [ 1420.657991] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1420.669038] syz-executor2 cpuset=/ mems_allowed=0 [ 1420.673972] CPU: 0 PID: 19800 Comm: syz-executor2 Not tainted 4.18.0-rc7+ #76 [ 1420.681256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.690618] Call Trace: [ 1420.693225] dump_stack+0x1c9/0x2b4 [ 1420.696871] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1420.702697] ? trace_hardirqs_on+0x10/0x10 [ 1420.706952] dump_header+0x27b/0xf64 [ 1420.710704] ? pagefault_out_of_memory+0x197/0x197 [ 1420.715671] ? __lock_acquire+0x7fc/0x5020 [ 1420.719927] ? find_held_lock+0x36/0x1c0 [ 1420.724003] ? print_usage_bug+0xc0/0xc0 [ 1420.728073] ? graph_lock+0x170/0x170 [ 1420.731871] ? print_usage_bug+0xc0/0xc0 [ 1420.735929] ? trace_hardirqs_on+0x10/0x10 [ 1420.740164] ? print_usage_bug+0xc0/0xc0 [ 1420.744224] ? lock_downgrade+0x8f0/0x8f0 [ 1420.748372] ? mark_held_locks+0xc9/0x160 [ 1420.752508] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1420.757083] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1420.762177] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1420.767180] ? trace_hardirqs_on+0xd/0x10 [ 1420.771318] ? ___ratelimit+0xaa/0x655 [ 1420.775193] ? idr_get_free+0x10c0/0x10c0 [ 1420.779331] ? kasan_check_write+0x14/0x20 [ 1420.783565] ? do_raw_spin_lock+0xc1/0x200 [ 1420.787817] oom_kill_process.cold.25+0x10/0x10bc [ 1420.792658] ? oom_evaluate_task+0x540/0x540 [ 1420.797054] ? find_held_lock+0x36/0x1c0 [ 1420.801110] ? lock_downgrade+0x8f0/0x8f0 [ 1420.805260] ? kasan_check_read+0x11/0x20 [ 1420.809404] ? rcu_is_watching+0x8c/0x150 [ 1420.813539] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1420.817938] ? oom_badness+0xb00/0xb00 [ 1420.821814] ? rcu_read_unlock+0x35/0x70 [ 1420.825863] ? mem_cgroup_iter+0x4bf/0x9e0 [ 1420.830085] ? css_task_iter_end+0x2ce/0x490 [ 1420.834484] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1420.839227] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1420.844244] ? trace_hardirqs_on+0xd/0x10 [ 1420.848391] ? _raw_spin_unlock_irq+0x27/0x70 [ 1420.852885] ? oom_badness+0xb00/0xb00 [ 1420.856764] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1420.861509] ? mem_cgroup_iter_break+0x30/0x30 [ 1420.866089] out_of_memory+0xa8a/0x14d0 [ 1420.870056] ? oom_killer_disable+0x3a0/0x3a0 [ 1420.874555] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1420.879568] ? trace_hardirqs_on+0xd/0x10 [ 1420.883722] mem_cgroup_out_of_memory+0x15e/0x210 [ 1420.888553] ? memcg_memory_event+0x40/0x40 [ 1420.893052] ? _raw_spin_unlock+0x22/0x30 [ 1420.897189] mem_cgroup_oom_synchronize+0x713/0x940 [ 1420.902195] ? mem_cgroup_select_victim_node+0x4a0/0x4a0 [ 1420.907633] ? memcg_event_wake+0x450/0x450 [ 1420.911947] ? rwsem_wake+0x2eb/0x460 [ 1420.915748] ? __rwsem_mark_wake.constprop.5+0xd0/0xd0 [ 1420.921026] pagefault_out_of_memory+0xc8/0x197 [ 1420.925694] ? out_of_memory+0x14d0/0x14d0 [ 1420.929925] mm_fault_error+0x1de/0x380 [ 1420.933892] __do_page_fault+0xd25/0xe50 [ 1420.937947] ? mm_fault_error+0x380/0x380 [ 1420.942087] ? do_fast_syscall_32+0x150/0xfb2 [ 1420.946587] do_page_fault+0xf6/0x8c0 [ 1420.950377] ? vmalloc_sync_all+0x30/0x30 [ 1420.954510] ? _raw_spin_unlock_irq+0x27/0x70 [ 1420.958994] ? finish_task_switch+0x1d3/0x870 [ 1420.963486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1420.969015] ? syscall_return_slowpath+0x31d/0x5e0 [ 1420.973951] ? sysret32_from_system_call+0x5/0x46 [ 1420.978791] ? page_fault+0x8/0x30 [ 1420.982320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1420.987152] ? page_fault+0x8/0x30 [ 1420.990691] page_fault+0x1e/0x30 [ 1420.994130] RIP: 0023:0x8049b12 [ 1420.997403] Code: 8b 84 24 a0 04 00 00 83 e8 0b 83 f8 01 0f 86 cd 00 00 00 65 f0 83 05 e4 ff ff ff 01 65 a1 00 00 00 00 83 ec 0c 05 48 ff ff ff <50> e8 28 10 01 00 83 c4 10 85 c0 0f 84 fd 00 00 00 65 f0 83 2d e4 [ 1421.016741] RSP: 002b:00000000f5fadc34 EFLAGS: 00010287 [ 1421.022091] RAX: 00000000f5faea88 RBX: 00000000080de227 RCX: 0000000000000001 [ 1421.029362] RDX: 00000000080e483c RSI: 00000000083500a0 RDI: 00000000ffffffff [ 1421.036620] RBP: 00000000f5fae168 R08: 0000000000000000 R09: 0000000000000000 [ 1421.043878] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1421.051134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 07:49:43 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='#em3#/\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'team_slave_0\x00'}) 07:49:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x7, @remote}, 0x80000000000006, {0x2, 0x0, @loopback}, 'veth1_to_bridge\x00'}) [ 1421.058915] Task in /ile0 killed as a result of limit of /ile0 [ 1421.064957] memory: usage 112kB, limit 0kB, failcnt 770 [ 1421.070346] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1421.077225] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1421.083390] Memory cgroup stats for /ile0: cache:92KB rss:68KB rss_huge:0KB shmem:4KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB 07:49:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x1, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) close(r0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1fd, 0x0) 07:49:43 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r0) [ 