[ 36.044584] audit: type=1800 audit(1546407967.440:30): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. 2019/01/02 05:46:14 fuzzer started 2019/01/02 05:46:16 dialing manager at 10.128.0.26:45767 2019/01/02 05:46:16 syscalls: 1 2019/01/02 05:46:16 code coverage: enabled 2019/01/02 05:46:16 comparison tracing: enabled 2019/01/02 05:46:16 setuid sandbox: enabled 2019/01/02 05:46:16 namespace sandbox: enabled 2019/01/02 05:46:16 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/02 05:46:16 fault injection: enabled 2019/01/02 05:46:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/02 05:46:16 net packet injection: enabled 2019/01/02 05:46:16 net device setup: enabled 05:49:12 executing program 0: r0 = syz_open_dev$vivid(&(0x7f00000002c0)='/dev/video#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x78c3, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffffffffffffffff]}}}) syzkaller login: [ 221.432508] IPVS: ftp: loaded support on port[0] = 21 05:49:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc0405519, &(0x7f0000001000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, &(0x7f0000044000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xfffffffffffffffe}, 0xfffffffffffffd5b) gettid() listen(r2, 0x400000000000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0186415, &(0x7f0000000480)={&(0x7f0000fff000/0x1000)=nil, 0x6b9, 0x7, 0x81, &(0x7f0000ffe000/0x2000)=nil, 0x81}) r5 = fcntl$dupfd(r2, 0x406, r2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000240)={0x2, 0x8}, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000005c0), &(0x7f0000000080)=0x8) set_mempolicy(0x0, &(0x7f0000000200), 0x80000001) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0205710, &(0x7f0000000040)={0x0, 0x3f, 0x0, 0xc7b}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x81, 0x338d, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r6, &(0x7f00000003c0), 0x0}, 0x18) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="4fd44e000a4cabcc665ef9c2ff89b663de5dce80a68dd5ff5e6b4e777250c2cc8a7d378c377e8c9315042c38f3cc945b729d0ae6d5386b6ebab9702a959f4a78a56b90899324b03461827a73c75973a922427f93d4ea50b4457c442666abe5d6c44c0242f9c68375d80474e6fbf7371c11d210d143793d50816e81a9c9770e16f7181ad3ac68aefd11"], 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0xfffffffffffffebf, &(0x7f0000000400), 0x41, &(0x7f00000000c0)=""/87, 0x99d15fc97c4b31a1}, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="736563755369747900000000000000000000010000002087ef7d8b26bd3481250003010028ff3300c2dfe64b58dbdbe73a576130effb48f701ffa52ea1ebf400e5060187cbf943bb85158781faf59ba33e5b8fe68b24d109b44bf0a8ff1128e82501e15060f627b0a36b9481d5d272d7dc5dc31fe1618a366e09b37b58177a8a6fa98a41427f876b0254d7cf4988d85a418b38bef8ce7cd32e442851fc0a37c79cfafdb545b296f3819c52d4969235049466f69a7598ad737a4adc5f55275c696e32286eec6b30f591892b8cf50028cdf76c8e58ddd6483dd64729b5"], 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x80045400) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x480, 0x0) ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0xfffffffffffffdb8) [ 221.542463] chnl_net:caif_netlink_parms(): no params data found [ 221.639839] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.646773] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.654348] device bridge_slave_0 entered promiscuous mode [ 221.662452] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.668990] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.676423] device bridge_slave_1 entered promiscuous mode [ 221.701006] IPVS: ftp: loaded support on port[0] = 21 [ 221.711254] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.722487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.752684] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.760610] team0: Port device team_slave_0 added [ 221.766158] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.773739] team0: Port device team_slave_1 added [ 221.781380] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.792844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 05:49:13 executing program 2: socket$kcm(0xa, 0x3, 0x3a) pipe(&(0x7f0000000a00)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) [ 221.852830] device hsr_slave_0 entered promiscuous mode [ 221.919008] device hsr_slave_1 entered promiscuous mode [ 221.959260] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 221.966338] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 221.985495] IPVS: ftp: loaded support on port[0] = 21 05:49:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000640)={0xfffa, 0x19, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) [ 222.064818] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.071348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.078572] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.084954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.137066] chnl_net:caif_netlink_parms(): no params data found [ 222.226257] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 222.233152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.296813] chnl_net:caif_netlink_parms(): no params data found [ 222.308347] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 222.331451] IPVS: ftp: loaded support on port[0] = 21 [ 222.343316] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.350694] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.358014] device bridge_slave_0 entered promiscuous mode [ 222.373504] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 222.380773] 8021q: adding VLAN 0 to HW filter on device team0 05:49:13 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000001000000000000000a4733ad197f24acc233eeae0750e03690050000"], 0x1, 0x0, 0x0) [ 222.394915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.409446] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.427099] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.435974] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 222.461710] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.468094] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.489832] device bridge_slave_1 entered promiscuous mode [ 222.513774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.523761] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.530180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.545370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.581361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.595959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.604128] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.610549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.635622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.646116] IPVS: ftp: loaded support on port[0] = 21 [ 222.667943] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.682108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.697456] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.705247] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.715980] device bridge_slave_0 entered promiscuous mode [ 222.726294] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:49:14 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x100}], 0x1, 0x0) [ 222.739569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.748527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 222.773347] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.781155] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.791398] device bridge_slave_1 entered promiscuous mode [ 222.799088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.806996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.818829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.841082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.855521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 222.876982] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 222.884716] team0: Port device team_slave_0 added [ 222.894627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.902135] team0: Port device team_slave_1 added [ 222.907507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.915412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.927585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 222.940112] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.949144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 222.956140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 222.963768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.976772] IPVS: ftp: loaded support on port[0] = 21 [ 222.982890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.992790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.000607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.008020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.023331] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.042667] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 223.049452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.101766] device hsr_slave_0 entered promiscuous mode [ 223.139157] device hsr_slave_1 entered promiscuous mode [ 223.201202] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 223.208407] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 223.238045] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.245701] team0: Port device team_slave_0 added [ 223.253804] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.261003] team0: Port device team_slave_1 added [ 223.268364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.280671] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 223.290695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.305018] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 223.323504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 223.452485] device hsr_slave_0 entered promiscuous mode [ 223.489209] device hsr_slave_1 entered promiscuous mode [ 223.539437] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 223.546337] chnl_net:caif_netlink_parms(): no params data found 05:49:15 executing program 0: syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x20002) [ 223.589451] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 223.596262] chnl_net:caif_netlink_parms(): no params data found [ 223.674889] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 223.714369] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.721080] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.728063] device bridge_slave_0 entered promiscuous mode [ 223.740406] chnl_net:caif_netlink_parms(): no params data found [ 223.760576] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.766931] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.775362] device