1421.103243] [ pid ] uid tgid total_vm rss pgtables_bytes swapents oom_score_adj name [ 1421.112119] [19793] 0 19793 17527 8728 110592 0 0 syz-executor2 [ 1421.121069] Memory cgroup out of memory: Kill process 19793 (syz-executor2) score 8755000 or sacrifice child [ 1421.131111] Killed process 19793 (syz-executor2) total-vm:70108kB, anon-rss:2144kB, file-rss:32768kB, shmem-rss:0kB 07:49:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000020a3a20404ff7e", 0x24}], 0x1}, 0x0) 07:49:43 executing program 6: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x8000) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0xf) fstat(r0, &(0x7f0000002200)) 07:49:43 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{r1}, {r0}], 0x2, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 07:49:43 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r0) [ 1421.317237] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 1421.323820] oom_reaper: reaped process 19793 (syz-executor2), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB [ 1421.324676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 1421.359901] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 1421.367311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 07:49:43 executing program 7: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x20000800, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 07:49:43 executing program 5: syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 07:49:43 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000100)=""/161) 07:49:43 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000100)=""/224, 0xe0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}}, 0x14}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 07:49:43 executing program 6: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10001, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) open(&(0x7f0000000000)='./file0\x00', 0x103200, 0x0) 07:49:43 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r0) 07:49:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 07:49:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 07:49:43 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) ioctl$SG_IO(r0, 0x8004700b, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, @scatter, &(0x7f0000000500), &(0x7f00000005c0)=""/4096, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 07:49:43 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x30, 0x18, 0x301, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, @nested={0x8, 0x1, [@generic="d8"]}}]}, 0x30}}, 0x0) 07:49:43 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000100)=""/224, 0xe0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}}, 0x14}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 07:49:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="66cf"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:43 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r0) [ 1421.668530] netlink: 'syz-executor6': attribute type 21 has an invalid length. [ 1421.691011] netlink: 'syz-executor6': attribute type 21 has an invalid length. [ 1421.716376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.731641] [ 1421.733308] ============================================ [ 1421.738765] WARNING: possible recursive locking detected [ 1421.744198] 4.18.0-rc7+ #76 Not tainted [ 1421.748158] -------------------------------------------- [ 1421.753592] syz-executor0/19883 is trying to acquire lock: [ 1421.759198] 0000000033d684fb (&(&bond->stats_lock)->rlock){+.+.}, at: bond_get_stats+0xb4/0x560 [ 1421.768048] [ 1421.768048] but task is already holding lock: [ 1421.774009] 0000000054ca63e4 (&(&bond->stats_lock)->rlock){+.+.}, at: bond_get_stats+0xb4/0x560 [ 1421.782845] [ 1421.782845] other info that might help us debug this: [ 1421.789489] Possible unsafe locking scenario: [ 1421.789489] [ 1421.795537] CPU0 [ 1421.798096] ---- [ 1421.800659] lock(&(&bond->stats_lock)->rlock); [ 1421.805394] lock(&(&bond->stats_lock)->rlock); [ 1421.810140] [ 1421.810140] *** DEADLOCK *** [ 1421.810140] [ 1421.816183] May be due to missing lock nesting notation [ 1421.816183] [ 1421.823091] 3 locks held by syz-executor0/19883: [ 1421.827836] #0: 00000000a7c32ec9 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x412/0xc30 [ 1421.835984] #1: 0000000054ca63e4 (&(&bond->stats_lock)->rlock){+.+.}, at: bond_get_stats+0xb4/0x560 [ 1421.845259] #2: 00000000abcf54d1 (rcu_read_lock){....}, at: bond_get_stats+0x0/0x560 [ 1421.853224] [ 1421.853224] stack backtrace: [ 1421.857711] CPU: 1 PID: 19883 Comm: syz-executor0 Not tainted 4.18.0-rc7+ #76 [ 1421.864962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1421.874293] Call Trace: [ 1421.876874] dump_stack+0x1c9/0x2b4 [ 1421.880508] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1421.885699] ? bond_get_stats+0xb4/0x560 [ 1421.889758] ? vprintk_func+0x81/0xe7 [ 1421.893541] __lock_acquire.cold.64+0x1fb/0x486 [ 1421.898197] ? trace_hardirqs_on+0x10/0x10 [ 1421.902417] ? trace_hardirqs_on+0x10/0x10 [ 1421.906639] ? __lock_acquire+0x7fc/0x5020 [ 1421.910856] ? graph_lock+0x170/0x170 [ 1421.914642] ? trace_hardirqs_on+0x10/0x10 [ 1421.918866] ? trace_hardirqs_on+0x10/0x10 [ 1421.923083] ? find_held_lock+0x36/0x1c0 [ 1421.927229] ? print_usage_bug+0xc0/0xc0 [ 1421.931274] ? print_usage_bug+0xc0/0xc0 [ 1421.935321] ? rb_erase_cached+0xc82/0x32c0 [ 1421.939630] ? print_usage_bug+0xc0/0xc0 [ 1421.943674] ? memset+0x31/0x40 [ 1421.946939] ? print_usage_bug+0xc0/0xc0 [ 1421.950987] ? __lock_acquire+0x7fc/0x5020 [ 1421.955209] ? print_usage_bug+0xc0/0xc0 [ 1421.959253] ? trace_hardirqs_on+0x10/0x10 [ 1421.963471] lock_acquire+0x1e4/0x540 [ 1421.967257] ? bond_get_stats+0xb4/0x560 [ 1421.971304] ? lock_release+0xa30/0xa30 [ 1421.975264] ? find_held_lock+0x36/0x1c0 [ 1421.979309] _raw_spin_lock+0x2a/0x40 [ 1421.983095] ? bond_get_stats+0xb4/0x560 [ 1421.987138] bond_get_stats+0xb4/0x560 [ 1421.991016] ? lock_downgrade+0x8f0/0x8f0 [ 1421.995149] ? bond_init+0x8f0/0x8f0 [ 1421.998847] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1422.003239] ? graph_lock+0x170/0x170 [ 1422.007025] ? veth_set_rx_headroom+0x430/0x430 [ 1422.011686] dev_get_stats+0x10f/0x470 [ 1422.015559] ? dev_set_alias+0x3c0/0x3c0 [ 1422.019610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1422.025131] ? netdev_lower_get_next_private_rcu+0x14a/0x1e0 [ 1422.030915] ? dev_get_by_napi_id+0x3b0/0x3b0 [ 1422.035394] ? kasan_check_write+0x14/0x20 [ 1422.039622] ? do_raw_spin_lock+0xc1/0x200 [ 1422.043840] bond_get_stats+0x232/0x560 [ 1422.047803] ? bond_init+0x8f0/0x8f0 [ 1422.051514] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1422.055914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1422.061437] dev_get_stats+0x10f/0x470 [ 1422.065307] ? dev_set_alias+0x3c0/0x3c0 [ 1422.069352] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1422.074352] ? skb_put+0x17b/0x1e0 [ 1422.077878] ? memset+0x31/0x40 [ 1422.081143] ? __nla_reserve+0xa3/0xc0 [ 1422.085020] ? nla_reserve_64bit+0x114/0x150 [ 1422.089428] rtnl_fill_stats+0x4d/0xac0 [ 1422.093385] rtnl_fill_ifinfo+0x1aa6/0x3fb0 [ 1422.097693] ? rtnl_fill_vf+0x4c0/0x4c0 [ 1422.101652] ? __lock_is_held+0x36/0x140 [ 1422.105709] ? __account_cfs_rq_runtime+0x770/0x770 [ 1422.110711] ? graph_lock+0x170/0x170 [ 1422.114497] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1422.120021] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 1422.125371] ? graph_lock+0x170/0x170 [ 1422.129155] ? graph_lock+0x170/0x170 [ 1422.132940] ? find_held_lock+0x36/0x1c0 [ 1422.136987] ? graph_lock+0x170/0x170 [ 1422.140776] ? find_held_lock+0x36/0x1c0 [ 1422.144824] ? print_usage_bug+0xc0/0xc0 [ 1422.148885] ? lock_downgrade+0x8f0/0x8f0 [ 1422.153035] ? mark_held_locks+0xc9/0x160 [ 1422.157171] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1422.161736] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1422.166823] ? trace_hardirqs_on+0xd/0x10 [ 1422.170955] ? depot_save_stack+0x291/0x470 [ 1422.175262] ? save_stack+0xa9/0xd0 [ 1422.178875] ? save_stack+0x43/0xd0 [ 1422.182483] ? kasan_kmalloc+0xc4/0xe0 [ 1422.186364] ? __kmalloc_node_track_caller+0x47/0x70 [ 1422.191452] ? __kmalloc_reserve.isra.40+0x3a/0xe0 [ 1422.196362] ? __alloc_skb+0x155/0x770 [ 1422.200234] ? rtmsg_ifinfo_build_skb+0x73/0x190 [ 1422.204973] ? rtmsg_ifinfo_event.part.30+0x45/0xe0 [ 1422.209983] ? rtnetlink_event+0x144/0x170 [ 1422.214205] ? notifier_call_chain+0x180/0x390 [ 1422.218772] ? raw_notifier_call_chain+0x2d/0x40 [ 1422.223513] ? call_netdevice_notifiers_info+0x3f/0x90 [ 1422.228949] ? netdev_change_features+0xb3/0x110 [ 1422.233691] ? bond_compute_features.isra.47+0x585/0xa50 [ 1422.239134] ? bond_enslave+0x1b25/0x5da0 [ 1422.243276] ? do_set_master+0x1c9/0x220 [ 1422.247319] ? do_setlink+0xba4/0x3e10 [ 1422.251188] ? rtnl_setlink+0x2a9/0x400 [ 1422.255144] ? rtnetlink_rcv_msg+0x46e/0xc30 [ 1422.259538] ? netlink_rcv_skb+0x172/0x440 [ 1422.263753] ? rtnetlink_rcv+0x1c/0x20 [ 1422.267626] ? netlink_unicast+0x5a0/0x760 [ 1422.271842] ? netlink_sendmsg+0xa18/0xfd0 [ 1422.276059] ? sock_sendmsg+0xd5/0x120 [ 1422.279941] ? ___sys_sendmsg+0x7fd/0x930 [ 1422.284069] ? __sys_sendmsg+0x11d/0x290 [ 1422.288113] ? __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 1422.293029] ? do_fast_syscall_32+0x34d/0xfb2 [ 1422.297556] ? entry_SYSENTER_compat+0x70/0x7f [ 1422.302123] ? __lock_is_held+0xb5/0x140 [ 1422.306168] ? __kmalloc_node_track_caller+0x33/0x70 [ 1422.311256] ? rcu_read_lock_sched_held+0x108/0x120 [ 1422.316266] ? kasan_unpoison_shadow+0x35/0x50 [ 1422.320831] ? kasan_kmalloc+0xc4/0xe0 [ 1422.324714] ? __kmalloc_node_track_caller+0x47/0x70 [ 1422.329804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1422.335335] ? __alloc_skb+0x4c6/0x770 [ 1422.339209] ? skb_scrub_packet+0x520/0x520 [ 1422.343514] ? if_nlmsg_size+0x5d9/0xbc0 [ 1422.347574] ? rtnl_xdp_fill+0x8f0/0x8f0 [ 1422.351624] ? trace_hardirqs_on+0x10/0x10 [ 1422.355841] ? do_set_master+0x1c9/0x220 [ 1422.359888] rtmsg_ifinfo_build_skb+0xc8/0x190 [ 1422.364458] rtmsg_ifinfo_event.part.30+0x45/0xe0 [ 1422.369286] rtnetlink_event+0x144/0x170 [ 1422.373332] notifier_call_chain+0x180/0x390 [ 1422.377727] ? unregister_die_notifier+0x20/0x20 [ 1422.382469] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1422.387989] ? rtnl_is_locked+0xb5/0xf0 [ 1422.391964] ? rtnl_trylock+0x20/0x20 [ 1422.395752] raw_notifier_call_chain+0x2d/0x40 [ 