bridge_slave_1 entered promiscuous mode [ 223.782352] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.789997] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.797103] device bridge_slave_0 entered promiscuous mode [ 223.805077] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.811528] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.818708] device bridge_slave_1 entered promiscuous mode [ 223.866730] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.883749] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.896054] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.907404] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.922372] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.930344] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.937330] device bridge_slave_0 entered promiscuous mode 05:49:15 executing program 0: syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x20002) [ 223.975740] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.982292] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.989999] device bridge_slave_1 entered promiscuous mode [ 223.996407] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.004840] team0: Port device team_slave_0 added [ 224.010972] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.018258] team0: Port device team_slave_1 added [ 224.036901] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.051466] team0: Port device team_slave_0 added [ 224.072563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.084669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.092699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.100482] team0: Port device team_slave_1 added [ 224.106322] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.113930] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.128565] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.144825] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.167825] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.175290] team0: Port device team_slave_0 added [ 224.190326] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.198302] team0: Port device team_slave_1 added [ 224.203932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 05:49:15 executing program 0: syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x20002) [ 224.252292] device hsr_slave_0 entered promiscuous mode [ 224.288988] device hsr_slave_1 entered promiscuous mode [ 224.330922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.387109] device hsr_slave_0 entered promiscuous mode [ 224.448952] device hsr_slave_1 entered promiscuous mode [ 224.489311] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 224.496275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.515672] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 224.528128] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 224.536860] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 05:49:16 executing program 0: syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) tkill(r1, 0x15) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={0x0}) [ 224.580656] device hsr_slave_0 entered promiscuous mode [ 224.619018] device hsr_slave_1 entered promiscuous mode 05:49:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") [ 224.670739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.722897] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 224.739340] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 224.755213] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 224.767653] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 224.778091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 224.791601] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.813744] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 224.819011] hfs: can't find a HFS filesystem on dev loop0 [ 224.828544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.836264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.843884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.850937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.860105] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.867824] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 224.874607] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.896825] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.906645] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 224.913068] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.922115] hfs: can't find a HFS filesystem on dev loop0 [ 224.944016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.960512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.968375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.989445] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.995899] bridge0: port 1(bridge_slave_0) entered forwarding state 05:49:16 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) inotify_init1(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) [ 225.009950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.043304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.066114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.073596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.081663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 05:49:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f023c123f3188a070") r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r1, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @default, @bcast, @null, @bcast, @rose]}, 0x47) [ 225.089335] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.095661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.103597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.111946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.126770] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.133211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.142451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.154384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.178037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.197436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.205589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.213883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.221687] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.228098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.235397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.246648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.256691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 225.266982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 225.275104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.283106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.291330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.299236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.307137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.316404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 225.337629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.348170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.359413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 225.366962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 225.388505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.399848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.410248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.417819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.426025] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.433988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.444466] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 225.453594] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 225.460355] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.467397] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 225.477012] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 225.486530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.494626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.501907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.509221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.519656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.527190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 225.537678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.546074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.554185] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 225.561702] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.569865] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 225.578019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.585155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.593049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.600792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.608565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.616364] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.622709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.629856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.637526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.645268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.653126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.660785] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.667107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.674670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.681914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.692563] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.702386] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 225.716893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.725624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.733405] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.739813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.749606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.760371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.769299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 225.779510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 225.787614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 225.796043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 225.806591] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 