1422.400319] call_netdevice_notifiers_info+0x3f/0x90 [ 1422.405407] netdev_change_features+0xb3/0x110 [ 1422.409973] ? default_device_exit_batch+0x560/0x560 [ 1422.415077] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1422.420600] bond_compute_features.isra.47+0x585/0xa50 [ 1422.425858] ? lock_downgrade+0x8f0/0x8f0 [ 1422.429993] ? bond_hw_addr_flush+0x290/0x290 [ 1422.434480] ? __local_bh_enable_ip+0x161/0x230 [ 1422.439144] ? bond_enslave+0x1a8a/0x5da0 [ 1422.443276] ? trace_hardirqs_on+0xd/0x10 [ 1422.447410] ? __local_bh_enable_ip+0x161/0x230 [ 1422.452063] bond_enslave+0x1b25/0x5da0 [ 1422.456031] ? bond_update_slave_arr+0x950/0x950 [ 1422.460767] ? rcu_is_watching+0x8c/0x150 [ 1422.464898] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1422.469291] ? __lock_acquire+0x7fc/0x5020 [ 1422.473509] ? update_curr+0x4e7/0xc00 [ 1422.477393] ? perf_trace_lock+0x920/0x920 [ 1422.481611] ? graph_lock+0x170/0x170 [ 1422.485398] ? trace_hardirqs_on+0x10/0x10 [ 1422.489619] ? __lock_is_held+0xb5/0x140 [ 1422.493670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1422.499189] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 1422.504537] ? active_load_balance_cpu_stop+0x1030/0x1030 [ 1422.510059] ? reweight_task+0x130/0x130 [ 1422.514194] ? perf_event_update_userpage+0xd30/0xd30 [ 1422.519378] ? graph_lock+0x170/0x170 [ 1422.523163] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 1422.528340] ? print_usage_bug+0xc0/0xc0 [ 1422.532386] ? print_usage_bug+0xc0/0xc0 [ 1422.537050] ? lock_downgrade+0x8f0/0x8f0 [ 1422.541182] ? finish_task_switch+0x18a/0x870 [ 1422.545665] ? __lock_acquire+0x7fc/0x5020 [ 1422.549885] ? mark_held_locks+0xc9/0x160 [ 1422.554021] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1422.558592] ? trace_hardirqs_on+0x10/0x10 [ 1422.562814] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1422.568336] ? rtnl_is_locked+0xb5/0xf0 [ 1422.572294] ? rtnl_trylock+0x20/0x20 [ 1422.576077] ? validate_linkmsg+0x277/0xa40 [ 1422.580394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1422.585917] ? netdev_master_upper_dev_get+0x173/0x250 [ 1422.591178] ? __dev_get_by_flags+0x1d0/0x1d0 [ 1422.595671] ? __schedule+0x884/0x1ec0 [ 1422.599545] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 1422.604370] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1422.609372] ? bond_update_slave_arr+0x950/0x950 [ 1422.614111] do_set_master+0x1c9/0x220 [ 1422.617983] do_setlink+0xba4/0x3e10 [ 1422.621684] ? print_usage_bug+0xc0/0xc0 [ 1422.625728] ? graph_lock+0x170/0x170 [ 1422.629514] ? graph_lock+0x170/0x170 [ 1422.633299] ? validate_linkmsg+0xa40/0xa40 [ 1422.637605] ? perf_trace_lock+0x920/0x920 [ 1422.641825] ? find_held_lock+0x36/0x1c0 [ 1422.645874] ? lock_downgrade+0x8f0/0x8f0 [ 1422.650014] ? debug_mutex_add_waiter+0x230/0x230 [ 1422.654861] ? kasan_check_read+0x11/0x20 [ 1422.658993] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1422.663389] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1422.667957] ? debug_mutex_wake_waiter+0x630/0x630 [ 1422.672870] ? kasan_check_write+0x14/0x20 [ 1422.677097] ? do_raw_spin_lock+0xc1/0x200 [ 1422.681315] ? _raw_spin_unlock+0x22/0x30 [ 1422.685449] ? __mutex_lock+0x96c/0x1820 [ 1422.689496] ? rtnetlink_rcv_msg+0x412/0xc30 [ 1422.693908] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1422.699179] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1422.704190] ? validate_nla+0x2d9/0x7b0 [ 1422.708154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1422.713676] ? nla_parse+0x32b/0x4b0 [ 1422.717377] ? validate_nla+0x7b0/0x7b0 [ 1422.721334] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1422.726335] rtnl_setlink+0x2a9/0x400 [ 1422.730119] ? do_setlink+0x3e10/0x3e10 [ 1422.734086] ? rcu_is_watching+0x8c/0x150 [ 1422.738216] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1422.742611] ? do_setlink+0x3e10/0x3e10 [ 1422.746570] rtnetlink_rcv_msg+0x46e/0xc30 [ 1422.750792] ? rtnetlink_put_metrics+0x690/0x690 [ 1422.755539] netlink_rcv_skb+0x172/0x440 [ 1422.759585] ? rtnetlink_put_metrics+0x690/0x690 [ 1422.764326] ? netlink_ack+0xbe0/0xbe0 [ 1422.768197] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 1422.772592] rtnetlink_rcv+0x1c/0x20 [ 1422.776813] netlink_unicast+0x5a0/0x760 [ 1422.780863] ? netlink_attachskb+0x9a0/0x9a0 [ 1422.785270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1422.790795] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1422.795797] netlink_sendmsg+0xa18/0xfd0 [ 1422.799843] ? move_addr_to_kernel.part.20+0xc6/0x100 [ 1422.805033] ? netlink_unicast+0x760/0x760 [ 1422.809264] ? compat_mc_getsockopt+0xb20/0xb20 [ 1422.813919] ? security_socket_sendmsg+0x94/0xc0 [ 1422.818659] ? netlink_unicast+0x760/0x760 [ 1422.822891] sock_sendmsg+0xd5/0x120 [ 1422.826613] ___sys_sendmsg+0x7fd/0x930 [ 1422.830574] ? copy_msghdr_from_user+0x580/0x580 [ 1422.835317] ? lock_downgrade+0x8f0/0x8f0 [ 1422.839451] ? __fget_light+0x2f7/0x440 [ 1422.843411] ? fget_raw+0x20/0x20 [ 1422.846852] ? __fd_install+0x2db/0x880 [ 1422.850815] ? get_unused_fd_flags+0x1a0/0x1a0 [ 1422.855383] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1422.860915] ? sockfd_lookup_light+0xc5/0x160 [ 1422.865394] __sys_sendmsg+0x11d/0x290 [ 