225.813470] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.820548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.828201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.837860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.845533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.853160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.861095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.868486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.876557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.884697] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.891086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.901337] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 225.907360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.917563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.926142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.938998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.947723] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 225.954483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.961634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.969620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.980949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.988917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.996584] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.003073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.011097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.023693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 226.032629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 226.044930] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 226.053189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 226.060878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.071539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.079414] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.085852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.093247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.101340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.112762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 226.121688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.134017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.141987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.151050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.159584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.169383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.179993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 226.190570] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 226.204785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 226.213383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.235963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.245728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.260717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.272716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 226.287362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 226.298860] hrtimer: interrupt took 31028 ns [ 226.302260] 8021q: adding VLAN 0 to HW filter on device batadv0 05:49:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) [ 226.317294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.327776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.340541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.348445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.364151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.375222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.386381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.396649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.408870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.419357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 226.428291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 226.445337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 226.461503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 226.485017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.499101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.506253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.520390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.528026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.541346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.552851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.561086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.569091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.577050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.589035] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 226.595581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.613528] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 226.624843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.645530] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 226.662913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 226.680391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.688174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 05:49:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020056b35eb800650404000100000004040000850000001f000001b70000140000000095000000000f32bf4500000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb365208ee7fd372b0468712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xfffffffffffffdfd) close(r3) r7 = dup3(r2, r6, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x24d}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) clock_gettime(0x3, &(0x7f0000000380)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r3, 0xb20) munlockall() [ 226.703142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.717395] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 226.738226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 226.758472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.767051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.796882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.805465] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 226.823827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.846082] x86/PAT: syz-executor3:7787 map pfn RAM range req write-combining for [mem 0x56eb0000-0x56eb3fff], got write-back [ 226.866843] bridge0: port 3(gretap0) entered blocking state [ 226.869500] x86/PAT: syz-executor3:7790 map pfn RAM range req write-combining for [mem 0x56eb0000-0x56eb3fff], got write-back [ 226.889519] bridge0: port 3(gretap0) entered disabled state [ 226.903019] device gretap0 entered promiscuous mode [ 226.909944] bridge0: port 3(gretap0) entered blocking state 05:49:18 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'batadv0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) rename(0x0, 0x0) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 226.915832] bridge0: port 3(gretap0) entered forwarding state [ 226.930448] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 226.951892] 8021q: adding VLAN 0 to HW filter on device batadv0 05:49:18 executing program 4: r0 = memfd_create(&(0x7f0000000400)='/dev/snH/seq\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x95ffffff, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 05:49:18 executing program 0: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="4ada54095bde540035170652b54357479465b20cab7a66c87ec24e9b1292658fffe1e40f413ffc6b73f7d46f848bfd0b0900230f75a07fc721ef3bbf41bc9e9ff5f41474c845f09941b8e3455eb149479e2f8cc3865db99adcef632cb6686342e0cef08be6bbbc45b746c89377647d44e115eb32be717cc5a30d16e329e9dc7d749fb3cd9f84cf062275bd80caf786e32c43fd07815b0c8c3c9064ea6bdf08c155826d", 0xa3, 0xfffffffffffffffb) keyctl$link(0x8, r0, r1) 05:49:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0xfffffffffffffed7, 0x0) getpeername(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000200)=0x426) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r0, r2) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000080)='y\x00', 0x2, 0x1) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f00000000c0)={0x3, 0x1, 0xffffffffffffffad, 0xfffffffffffffffa}, 0x10) 05:49:18 executing program 5: syz_mount_image$hfs(0x0, &(0x7f0000000300)='.//ile0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000680)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mkdir(&(0x7f0000000040)='./file0/f.le.\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') 05:49:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00'}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000280)='./bus/../file0\x00', 0x0, 0x7ff, &(0x7f00000002c0)) syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000004c0)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES64, @ANYRESHEX=r1, @ANYPTR, @ANYRESDEC=r1]]) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000480)=0x8) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000540)) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000000c0)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x2, 0x7}, 0xc) 05:49:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) 05:49:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc008551b, 0x0) 05:49:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x76, &(0x7f0000ad2000), &(0x7f0000000080)=0xfdd2) [ 227.288773] bond0: Releasing backup interface bond_slave_1 05:49:18 executing program 4: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) [ 227.359368] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 05:49:18 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1ffb, 0x0) [ 227.431581] overlayfs: filesystem on './file0' not supported as upperdir 05:49:18 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000057e5249231714d8bfaaacddfc6f31900f60f0000000000"], 0x1, 0x0, 0x0) [ 227.496600] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:49:19 executing program 1: syz_mount_image$hfs(0x0, &(0x7f0000000300)='.//ile0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000680)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mkdir(&(0x7f0000000040)='./file0/f.le.\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') [ 227.566179] bond0: Releasing backup interface bond_slave_1 05:49:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 227.663975] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:49:19 executing program 3: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180), 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 05:49:19 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003600)={0xb, 0x9, 0xa9, 0x80000000000008, 0x400000000000001}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x2, &(0x7f0000000140)=@raw=[@initr0], 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000340), 0x0}, 0x18) 05:49:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00'}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000280)='./bus/../file0\x00', 0x0, 0x7ff, &(0x7f00000002c0)) syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000004c0)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES64, @ANYRESHEX=r1, @ANYPTR, @ANYRESDEC=r1]]) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000480)=0x8) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000540)) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000000c0)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x2, 0x7}, 0xc) 05:49:19 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x0, [0xfffffffe]}) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") [ 227.859377] bond0: Releasing backup interface bond_slave_1 05:49:19 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000000079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="23031c"]) [ 227.960273] overlayfs: filesystem on './file0' not supported as upperdir 05:49:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 228.032266] vhci_hcd: invalid port number 0 05:49:19 executing program 1: syz_mount_image$hfs(0x0, &(0x7f0000000300)='.//ile0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000680)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mkdir(&(0x7f0000000040)='./file0/f.le.\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(r0, &(0x7f0000000240)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') [ 228.112659] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:49:19 executing program 4: 05:49:19 executing program 3: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180), 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 05:49:19 executing program 5: 05:49:19 executing program 2: 05:49:19 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000000079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[]]) 05:49:19 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x9, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x1c}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000007c0), 0x8) 05:49:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x1, 0x2) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000004c0)) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r3, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRESDEC]]) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000180)) bind(r2, &(0x7f0000000580)=@ax25={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}, 0x80) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000480)=0x8) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00:\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000000c0)=0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x2, 0x7}, 0xc) [ 228.464146] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 228.559527] netlink: 'syz-executor3': attribute type 1 has an invalid length. 05:49:20 executing program 4: 05:49:20 executing program 2: 05:49:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:20 executing program 1: 05:49:20 executing program 3: 05:49:20 executing program 2: 05:49:20 executing program 4: [ 228.686148] bond0: Releasing backup interface bond_slave_1 05:49:20 executing program 4: 05:49:20 executing program 1: 05:49:20 executing program 2: 05:49:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 228.795023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.869527] bond0: Error: Device is in use and cannot be enslaved 05:49:20 executing program 5: 05:49:20 executing program 2: 05:49:20 executing program 4: 05:49:20 executing program 1: 05:49:20 executing program 3: 05:49:20 executing program 4: 05:49:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:20 executing program 5: 05:49:20 executing program 2: 05:49:20 executing program 1: 05:49:20 executing program 3: 05:49:20 executing program 1: 05:49:20 executing program 2: 05:49:20 executing program 4: 05:49:20 executing program 5: 05:49:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:20 executing program 3: 05:49:20 executing program 2: 05:49:20 executing program 1: 05:49:20 executing program 5: 05:49:20 executing program 4: 05:49:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:20 executing program 5: 05:49:20 executing program 3: 05:49:20 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000200)='./file0\x00', 0x8007, 0x16ea) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB="3b7f54cf20e205b9d76d80dfe04d6de28c7e2e3624d238e9a838bcdeab2efcb604d18394"]]], 0x8}, 0x0) 05:49:21 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r0, 0x20009) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="cc", 0x1}], 0x1) 05:49:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$gfs2(&(0x7f0000000100)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") 05:49:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/17) 05:49:21 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) flock(r0, 0x2) mknod(&(0x7f0000000240)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) write(0xffffffffffffffff, &(0x7f0000000400)="dbe3445a1ec523b8a437abde16d7c00cfe32df4e8a0daf87789ee4aa2c4b45cdca01f10afd78948271238b3521f1e168709567a6d0c894a311b3b5b8f2ec6b5416d88f", 0x43) [ 229.710477] sctp: failed to load transform for md5: -2 [ 229.765014] gfs2: not a GFS2 filesystem 05:49:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 05:49:21 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x8d) write$UHID_INPUT(r2, &(0x7f0000000840)={0x8, "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", 0x1000}, 0x1006) 05:49:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x37c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000300)) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x4e24, @local}}) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000180)=0x80000000001, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f0000000580)="47cda24de898e255558e75461da3220f6a9fae1f861b8bddcb4925f8153e", 0x1e) fcntl$addseals(r0, 0x409, 0xc) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x400080, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x4, 0x66b665e, 0x9, 0x3, 0x0, 0x9, 0x20000, 0x2, 0x5b9, 0x80, 0x8, 0x3ff, 0x8, 0x600000000000, 0x8001, 0xba, 0x8, 0x7, 0x3, 0x401, 0x0, 0x10001, 0x8, 0x946, 0x7f, 0x1f, 0xea28, 0xffffffffffffff41, 0x3ff, 0x0, 0x8, 0x100, 0x6d, 0x200, 0x6, 0x5c7b, 0x0, 0x4, 0x4, @perf_config_ext={0x7fffffff, 0x100}, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0xfffffffffffffffd, 0xbb51, 0x8}, r2, 0xe, r3, 0x8) sendmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f0000000c00)=@nl=@proc, 0x80, &(0x7f0000000dc0), 0x0, &(0x7f0000000240)}}, {{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000005500), 0xc2, &(0x7f0000005540), 0xfffffea2}, 0x516b}], 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000240)={0x20, 0x0, 0x3, {0xffffffffd889fe7e, 0x4, 0x2, 0xf723}}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r1, &(0x7f0000000380)="59ea4234ef00e0fe72f614439a92572ea468c613ed452542fc426c884324a2b7358e3fd634e8445f7cbcae1dc53ca1c7fbea96f232e1464aa60bbbf85c1089760b747a352df8b4efcd0cd3be4453b4b95e9cc5406a52b392a5b283853741fe78b01260e00413b71bae8b78d3e24aa5f72736573b691754bca70e3d49ba6283ee0aa0ca9396d92d8478ffc56b8dba", &(0x7f0000000440)=""/209}, 0x18) 05:49:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000580)="0234866d2f3d4ef9c882e457ac919c235faa10d74ef3756a1aca950aa6139af2de8c4b8f5b5d52b5bb46") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0xdd4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r1, 0xffffffffffffffce) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000002f40)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = mq_open(&(0x7f00000003c0)='\aoj9\xbc\xf6u=w\x0e\xecuWOA\xe8\x85\x02^;\x8f\x9c\xd2a\xc1c\x1f8h\x84\x9ej2#\xe3g\xdd\x13\xedI\xdc\xa1\xfc1\xe5\x01VZ.\xfbD\x7f.\xbb\x99\xdb\xb7\xef\xbe\x1c\xc9\xb6\x17g\xff\xec\xf4\xe8lD{\xa8\x04\x0f\x8f\b\x8e\xf9ln\x90\xca\xf1\x97\xb6[\x14})\v\xeeU\x14o\x1b1fV\xbf\r\xa51zhq\x10\v\xf5\xb1g\x9c\x1c\x83b\xd3\xa3\xd7\xb9\xeb\xf9\xc0\xd1\x15\xf1\xa3\x8a^\xbe\x12\x97\xc8lf\x95\x9e \x00\x00\x00\x00\x00\x00\x00\x0er\x05\x1d\xd8\xaa\xf5\xd4\xc0\xd0\x80,\x05V\xe46/9x\xd5P\xd1v\'?\x1d|\xe5\xe2\xe9\x7fy|\x1f\xb47d\x10\x8c\xcc\x91\x82\x925\xeb\xe8\x88\"\x96B\xec\x9c\xa8\xa7\x7fr$\xb4\xa0', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x5, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f00000004c0)=""/118, 0xd7) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 05:49:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) 05:49:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:21 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0xe280, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet6(0xa, 0xf, 0x8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) tkill(r2, 0x2c) r3 = getpgrp(0x0) ptrace$getsig(0x4202, r3, 0x101, &(0x7f0000000040)) r4 = getpid() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r4) tkill(r4, 0x9) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000000)) write$capi20_data(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x9d) inotify_init() 05:49:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 230.130368] audit: type=1804 audit(1546408161.550:31): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir547917167/syzkaller.na1hXC/13/file0/file0" dev="sda1" ino=16521 res=1 05:49:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff}, 0x30) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000240)={0x1, 0x0, {0x0, 0x8000, 0x4, 0x3ff}}) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10000, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r2, &(0x7f00000001c0)={r6, r2, 0x5b3}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e22, 0x5, @mcast2, 0xfe3}, {0xa, 0x4e24, 0x3d2, @empty, 0x3ff}, 0x7, [0x775, 0x3, 0x1ff, 0xed, 0x81, 0x9c44, 0x77, 0x1]}, 0x5c) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$RTC_WIE_OFF(r7, 0x7010) 05:49:21 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x8d) write$UHID_INPUT(r2, &(0x7f0000000840)={0x8, "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", 0x1000}, 0x1006) [ 230.214686] audit: type=1804 audit(1546408161.580:32): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir547917167/syzkaller.na1hXC/13/file0/file0" dev="sda1" ino=16521 res=1 05:49:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x3, 0x113100) r3 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@multicast2}}, &(0x7f0000000800)=0xe8) getresgid(&(0x7f0000000840)=0x0, &(0x7f0000000880), &(0x7f00000008c0)) r6 