1422.869266] ? __ia32_sys_shutdown+0x80/0x80 [ 1422.873661] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 1422.878576] ? sock_unregister+0x160/0x160 [ 1422.882807] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 1422.887561] do_fast_syscall_32+0x34d/0xfb2 [ 1422.891869] ? do_int80_syscall_32+0x890/0x890 [ 1422.896434] ? _raw_spin_unlock_irq+0x27/0x70 [ 1422.900910] ? finish_task_switch+0x1d3/0x870 [ 1422.905394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1422.910927] ? syscall_return_slowpath+0x31d/0x5e0 [ 1422.915846] ? sysret32_from_system_call+0x5/0x46 [ 1422.920678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1422.925509] entry_SYSENTER_compat+0x70/0x7f [ 1422.929901] RIP: 0023:0xf7f32cb9 [ 1422.933246] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1422.952386] RSP: 002b:00000000f5f2e0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1422.960079] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000240 [ 1422.967333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 07:49:45 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000100)=""/224, 0xe0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}}, 0x14}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) [ 1422.974587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1422.981839] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1422.989088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1423.073352] ÿ: Enslaving bond0 as an active interface with an up link 07:49:46 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{r1}, {r0}], 0x2, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 07:49:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) ioctl$SG_IO(r0, 0x8004700b, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, @scatter, &(0x7f0000000500), &(0x7f00000005c0)=""/4096, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 07:49:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x14, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 07:49:46 executing program 7: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0x20000800, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 07:49:46 executing program 6: syz_open_dev$usbmon(&(0x7f0000000f00)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x3) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 07:49:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="66cf"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:46 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000100)=""/224, 0xe0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}}, 0x14}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r0, r1) 07:49:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x14, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 07:49:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 07:49:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) ioctl$SG_IO(r0, 0x8004700b, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, @scatter, &(0x7f0000000500), &(0x7f00000005c0)=""/4096, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 07:49:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="66cf"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:46 executing program 6: syz_open_dev$usbmon(&(0x7f0000000f00)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x3) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:46 executing program 2: syz_open_dev$usbmon(&(0x7f0000000f00)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x3) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x14, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 07:49:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) ioctl$SG_IO(r0, 0x8004700b, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, @scatter, &(0x7f0000000500), &(0x7f00000005c0)=""/4096, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 07:49:47 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{r1}, {r0}], 0x2, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') 07:49:47 executing program 6: syz_open_dev$usbmon(&(0x7f0000000f00)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x3) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:47 executing program 2: syz_open_dev$usbmon(&(0x7f0000000f00)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x3) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 07:49:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="66cf"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:47 executing program 5: syz_open_dev$usbmon(&(0x7f0000000f00)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x3) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x14, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 07:49:47 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x14, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 07:49:47 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x14, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 07:49:47 executing program 2: syz_open_dev$usbmon(&(0x7f0000000f00)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x3) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:47 executing program 5: syz_open_dev$usbmon(&(0x7f0000000f00)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x3) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:47 