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000fc0)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000010c0)=0xe8) getresgid(&(0x7f0000001100)=0x0, &(0x7f0000001140), &(0x7f0000001180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0)={0x0}, &(0x7f0000001200)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001240)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000001340)=0xe8) stat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001480)=[{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)="c1768613a4b99dc75d91c9686229c0e009aefd3f1b0911f07f", 0x19}, {&(0x7f0000000600)="e6aab4acad30fea5b0c9387796ed1c8627d65a0a89bab09a5a7da96f663bc3e8248b8c8e4b1a4efa4feb580512c4391772d7cecd7889b7759b07bbee5fd61883553ab68fe625d1195b54ec8b6b39e0f4f5bbb140cd30c01eac1b86ea9a4091d7342cc0fd493c0cf0dee67172d686e770", 0x70}, {&(0x7f0000000680)="b9e65ed29c552e0c6401a71b5b79f1a14f946dc591c2d03dbd3c389e84", 0x1d}], 0x3, &(0x7f0000000900)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r0, r1, r0, r0, r1]}], 0x48, 0x4000800}, {&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000a00)="d3b440f7020b817b3965eeb5147034968e461c89d19bb8f7c5807e3bf33049182e63e24b448b928725bd6619d9a83e0c188dce555160dde3aed0a160c8a193064444fc9a322d7cf19008e803ed7b2bd57fa57801158a8ef3a818884b6e3d431c29c18487bbdb1be4ec7bb267653ff5cf0634e618079cf5f1956083f3359ca9195d41100bff4b4b4951fde7453beb9a2a3a2ad844707033f199d3ff237005237898f0a1382685a4deb7ae", 0xaa}, {&(0x7f0000000ac0)="07f81eea848103c9b21f7b9a2eb5b89f9c5d3668e460276906d78665637521ed3052f9e538a72fb2121e2f2a9648061e104aa9045b6e0dea652f063025704800762229e8a159b3affafab47e5a3d60ed1fc56c869b23e11ca6a18f0115101b2b04ea39ad01247d17fde85a52f260dc51fcb5a63b93a113a72f35ef65d8ce2512d53480b3494a9988b31de5cda20e8cbb513f8916603578ea255df14c6fd1323d16920e5e9ef395abe5bc4d7807a72638a87f55849aaddd7bdd89a8b51f9f9cef27db0b7abb8aece9e59cfbed9a78f1836e50e54ea25b56ffb151a29ec55f29a3fed421b04b5e9733d5a555d20cae819fb995099175eec169fcfcc2", 0xfb}, {&(0x7f0000000bc0)="f9725c5d298b5c2ab8aafe5472574166721d03c3e67ec09d04580469ae61c0ffcf", 0x21}, {&(0x7f0000000c00)="e8a2a1c5541c25b81854962394cd09b63c9326c97f64ded31b7867a338e50581bd808b42dfecea82e8ed8ff70d9e2f82872a90bcb42da19b4949ec1fcf22bd5c82a9be3aa89167fbd75db315b0891ececf7dc2fb5d53d74f4ebcb9bde1449e5006c32eee737116daa2208e449b95bd1582ed2194909ccdee3b145984662a30ad95931744291f450605", 0x89}, {&(0x7f0000000cc0)="0dee26c166c39f96f6a02c60f5b366bdbb976d3e0d9ca0247e7933d44f28345a92cc393f0a6e5c06cf777c6cc2b854b45199c17b69721df8acb6dc94ff723f2527cb36041865ade590c4b0c6355ebb0f9cfdcb8f15af0977034cf8f0a4dbc5ff8f37b67887eb0fe4e594c5e240ee09a8cbb112d2c91b64d9a5a14ef5fe0fe5b3346cbd0de72ab2adc59f686e0a163bdb5f806834f0666c6b3af097d06dee778a133e097d1aad21c3696590c93a96ea10f315964d6d0cac9386674d1d3677ffa4be6c80f4c46709e6a4af69ed603ad3d403e1db17b40725f2ad70710679e505bfdbf18f48", 0xe4}, {&(0x7f0000000dc0)="3bd8d9a01d0bc790d64511b8e6fe2346d5448b97816d9551b97186f09c3331b6f861d0c0d4071b4deb1011d8606e68e71dad", 0x32}, {&(0x7f0000000e00)="b3e813430eb84c137aa03eb4ccaeaf223928f7596c6800b9f253b8f68f8294613a64c7e16fa3d94b91c9a895e2d113cde16f4472633d5d4563b75942917680fe3f3d05e148447c2113af5ce6f2e0d5a0a5c37a61efb612c1f24276fbcdca30c1cfdb67fb2b3a02f7216c77bad856f2f193c36e0f563340debe328849e19b44bd4116c4bd7b1916", 0x87}, {&(0x7f0000000ec0)="552dd536ec590d210f71fd6f9c320977d7d96d67b903207bfc5c2df7d87dcb2eaab1ec8ad1fc7ef677ceb8b2f56897662c5d03c9678241f65d67a20c9718aadbd0a5568c438c7fe0883ea5e1734dc8dfa41127c35b880a9bbf9e74749440118ee0fb02e526e0", 0x66}], 0x8, &(0x7f0000001440)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x40, 0x8000}], 0x2, 0x20000011) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r12 = semget(0x0, 0x2, 0x600) semctl$IPC_STAT(r12, 0x0, 0x2, &(0x7f0000000080)=""/103) read(r0, &(0x7f0000000440)=""/183, 0xb7) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x1, 0x10000, 0x5, 0x0, 0x401, 0x0, 0x2, 0x5eeb000000000000, 0x6, 0x2, 0x7, 0x2, 0xfffffffffffffffa, 0x100, 0x5, 0xffffffffffff333e, 0x7ff, 0x39, 0x8001, 0x4, 0x2, 0x0, 0x5e8, 0x9, 0x100000, 0xffffffff, 0xdcd, 0x1, 0x51, 0x6, 0x70, 0xffffffffffff8000, 0x4, 0xd53, 0x0, 0x0, 0x6, 0x6, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0xffffffff, 0x4, 0xf, 0x1, 0x9, 0x100000001}, 0x0, 0xe, r1, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f00000001c0)=0xf2) sendto$inet6(r0, &(0x7f0000000280)="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", 0xfc, 0x54, &(0x7f0000000380)={0xa, 0x4e23, 0x158, @remote, 0x7}, 0x1c) r13 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r13, 0x80045400, &(0x7f0000000400)) 05:49:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000580)="0234866d2f3d4ef9c882e457ac919c235faa10d74ef3756a1aca950aa6139af2de8c4b8f5b5d52b5bb46") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0xdd4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r1, 0xffffffffffffffce) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000002f40)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = mq_open(&(0x7f00000003c0)='\aoj9\xbc\xf6u=w\x0e\xecuWOA\xe8\x85\x02^;\x8f\x9c\xd2a\xc1c\x1f8h\x84\x9ej2#\xe3g\xdd\x13\xedI\xdc\xa1\xfc1\xe5\x01VZ.\xfbD\x7f.\xbb\x99\xdb\xb7\xef\xbe\x1c\xc9\xb6\x17g\xff\xec\xf4\xe8lD{\xa8\x04\x0f\x8f\b\x8e\xf9ln\x90\xca\xf1\x97\xb6[\x14})\v\xeeU\x14o\x1b1fV\xbf\r\xa51zhq\x10\v\xf5\xb1g\x9c\x1c\x83b\xd3\xa3\xd7\xb9\xeb\xf9\xc0\xd1\x15\xf1\xa3\x8a^\xbe\x12\x97\xc8lf\x95\x9e \x00\x00\x00\x00\x00\x00\x00\x0er\x05\x1d\xd8\xaa\xf5\xd4\xc0\xd0\x80,\x05V\xe46/9x\xd5P\xd1v\'?\x1d|\xe5\xe2\xe9\x7fy|\x1f\xb47d\x10\x8c\xcc\x91\x82\x925\xeb\xe8\x88\"\x96B\xec\x9c\xa8\xa7\x7fr$\xb4\xa0', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x5, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f00000004c0)=""/118, 0xd7) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 05:49:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000580)="0234866d2f3d4ef9c882e457ac919c235faa10d74ef3756a1aca950aa6139af2de8c4b8f5b5d52b5bb46") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0xdd4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r1, 0xffffffffffffffce) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000002f40)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = mq_open(&(0x7f00000003c0)='\aoj9\xbc\xf6u=w\x0e\xecuWOA\xe8\x85\x02^;\x8f\x9c\xd2a\xc1c\x1f8h\x84\x9ej2#\xe3g\xdd\x13\xedI\xdc\xa1\xfc1\xe5\x01VZ.\xfbD\x7f.\xbb\x99\xdb\xb7\xef\xbe\x1c\xc9\xb6\x17g\xff\xec\xf4\xe8lD{\xa8\x04\x0f\x8f\b\x8e\xf9ln\x90\xca\xf1\x97\xb6[\x14})\v\xeeU\x14o\x1b1fV\xbf\r\xa51zhq\x10\v\xf5\xb1g\x9c\x1c\x83b\xd3\xa3\xd7\xb9\xeb\xf9\xc0\xd1\x15\xf1\xa3\x8a^\xbe\x12\x97\xc8lf\x95\x9e \x00\x00\x00\x00\x00\x00\x00\x0er\x05\x1d\xd8\xaa\xf5\xd4\xc0\xd0\x80,\x05V\xe46/9x\xd5P\xd1v\'?\x1d|\xe5\xe2\xe9\x7fy|\x1f\xb47d\x10\x8c\xcc\x91\x82\x925\xeb\xe8\x88\"\x96B\xec\x9c\xa8\xa7\x7fr$\xb4\xa0', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x5, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f00000004c0)=""/118, 0xd7) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 05:49:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 230.464181] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 05:49:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:22 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000580)="0234866d2f3d4ef9c882e457ac919c235faa10d74ef3756a1aca950aa6139af2de8c4b8f5b5d52b5bb46") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0xdd4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r1, 0xffffffffffffffce) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000002f40)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef443394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = mq_open(&(0x7f00000003c0)='\aoj9\xbc\xf6u=w\x0e\xecuWOA\xe8\x85\x02^;\x8f\x9c\xd2a\xc1c\x1f8h\x84\x9ej2#\xe3g\xdd\x13\xedI\xdc\xa1\xfc1\xe5\x01VZ.\xfbD\x7f.\xbb\x99\xdb\xb7\xef\xbe\x1c\xc9\xb6\x17g\xff\xec\xf4\xe8lD{\xa8\x04\x0f\x8f\b\x8e\xf9ln\x90\xca\xf1\x97\xb6[\x14})\v\xeeU\x14o\x1b1fV\xbf\r\xa51zhq\x10\v\xf5\xb1g\x9c\x1c\x83b\xd3\xa3\xd7\xb9\xeb\xf9\xc0\xd1\x15\xf1\xa3\x8a^\xbe\x12\x97\xc8lf\x95\x9e \x00\x00\x00\x00\x00\x00\x00\x0er\x05\x1d\xd8\xaa\xf5\xd4\xc0\xd0\x80,\x05V\xe46/9x\xd5P\xd1v\'?\x1d|\xe5\xe2\xe9\x7fy|\x1f\xb47d\x10\x8c\xcc\x91\x82\x925\xeb\xe8\x88\"\x96B\xec\x9c\xa8\xa7\x7fr$\xb4\xa0', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x5, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f00000004c0)=""/118, 0xd7) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 05:49:22 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000580)="0234866d2f3d4ef9c882e457ac919c235faa10d74ef3756a1aca950aa6139af2de8c4b8f5b5d52b5bb46") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0xdd4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r1, 0xffffffffffffffce) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000002f40)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = mq_open(&(0x7f00000003c0)='\aoj9\xbc\xf6u=w\x0e\xecuWOA\xe8\x85\x02^;\x8f\x9c\xd2a\xc1c\x1f8h\x84\x9ej2#\xe3g\xdd\x13\xedI\xdc\xa1\xfc1\xe5\x01VZ.\xfbD\x7f.\xbb\x99\xdb\xb7\xef\xbe\x1c\xc9\xb6\x17g\xff\xec\xf4\xe8lD{\xa8\x04\x0f\x8f\b\x8e\xf9ln\x90\xca\xf1\x97\xb6[\x14})\v\xeeU\x14o\x1b1fV\xbf\r\xa51zhq\x10\v\xf5\xb1g\x9c\x1c\x83b\xd3\xa3\xd7\xb9\xeb\xf9\xc0\xd1\x15\xf1\xa3\x8a^\xbe\x12\x97\xc8lf\x95\x9e \x00\x00\x00\x00\x00\x00\x00\x0er\x05\x1d\xd8\xaa\xf5\xd4\xc0\xd0\x80,\x05V\xe46/9x\xd5P\xd1v\'?\x1d|\xe5\xe2\xe9\x7fy|\x1f\xb47d\x10\x8c\xcc\x91\x82\x925\xeb\xe8\x88\"\x96B\xec\x9c\xa8\xa7\x7fr$\xb4\xa0', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x5, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f00000004c0)=""/118, 0xd7) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 05:49:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000580)="0234866d2f3d4ef9c882e457ac919c235faa10d74ef3756a1aca950aa6139af2de8c4b8f5b5d52b5bb46") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0xdd4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r1, 0xffffffffffffffce) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x6) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r2, &(0x7f0000002f40)="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", 0x241, 0x0, &(0x7f000069affb)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = mq_open(&(0x7f00000003c0)='\aoj9\xbc\xf6u=w\x0e\xecuWOA\xe8\x85\x02^;\x8f\x9c\xd2a\xc1c\x1f8h\x84\x9ej2#\xe3g\xdd\x13\xedI\xdc\xa1\xfc1\xe5\x01VZ.\xfbD\x7f.\xbb\x99\xdb\xb7\xef\xbe\x1c\xc9\xb6\x17g\xff\xec\xf4\xe8lD{\xa8\x04\x0f\x8f\b\x8e\xf9ln\x90\xca\xf1\x97\xb6[\x14})\v\xeeU\x14o\x1b1fV\xbf\r\xa51zhq\x10\v\xf5\xb1g\x9c\x1c\x83b\xd3\xa3\xd7\xb9\xeb\xf9\xc0\xd1\x15\xf1\xa3\x8a^\xbe\x12\x97\xc8lf\x95\x9e \x00\x00\x00\x00\x00\x00\x00\x0er\x05\x1d\xd8\xaa\xf5\xd4\xc0\xd0\x80,\x05V\xe46/9x\xd5P\xd1v\'?\x1d|\xe5\xe2\xe9\x7fy|\x1f\xb47d\x10\x8c\xcc\x91\x82\x925\xeb\xe8\x88\"\x96B\xec\x9c\xa8\xa7\x7fr$\xb4\xa0', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x5, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f00000004c0)=""/118, 0xd7) unshare(0x800) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 05:49:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:22 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001440)={'filter\x00', 0x4}, 0x68) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3db) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) write$binfmt_elf64(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0xc25) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:49:22 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@dellink={0x28, 0x11, 0xc03, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x6, 0x7fff, 0x91, 0x34e}, &(0x7f00000000c0)=0x98) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000300)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r2, 0x5}, &(0x7f00000002c0)=0x8) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 05:49:22 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x40) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000100)={0xffffffff, 0x8, 0x0, 0x200}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f00000000c0)=0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401104000000016) 05:49:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:22 executing program 2: futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc), 0x84, 0x0, &(0x7f000000d000)={0x0, 0x7f}, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x7) 05:49:22 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x6f) capset(&(0x7f0000000100)={0x0, r1}, &(0x7f0000000200)={0x8, 0x6, 0x6f, 0x3, 0x9, 0x256000000000000}) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000240)={0x0, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x5, 0x8) mmap$perf(&(0x7f00000a3000/0x2000)=nil, 0x2000, 0x0, 0x40010, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x12000) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)) 05:49:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:22 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 231.500872] audit: type=1804 audit(1546408162.920:33): pid=8175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir371082999/syzkaller.SlZAJx/16/bus" dev="sda1" ino=16562 res=1 05:49:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000003c0), 0x4) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x71}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000780)=0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x0, 0x18}, 0xc) shmctl$IPC_RMID(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x20000) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200) 05:49:23 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 231.685377] audit: type=1804 audit(1546408163.100:34): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir371082999/syzkaller.SlZAJx/16/bus" dev="sda1" ino=16562 res=1 [ 231.768815] audit: type=1804 audit(1546408163.100:35): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir371082999/syzkaller.SlZAJx/16/bus" dev="sda1" ino=16562 res=1 05:49:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000003c0), 0x4) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x71}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000780)=0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x0, 0x18}, 0xc) shmctl$IPC_RMID(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x20000) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200) 05:49:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:23 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00'}, 0x45c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200000, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x101}}, 0x18) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xdbb) write$binfmt_elf32(r2, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x9e7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) 05:49:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x6f) capset(&(0x7f0000000100)={0x0, r1}, &(0x7f0000000200)={0x8, 0x6, 0x6f, 0x3, 0x9, 0x256000000000000}) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000240)={0x0, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x5, 0x8) mmap$perf(&(0x7f00000a3000/0x2000)=nil, 0x2000, 0x0, 0x40010, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x12000) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)) [ 232.062427] input: syz1 as /devices/virtual/input/input5 [ 232.064563] audit: type=1804 audit(1546408163.480:36): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir371082999/syzkaller.SlZAJx/17/bus" dev="sda1" ino=16568 res=1 [ 232.140417] input: syz0 as /devices/virtual/input/input6 05:49:23 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipmr_newroute={0x70, 0x18, 0xf01, 0x70bd2a, 0x25dfdbfc, {0x80, 0x80, 0x20, 0x79c0, 0xff, 0x0, 0x0, 0x0, 0x100}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x1}, @RTA_ENCAP={0x3c, 0x16, @generic="542318259acdd82c12d372c8f636c47e1d94685b71a4a7f24602e9f2bc2bbbd85147b7eaa6261b0686dc53c8651dcfb4e8a85374ce12abdc"}, @RTA_DST={0x8, 0x1, @loopback}, @RTA_MARK={0x8, 0x10, 0x7ff}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x2000000000000000) r1 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='vboxnet1-security\')system.trusted\'\xf5\x00', 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x2}, r2) 05:49:23 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x68, 0x1, 0xa}]}, &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0xffffffffffffffff}, 0x48) 05:49:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:23 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") socket$inet(0x2, 0x1, 0x3) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r4, 0x1000008912, &(0x7f00000000c0)) close(0xffffffffffffffff) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) write$binfmt_elf32(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c467f000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000e1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002dfa08df3e87c8e4000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099cb176c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f0000000000000000ffff0000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c432ea91d21a56b31c60e1082000000f7ffffffffffffff0000000000000000000042ba3d1987b6032a1fe9f3bf33e16775b2de7d5511f30b589914ed13d7a640048afc6e367620fa6d83280fea392b519f311648cc5578c5156e427f82cadacef845dbd001a7ef9eb2df20eab1744456b97a7e7638ffb0697ac7a90b68dd568c256ed0d3882be00bf573a113207522a5ab537a5dd8e64d4e71e7e2eaf0951db94abe1d96dd10c33bbef8c8fe226cdb66b5"], 0x5b1) bind$alg(r2, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis128-generic)\x00'}, 0x58) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8b", 0x1, 0x4000101, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00\x00\x00\x00\x00\xe4\xa1\x00', 0x10) write(r1, &(0x7f0000000ec0)="89f9d765312b4001000000b0967bdae72ee5094371136a6477ba0a51a2969dbc2d4028ac7b5af67f178f9314ea2bb3ac1c442eaf749c21ae2af8e39a40c3dc032e6f8eb738786a79df71302ff3b5d42731597d995bed6103ff63b9a908bcc05e0400000092bdf4d3282f62d6928117f82c2dae48742dac857de846096e82c1a02e1edcadda721a3f8dc9a54da05d467ed35b6f931d8686986960e756048c61c2a2c374c318d21d7a7ef550779190066e82ea3f6724a9f61ff028ec7e8d7a04352e7a78f777a68b823abb646bdc55dbde285ce15bf45820f0ae20e4023f57c71f8b41e08eff14c3441485c6f54a30750c780852dad879d6d4be7243bd07f841f89009000000c23d6b4f70fe48b54577449cfcbc4d5dbefb8b465d45bc2d11afbe7bfbe6ca76ac259e634eebf8db694ff02fe2b4c80783b443ef68287e9cf7cbcc2ee196f10c4ffb3f59e4921e0f9f08cba9a2c56c49fa7465b4836da5b2d9b142763889caa718d8a4fcb2f3ef6dc6185708fb1e0f9081d29fb3defae8c525f07437c7835b4eac8f86e2a22a81eff4120340e4a379446aac45dbff791d147805cd2748d74b8996c9b51ec03b410ef8fe126117fbf106795bc1b25d8dd786b6496bd743b7c75c638b516214ff56ec99a9c0f2919fa781cd8b4f2f2e425a6780c630a05c8e60011bc8e10055a6b6b652e5a13c73fd96f79038a65d6991ac38899ab98486d92bbcffdcf39a08a248ae1045ff8c6123de2f15d9ac360a3497c07001a3a1936ff1c03194ace131d380f515629ff016bd890ff822704c0db8bc68efad2eace5466628e7d6c2f2b3043698c46fdd62588fc54b72a786af0d026353879892c58007f7988a3f2240a43303218cc1df27807bfbde117c505f060396850a82459830a89a6a8601ea2e47f2e41379d110b96576f8f7705bba7ec63d6b44ccf84073cf9bdcf1aee48cb60c2f6dd3e89f3626a5e23339ea99c918d76a43fecf7401f7550e8eaefa4d84f1143320599daf7699858b2bf408e9093aa91d6dd9ae39d8decf3f7a199b0c1918d47be3b7aeff9a8c10efabe787b43141e7abaa4317158864b0361568140ab79cade1223c3ef81da4c4eefdd5b21fcc1b87872fc3b346737105589b84ba9814679b7510ed9b4f290083ee634ae12243ccc63413d7bc35eee0d1a4bc9dd33c37f5130303edddfc2636ffbf1ee0febb953436710c2ed9bd001d2ebe878788ddf7f7ad55b7a8cbcb348e82cd65b59315858086606115d04a3cda0e4af2a703afe09e4afedf00d5fbb2284df9af1d1ec9f15356c58fdcde45fff250568347f3b0b49e11e44c0a4d98a1e3393ce5d76614990f23b2e146842b166fb070894c128f957b0cc7d80a16275efd15659e0f81990062ebfdf9454d12e63d1ce1dad7848fcbab642a0d62ebb17abc824883e4c6e1e81992f28f5bbd7b26e2645c7941b03dd2f27c29baa2412976a05fa13d8fc4d6bd152a8668d986a9cf605b8b4a61600481e01bdd74c96d73390518add968100ac742aaf5dd7eb4ccf0868ee3ef7f12c32298737dea65bd5d7161dd679b4dd6799aa086bf3b8c889780ac102b7b1ebcf2569dd77f201d74d94a61400ced9c613414012b451628a96e6cc8fe738e964940f7b753065677776f3b5398975aeac974fced560667cead03a8976eb4229ff4e1bca5588d5d544cbca8588215a2f5ef7a5fc1a07438d3a3e05d21eb30d46f1688543d4327d36e07635396eaab4e9bc862ee9c7fa24de38c5cbf8fa5afd024116bc84854d01072145ecc4bb415d94a333e0d91e9cf6fda5a2c244a585e3a32c95398f44800c578faf4a2ccc5979664db7a55aa5cc02789f84321ccaeed4f37dd48c8d1484ade0588fc4255ec8780534a693e2bfe88b622034552084492c6757429239bbe8dad8b904e58007639ca773344040a441dc0027a46c22198f3d0b0588e164881a9fc7a85a63c459b0d002e3d890edd250742d363e85250badb91a734759baf773c32b177d36eefb662be70", 0x595) sendto$inet(r1, &(0x7f00000003c0), 0xfffffdef, 0x5940, 0x0, 0x0) 05:49:23 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) listen(r0, 0x7) setsockopt(r0, 0x2000000000010d, 0x4000800000000b, &(0x7f0000000280)='\a\x00\x00\x00', 0xfffffffffffffdeb) pkey_alloc(0x0, 0x2) 05:49:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040), 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0xffffffffffffffe5, 0x4840) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="0112153ee9529d260edb327fad91b487fe6aabd4e31e195de0c23f27cabf5b2ffdadf0640630bc5b1eef27e920da4ee38c6d87a09f1f30eab043646e2877feb0b4feba28e3165e98382dcae48760b4e73598d0c53117907365541f632afa000000000000000000000000", @ANYRES16=r2, @ANYBLOB="00002cbd7000fddbdf25040000001c0002000800070015a30000080003000200000008000800010000002000030008000800ff00000014000200626f6e643000000000000000000000000c000100080004004e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000240)=""/28, 