executing program 6: syz_open_dev$usbmon(&(0x7f0000000f00)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x3) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:47 executing program 4: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001440)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000000016, 0x0, @time={r2}, {}, {}, @result}], 0xfc95) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x202, @time={0x0, 0x989680}}) 07:49:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="66cf"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000040)=0x100) 07:49:47 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x14, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 07:49:48 executing program 4: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001440)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000000016, 0x0, @time={r2}, {}, {}, @result}], 0xfc95) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x202, @time={0x0, 0x989680}}) 07:49:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x10) fcntl$notify(r0, 0x402, 0x28) 07:49:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 07:49:48 executing program 5: syz_open_dev$usbmon(&(0x7f0000000f00)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x3) socket(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000001140), &(0x7f00000010c0), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 07:49:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000040)=0x100) 07:49:48 executing program 3: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001440)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000000016, 0x0, @time={r2}, {}, {}, @result}], 0xfc95) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x202, @time={0x0, 0x989680}}) 07:49:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 07:49:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="66cf"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000040)=0x100) 07:49:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 07:49:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x10) fcntl$notify(r0, 0x402, 0x28) 07:49:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 07:49:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="66cf"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:49:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 07:49:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 07:49:48 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000040)=0x100) 07:49:48 executing program 4: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001440)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000000016, 0x0, @time={r2}, {}, {}, @result}], 0xfc95) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x202, @time={0x0, 0x989680}}) 07:49:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x10) fcntl$notify(r0, 0x402, 0x28) 07:49:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 07:49:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 07:49:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 07:49:48 executing program 3: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001440)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000000016, 0x0, @time={r2}, {}, {}, @result}], 0xfc95) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x202, @time={0x0, 0x989680}}) 07:49:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 07:49:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x10) fcntl$notify(r0, 0x402, 0x28) 07:49:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 07:49:48 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x200000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 07:49:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)}) 07:49:48 executing program 4: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001440)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000000016, 0x0, @time={r2}, {}, {}, @result}], 0xfc95) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x202, @time={0x0, 0x989680}}) 07:49:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000), 0x0) 07:49:48 executing program 6: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 07:49:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000), 0x0) 07:49:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:49 executing program 3: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001440)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000000016, 0x0, @time={r2}, {}, {}, @result}], 0xfc95) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x202, @time={0x0, 0x989680}}) 07:49:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 07:49:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000), 0x0) 07:49:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:49 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x200000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 07:49:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000), 0x0) 07:49:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:49 executing program 6: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:49 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000180)=""/174) 07:49:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653") flistxattr(r0, &(0x7f0000000300)=""/101, 