0xfffffe5a}], 0x1, 0x74) 05:49:23 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x80004002, 0x0) r1 = socket(0x8, 0x6, 0x7) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1f0, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x96}]}, @TIPC_NLA_LINK={0xc8, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8520}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa10}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79c00000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4000000000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x92c7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x1f0}}, 0x1) io_setup(0xa, &(0x7f00000002c0)=0x0) io_submit(r3, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x4068, 0x0, 0xd, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x400000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x7, {0x101, 0x0, 0x3, 0x8}}) ioctl(r4, 0x1000008912, &(0x7f00000012c0)="0adc1f023c123f3188a070") 05:49:23 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, 0x0) 05:49:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40880, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x1dc}, &(0x7f0000000100)=0x8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 05:49:24 executing program 1: r0 = gettid() select(0xb, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000180)={0x77359400}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rename(&(0x7f0000000040)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 05:49:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:24 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000011000/0x2000)=nil, &(0x7f0000010000/0x3000)=nil, 0x2000}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xa400, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0xa940}}, 0xffffffffffffff01, 0x4, 0x80000001, 0x400, 0xda}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r3, 0x400}, &(0x7f0000000200)=0x8) 05:49:24 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) r2 = getegid() write$FUSE_CREATE_OPEN(r0, &(0x7f0000000340)={0xa0, 0xfffffffffffffff5, 0x6, {{0x4, 0x0, 0x4, 0x4, 0x800, 0x2, {0x6, 0x8001, 0x8, 0x81, 0x3, 0x5, 0x20, 0x7, 0x8, 0x1, 0x8, r1, r2, 0x6, 0x56b}}, {0x0, 0x1}}}, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents(0xffffffffffffffff, 0x0, 0xffffffffffffffc0) r4 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x2) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000000}, {}, {0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@local, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) prctl$PR_SET_SECUREBITS(0x1c, 0x3d) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r5, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="050784090200000000000000fbdbdf25"], 0x10}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:49:24 executing program 2: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x391900) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400000, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x31, 0x0, &(0x7f0000000140)=0xefc357881e29e91e) 05:49:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:24 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:24 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x46000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$unix(r0, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x80000) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:49:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:24 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000001c0)={0x8, 0x4, 0x2, 0x9}, 0x10) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xffffffffffffffff, 0x2000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x1b, 0x2, 0x4, 0x1200000, {r2, r3/1000+10000}, {0xed87e260aed6223a, 0xc, 0xfffffffffffffff9, 0x1, 0x9, 0x8001, "5f5d41dc"}, 0x8001, 0x7, @userptr=0x7f, 0x4}) r4 = socket(0x10, 0x802, 0x0) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r5, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) 05:49:24 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:24 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) io_setup(0x249, &(0x7f0000000000)=0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) io_submit(r1, 0x6, &(0x7f00000015c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0xd838, r0, &(0x7f0000000040)="c454b786ecba4dd3cdc1af647a756b72ee1d602aec326cf0dec37e638f8a51b537b1a5766a2d513cde808996ab340beab3f94c6b4e507d2cf97994eabc119f5ada", 0x41, 0x10000, 0x0, 0x0, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="61d697010cba4c59d27c28bd7c5da98da2bceef60c98443a392aaba0c28bddb6fe4fdbb44137e769bfa173dc3891cea2cd69d0f683cc957e4afeb32941a433a3be45bbd86841362c2155031c068feef49a8729f482a2dd4d32d4a2b6823a53462229382b3658d72647ac458ce91fadb3759d92558490dbdae9d03acca536f7526a1bfcd864a718641ab6c49eeaf38caf6307ab7e3e076a14e1a98b7625194e96ab3ba075a5b4032029a4d4437e545ab7e70cbd35d42ca06da07d8fe25a5eab4cc39e349eed2d3ac56eafcfacdfc635a27413874f84e17da9b1df169958a6", 0xde, 0x4, 0x0, 0x1, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xffff, r0, &(0x7f00000002c0)="e14d13fa925a57019c128cb2dff9867d69ebcbabccad13ac5a6f2d80e84803d7fdc62ef9aca6dbdf8fedcb6ed46e8a837952579e57e8c2e7f6420b0af0602a20ba073d58c205be539dfd2deaeb41ca799b981b1c28c446ceeda72b88ca4763de4e863c80a8228694a05786f7668fb464f6aa0412a15126e61c9b5e08e3a2ca35b4d33f880159c0d2334788b5d81d605401efc365d90aab1c094f575cc988df3b9d9aa88b6a8ceac2ddd640", 0xab, 0x33e5, 0x0, 0x1, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f00000003c0)="3c580f6f204921b0fdf03fd5db706d78ec34364b541e210e1cf6deb9611afed31bb2d8a70e2f96fdc71c0b8acf10e39ad20e10f2c3484ee295681ed36a76519c0641855a197dd3d6cd807fea711dd6652b9cdd6717ab2cf4d4181de8aa2e9d4305a3396a9b4150434b", 0x69, 0xff, 0x0, 0x2, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xf, 0x67bc, r2, &(0x7f0000000480)="707f6419777cf2c0c652893901fe05f205e03cf713df3c9718922ce592bf22113077f0d46103627d06681e04041ea9567e02c682750df1d250439fc8c5d3b48b46a1f8359281aa95e2145d3f7c79b1cca5e6ca8c8e431293806d65ba24726c817cb3267e5371109f9ca311dd3e61038519b7ee2d36e580e6a49fa6451642e0aa", 0x80, 0x9, 0x0, 0x0, r2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0xff, r2, &(0x7f0000000540)="2f9482328554b04b5ec7472b44b6979df338b4c707c6a23c4d502b919f4a7d3c73e102e9fbd8328119431d1f100a03a0f00a8d37c38af229768d306ffab27ec0af551880359af6b4bc5fd39ab280122bfdfd5e5f0ac3001ec301827bcd566e18bdb4c772853b669ecfc35f450fc1756c2630f9d9feda6a30c5432a066d20c2b6b9e94608ca03a66af1bf851777a880f853662dad95aaca4772b8ec2464fcaa2a0ff47fd477390a04db3813af25ee40ccb3b1147e05e23a1452bb46f164d0bb89c746c115abf36c070c3765992721c4ebb28a0221e6735e2b90f4c33686b93e70e52103cdbace8a2eb5373f40b9d7e72efaef6041ffefde1a0d2a6507edbd236ced19d7cd4b8fa3be2536e6d027bd3046d60e5ab31eaf600032c538b4e34aceb1f433c5839787491320a19f46a70986d64ce3024c0aacd622c1ee1f8d8c89f638d73c5fac58d1a7e8082fee4b6ecdcd319856634717326212c0472ee47d4c53213bf0c1a6adec59683c966bf9cd6a5caf9e17cd45465c08e71db9357c1b75ec11498e47a505f2ae834dadee58a3b02666ef248588590d4ebd171865a58741f47e621c1547ffe26d2e154c4db7c763d234910eced9ed020e3c09c9463812056291cd063185fe69fbb191447b0d44ed09bc87cc38c6f6e7eb80e749cf7d2c540656abd59c3398d647bf2ef272c99fa4bd438f8f7882d08151003ca70a8f8459a0ac01ae7aa7e2f724719cb7c0481b4bfca0e59fe67cb3161b320138ca663d8c7754b9428fd766452eb4714264d457f5270d12f7b8df3b86b47ff8a08843e64d4e9d182d8def3c6255267d1cbfd362a01a4787c44c51b56d6c7342ee94cea4730cfcc51a89e99cc87ec0da0772739a15e94659f0b8c96d5028a7b967270a434ba7cf91a100c91e78dd212b3bd845871f15dd1cd7c50b30f71c25107d1de80b2270d5bb08a4ba234fc20b1ceab217269a6cf27cc17b1f0aff00302f98c81b0d367c8fe95980541454a1dd00680e56f9877189c1c7df2f5f6899c0f4bc4be82d06a3c3a5ced503ca9d52dd3f6c614625ac4c59bdd98232dd621eba781a17d6c549cecc380e63f0bcdb852c384f572f7dc425535e162d80891d0c762de3a82418d6d5c3e6a6b4926f201e286a66d1f288017729dfbb63764ac570bfa93479eb8d96650c2f16c572adc5b56ab738e1421ace7c498c796e8cde1b7d6250e223ad90850c07615e9198e1582c91aa28bebb8bd4bae20b20cda799fdc8b08513bb55bd68c7de791e734f50b663494858aecf14ca21f4b293ee0b76f49a9e104bc864ce7e57ec197b831dddd7e02454ffc98bb6d853092c1f50bced866283524bce306379bba8e23e67290b64683dc79a91958569e51ba7b69ec6b01d3bbe9735e52acbe699bb17086ce5220eece76ee315ee99546c93e72b572e11185a69f5a511e8881a2baf75d22082144a903306c5d2de3a977e60da06e751f2ca178ef57e876935e056f3598f9b2bea84ce9ebba8f0ed1121935c901f6dab7a5ba0057139e3fd468e5823fe7beefb4d92859fb11bfd188f4bdaf59ba79996f3fec6f111c1c7659bba7b7ef807205184038c1919102b3ff98c25f1a648db45aefd8b2dc9748ffc48022973249bf834edc7b139f3eae7134ae475dad532fdafd505355ce9d19c941c62683a2140822a6dcb1b18bbd01e2b05e8c6deb166cd388b494b2213e9cd6effc2d51924b508ec846b463d8ac4bf68454dc015999a07d579340b22a4efa5d5e02c3977bca87fbd3f8e3f67fa6f7b6d4ae1c3b692dd139cdd3e34fd648ccb20100929289c8ce57a7ed4247654a7bc3883f40ca770f1f12b81157bbfcbcee0df14b62767b95b5bfca593a718f704d480f1a66a17ba39bffb948345c35a06911df3b4e5392a66223748cc38e072d28009aa93e715fc81adcc5d6b4cfdbac9f2c3625e181203ff975572792bfe4068f1452ac10ed9952687a96e917ab9fcc2354315ce500c985bda4b65cc25f5949b6617fec02c082f871142fa5e865a6e6cd575aab0f0a5f09ba5ab748a70ed94cb13b76299acf5b390cc6145ea2d6bfbdf7dafb011f0273d43feae91b8daf54bd2a55843b9a4e039f25da1e94d1ccc50461a7cd10c2b3a340dea588bdd7d547a53beb9a00220ec0aabb3f6b1da2c4fb2c3d449eba1cddd3216fbf173bd6388fc2e1781f864135547ec49d200e15777c222d720b13e9deee6d81bfd90ea52435a5d636649fad2ce1d58220b1ae1523e4ddd2fa0678b628220261ee10a806bb3a66ff52a716048cd6481943350a2362d8584bb0823d5435de81d03c217ee9f52c38ca72c5be0bef219eb508a208a07217dc7d2262680b467683051712e3d2f3562ecaf4665a92be12b060654a605d1962f7798ada556e32b831d835ed47ffd38756c8465c184a58b4d8a3298aa3b7b82ae5c30ae72dd17a5fcd3e15064d204477c261e773cd60397701988adab1de5a46adaceed5b6c2cc87b31274a689a860fb73859656147e6016c31bcbf5ec139672517e8db1c083c422c8dd521c1ccf2e81fd0eed932b1807f43ff4f873abee07672ca9c1744cd7d370b4fd8ce3e471ee13c818b1d6e71533689eead95319b0cf732ff32449383718f779d15619959484caec84a79812a41f55f34c3fc1f3e7ed040728f05349b88e45949fc130775198ad541bc3efd2f7db34fd94985d892ae6b21a46cbce38247784e74e8f61ec7a2ff265248c4cd91976fa0282ce6f573018a3cf40aa3fb4ae255474d3e4f21dee54368af8043418d6ce0ad31eae1ca217db701672fe7c3d996a88ae4e0a412d53abceaa0a15a6f80b7adcb847d50e2df8c010ab16934468de39cf24a64ed79d013793fd0f2ccad88745b508d7421a8eef5f57c8cae031551ecd79d11dd314acfaecd3238ce4b74c8fdf0d2f9ee1b0cee38edc79d809feb23d9bec242aee13f15b42b481723dfd1e8adb72a68f1c21b5a146f2