0x5) 07:49:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x200000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 07:49:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x200000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 07:49:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653") flistxattr(r0, &(0x7f0000000300)=""/101, 0x5) 07:49:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653") flistxattr(r0, &(0x7f0000000300)=""/101, 0x5) 07:49:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:49 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000180)=""/174) 07:49:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653") flistxattr(r0, &(0x7f0000000300)=""/101, 0x5) [ 1427.604753] syz-executor1 (20177) used obsolete PPPIOCDETACH ioctl 07:49:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x200000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 07:49:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653") flistxattr(r0, &(0x7f0000000300)=""/101, 0x5) 07:49:50 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000180)=""/174) 07:49:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000cac000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000622ffc)=0x3) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) connect$pptp(r1, &(0x7f000004d000)={0x18, 0x2, {0x0, @loopback}}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f000082ef0a)=""/246) 07:49:50 executing program 6: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653") flistxattr(r0, &(0x7f0000000300)=""/101, 0x5) 07:49:50 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000180)=""/174) 07:49:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000180)=""/174) 07:49:50 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x200000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 07:49:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x200000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 07:49:50 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:50 executing program 1: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000180)=""/174) 07:49:50 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000180)=""/174) 07:49:51 executing program 1: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653") flistxattr(r0, &(0x7f0000000300)=""/101, 0x5) 07:49:51 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:51 executing program 4: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:51 executing program 6: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:51 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x200000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 07:49:51 executing program 4: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:51 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:51 executing program 1: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:51 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 07:49:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x200000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 07:49:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x200000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 07:49:51 executing program 4: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:51 executing program 1: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r0}}, 0x0) 07:49:51 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9f", 0x1, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x4f9, @mcast2, 0x7}, 0x1c) 07:49:51 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x800000001, &(0x7f0000000000), 0x2, 0x0) mbind(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000100), 0x7, 0x0) 07:49:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x80000080002, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d0005000b0000000000c78b80082314e9030b9d566885b16732009b1100b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 07:49:51 executing program 1: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r0}}, 0x0) 07:49:51 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x800000001, &(0x7f0000000000), 0x2, 0x0) mbind(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000100), 0x7, 0x0) 07:49:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x80000080002, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d0005000b0000000000c78b80082314e9030b9d566885b16732009b1100b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 07:49:52 executing program 7: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x800000001, &(0x7f0000000000), 0x2, 0x0) mbind(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000100), 0x7, 0x0) 07:49:52 executing program 1: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r0}}, 0x0) 07:49:52 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x800000001, &(0x7f0000000000), 0x2, 0x0) mbind(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000100), 0x7, 0x0) 07:49:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x80000080002, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d0005000b0000000000c78b80082314e9030b9d566885b16732009b1100b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 07:49:52 executing program 6: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r0}}, 0x0) 07:49:52 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 07:49:52 executing program 2: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r0}}, 0x0) 07:49:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x208000000) 07:49:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x80000080002, 0x0) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d0005000b0000000000c78b80082314e9030b9d566885b16732009b1100b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 07:49:52 executing program 7: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x800000001, &(0x7f0000000000), 0x2, 0x0) mbind(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000100), 0x7, 0x0) 07:49:52 executing program 1: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r0}}, 0x0) 07:49:52 executing program 6: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r0}}, 0x0) 07:49:52 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x800000001, &(0x7f0000000000), 0x2, 0x0) mbind(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000100), 0x7, 0x0) 07:49:52 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 07:49:52 executing program 5: r0 = socket(0x11, 0x4000000000080002, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000000), 0x38f, &(0x7f00000012c0)}}], 0x2, 0x0) 07:49:52 executing program 6: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r0}}, 0x0) 07:49:52 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}}}}}}, &(0x7f0000000000)) 07:49:52 executing program 7: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x800000001, &(0x7f0000000000), 0x2, 0x0) mbind(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000100), 0x7, 0x0) 07:49:52 executing program 4: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) dup3(r0, r1, 0x0) 07:49:52 executing program 2: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r0}}, 0x0) 07:49:52 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 07:49:53 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 07:49:53 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}}}}}}, &(0x7f0000000000)) 07:49:53 executing program 5: r0 = socket(0x11, 0x4000000000080002, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000000), 0x38f, &(0x7f00000012c0)}}], 0x2, 0x0) 07:49:53 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x5e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) 07:49:53 executing program 4: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) dup3(r0, r1, 0x0) 07:49:53 executing program 7: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) dup3(r0, r1, 0x0) 07:49:53 executing program 2: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) clock_getres(0x0, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, r0}}, 0x0) 07:49:53 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 07:49:53 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}}}}}}, &(0x7f0000000000)) 07:49:53 executing program 0: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) dup3(r0, r1, 0x0) 07:49:53 executing program 5: r0 = socket(0x11, 0x4000000000080002, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000000), 0x38f, &(0x7f00000012c0)}}], 0x2, 0x0) 07:49:53 executing program 2: faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x150, 0x400) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x7fffd) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0x19, 0x5, 0x3ff, &(0x7f00000005c0)) ioctl(r2, 0x8b12, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000110007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80200000000002, &(0x7f0000000540)=0x82, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000500), 0xfffffe9e) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0), 0xffffffffffffff02, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000580), &(0x7f00000012c0)=0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) getegid() getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)=""/89, &(0x7f0000000180)=0xffffffffffffff2e) ioctl$TCXONC(r2, 0x540a, 0xb4) init_module(&(0x7f00000000c0)='/dev/full\x00', 0xa, &(0x7f00000004c0)='}-:md5sumwlan0:GPLvboxnet0em0+}\x00') setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) socket$inet(0x2, 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000480)) openat$full(0xffffffffffffff9c, &(0x7f0000003a40)='/dev/full\x00', 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000600)='erspan0\x00') sendmsg$nl_generic(r3, &(0x7f0000001900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2030}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0xb80, 0x2d, 0x0, 0x70bd2b, 0x25dfdbfb, {0x17}, [@nested={0xb6c, 0x7d, [@typed={0xb68, 0x91, @binary="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"}]}]}, 0xb80}}, 0x4011) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x154) 07:49:53 executing program 4: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) dup3(r0, r1, 0x0) 07:49:53 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x5e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x4e20, 0x8}}}}}, &(0x7f00000000c0)) 07:49:53 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}}}}}}, &(0x7f0000000000)) 07:49:53 executing program 7: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) dup3(r0, r1, 0x0)