856fd5c2a99ac874473473972afef874af1b9d246b46f7c3a2b93c73cc6a8fb108312351b4e08730b5b2537b983c77afe57f4886948f1d0d1a21cfdf45fecdcadad626d7c9a1e638c6ad6d96f2ad508c8850ab5b6b55165d1708002d87106f0dc55f2b04f3014b896bf0936666027a8f9311f7c04431746d7dc818ef2580c6ac823b7a41884eb54fdb0f401cf69744044a8938ac782ccaf94db6f002f19f7b784bdc7c8da24e720dd1cf6ab8e1115eeeebaf8cedd716e0ea2f99f0bf34b6742f1d87e972390b4f879d3eb49a1a6276a6101f26f88badd3962d0aa876cc6515d2963e740298c6dfac4b44a53ed1136b513e514bc75eeba49d84bef59fe24b91e0517057f4bfeb129e851b2595da16acba782bb5fa4119b18b90033a6faab16159e33ccd5db83f69c090f4c55942eaec7ccfe5d45e79cce4b735ae25ff599f939449a6f3855e780fc20aa715a451341285d38cad0dfd0d1a7523a0008757b220808fbca9d382844c803e7d21a5b20beb5b926ce73da912573ec59bb2975e531671a893754188d287190d4f089030ce2e1ac8461b5d396383b2e4736cc947dd495e4b065770d0ffb1a247cd18ec8d1191d0acc819559729388480a02ec1f8f9b51e3f85df319bfc6b65ce049c1ead88fcff2721bbf259070612a63b5b66a1e5e28d291e8b5491e63681e4374bc5da6823cfdcbbd57c0e039397f41042c32791240677d1a5a49598aac943c38692a119ef9eff8e4b207c05a02b65d725b485297e6585686d0b090e8382a97327d75a879494e6c7e419ed873c995f72a5944cd1c76654c9d4868c05b908e213b2174aac44251687a4021039eaa65116c8cb45982697e5b95f46a8b58161b997372b865026dfac1cd1051a8a47ef397ae0ee1041bce38cb5ce9c2e30530cf119075ad3c602fbf0f11a19c0a5df914acd1e5e8f0e88f8f0ff2de50f1fac5a60520a5f76a869c1bee651b2c5e74cc8ba47fa9ffcfc2f572fc7cd0c56d2a29475241694d463895820275613631069e93de6f3b19f64357f3aa16344411e46e121e65841fde5ea2d1661baf3815cef8448e43a4d6545e06f9c593987ba700175576ec923d476700fa5f4bf7cbb8672da633482bb491548fd26d8f0743bcb8d3d6a2a614016fbdf9e74ac60e8b8eca4b08d41e9e43c706a2ac35aca7ce0cd3387ddf4b186a7a82305c79091337220a33db7d7b3a452ec8ca5a56e7c53ed32d87fc176bca2e1e242aeb3aba390506a412164e406d1dce7aa1a0c697a8944844ad8e40ec433d90cce7cc96104386902f788bb171860ea676a4ca2e4867881d077da3850616f8291846c859e0d1af21994cffa60e952119728f97e58c9e43712778b45ebedacabe857b1c41705762eae11782037cb64e7eae521eba568def5ea2967283677348fbd8f0db555feaca7c4c13b548ebf902f374435236dd29be3430f275161c0c75ef7268d37a5aed0b0f30482258630b22d9994bf8585265b7926ec40eeff4320444614602ee2db597b41de3378b5811325f988f8acf000f2deff7e88e7d917c45c603036e6a8d6d8708455379820b7e917cbaeaad76d4536cc1cf9e7014e6a64ce428b7c23e09ee8698d5e4e46e73b31dc5047d81710b6bcaee3ecea949ccb5169718c80d1e0836810811daa5b99930105906313469de7904e121bd9ac7d2e530d3e9c70c446f696b27c76c8f0f11bb707b9297a15d4e4b5d0738b5e67218c6fb23876c5165f5dd47e7f01b10636da0dee68cbd46782b323a671bb128137829f2aeae6e62305bf3984c58b74344684f63308b6800cd33afdcc442f218d6eee36389908f32b8520a883301bc97f4c01bdc38e4e565504b205b3638779b63c2b0525a6e1c4d6eba8996bd3102a27d2b0d29489b55f1192271c67c2230019d1078ef910269f6a67f3825fbe73b77d22167d1a4ccfcc80202091488209bc9661549c5f97cb549f96da00bd3ef75d2b8409b38a074fa2452464caa3e6cab868b827523dabeecc7478096f9943a47a3c8e7107d1c3ac4febac5d64355408eb9f0d104ab938962ab3d7c159b0e14fd3a15011814f89e431ef409ad3c98aec384fada3fd995a67ed15b96545102194f0426df369575c52733e80e8a258b957e5bfca6ab30aace585457bcb1c369e0a662999987d06853789daa97e4119fcafb3c4a5a61797c7653c2e09fe2d176114198276c0ffcd6182874be57957bafacb51b56ce8ad961b30026d5a7ad0b3d4dbb7b1719102f01ad8dd6a4fca9e73954a38509f07309023877aa5003edee1290d878ed96126b64d4549fd3cf3e6c55ee5c5193de9756430c9f7723f00d1844d142f32c7137225f44750d9c5e24327a98fd64c7eb45df99e776e85108dd00c821a437df9cb5d4bb6a48bcc757ad85f17dc8c534442dd68020a82e8b274ddf88a8b910c56f6281657d37d87f90e9d76aad841221bc4efd3cb0608227e29046127c9232f7aef705de1227f0dcc761438fd0c398d0dcf6cdad3dd2463c1f909237663a37f52db70536dc03c232d0c092e5277a6e357fc95ab93060bc0c13020bd90b590b4e05cbdc0c1318b0102bfdea092bf7b3b0ed67338443698d6a9c9e7d6ccabc1888f6ad71661ffa795108e21426ee76cef3400cbfdd6f10bd329894f53ff098e8ee5953a3946a3845dd00dfb23004a9ae67d0f99bfcf3060df2de57726d12855011afbacf3b2872efc2434b4451bc6ca5b5ddc492917b92e4c725f4e2647c3a7a8fd4148d7beed88f0bc3ce5a23f9234147578c46d62560ef3b007ca86c2cf49ae79b16d1a37de8aa31943cd5ff2471", 0x1000, 0x31a746b, 0x0, 0x3, r2}]) 05:49:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x2b, @loopback, 0x4e23, 0x0, 'nq\x00', 0x12, 0x40, 0x3d}, 0x2c) r1 = socket(0x10, 0x80002, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000102000000000000000002000000000000881bf812f8c0a350a5499d00"], 0x20}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x141001, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 05:49:24 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') exit(0x0) r0 = getpgrp(0x0) syz_open_procfs(r0, &(0x7f0000000040)='attr/current\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') 05:49:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/31) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)='X', 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 05:49:24 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc008ae67, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 233.557393] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 233.569262] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:49:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x400000) write$capi20_data(r1, &(0x7f0000000140)={{0x10, 0x80000001, 0x88, 0x83, 0x8000, 0x8}, 0xfffffdbb, "159188f7744b86c120c095e7206915b94fbb8df5d6ba7e83fcd39e04a372a00acdcaca47e9ed1de9c87e4d05b161ede2426286489cdcbf044814b5a8f823337844157c4650ecd97c87437832959e3c1ea17ea47c0ecd2d7e92d8994c1a5322127cafbda1af9686e4a14f4903cdaa28d417d7f52199943afc01fa059a76944b001ebc398f8daa857721a2924dd030e52b45db94743120ce7413ce5aa502fb67ff533723"}, 0xb5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x0, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000800)="24000000660007031dfffd946fa2830020200a00ffffffffa61d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b138a32052b44e099d881e02546dcda4cc7e6397", 0x4c}], 0x1}, 0x0) lookup_dcookie(0xffffffff, &(0x7f0000000000)=""/125, 0x7d) 05:49:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:25 executing program 1: r0 = socket$inet6(0xa, 0x20800a2, 0x6) ioctl(0xffffffffffffffff, 0x8a36, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x100000002) io_setup(0x800100000001, &(0x7f0000000080)) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) flock(r3, 0xc) socketpair(0x19, 0x4, 0x3ff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000300)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, 0x64ca1839, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x20, 0x4, 0x7f, 0x9, 0x8, 0x0, 0x100000000, 0x0, 0x0, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0xf87, {}, 0x1, 0x100000000}) io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c04, r4) syz_open_dev$mice(0x0, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x8001) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 05:49:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:25 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x11, 0x7fff, 0x4000008003) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) fallocate(r0, 0x11, 0x0, 0x1000) 05:49:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 233.944340] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 05:49:25 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCCONS(r1, 0x541d) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) clone(0x10000000, 0x0, 0x0, 0x0, 0x0) r3 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00005ebff8)=0xbf3) fcntl$setownex(r4, 0xf, &(0x7f0000000040)={0x2, r3}) dup2(r4, r5) 05:49:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4008ae6a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:25 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0xc00000000000007, &(0x7f00000000c0)) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) 05:49:25 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), 0x14) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x410000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0x800, 0x0, 0x201e, 0x1, 0xfff, {0x3f, 0xfffffffffffff001}, 0x1}) recvmsg$kcm(0xffffffffffffff9c, 0x0, 0x2020) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x102001fec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xffffffffffffff05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) 05:49:25 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r3 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x30981, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = dup(r0) shutdown(r5, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000007c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000540)={{0x9, 0x3, 0xc72, 0x0, '\x00', 0x9}, 0x0, 0x2, 0x9, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000100)=['userppp0ppp1system\x00', '!proccgroup\x00'], 0x1f, [], [0x6, 0x3, 0xe8a4, 0x3]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) r7 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x3, 0x200000) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x100}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000082000000c781f971c4010827e255ac370cc213b164e7a9b0a1c00a7435514f9101eb4c2b3631ea4113760895a896b35b33e809bbdd7597d0b040b7d4e139614b54e46e4d4149fd2fac74520a020156dce08842018ecc96d4ee697ec63d1c504f90b8a3678dcc122c85a3d787433c991840d15e3e7baab46bb9b85bf20f77c11bd2291f18f3cb"], &(0x7f00000004c0)=0xa6) 05:49:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x12) mmap(&(0x7f0000784000/0xd000)=nil, 0xd000, 0x8, 0x112013, r0, 0x0) 05:49:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 234.548233] binder: 8393:8411 unknown command 0 05:49:26 executing program 1: r0 = socket$inet6(0xa, 0x20800a2, 0x6) ioctl(0xffffffffffffffff, 0x8a36, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x100000002) io_setup(0x800100000001, &(0x7f0000000080)) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) flock(r3, 0xc) socketpair(0x19, 0x4, 0x3ff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000300)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, 0x64ca1839, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x20, 0x4, 0x7f, 0x9, 0x8, 0x0, 0x100000000, 0x0, 0x0, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0xf87, {}, 0x1, 0x100000000}) io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c04, r4) syz_open_dev$mice(0x0, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x8001) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 05:49:26 executing program 4: socketpair(0xf, 0x3, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x7b, "704f1bbfd7e14cc0a94736e5365f4962a994c8b917aaa7e920f94cc3ca28b0139064c958f6edbf39614291f7ff3f21a9e7a608dd79aa3b192e885d715a50f64f3e630c6cf8e1a9b04b38e4d5bb89ef743a8d3f4c1140ab10ac3d80b38759746ce8eba7552054928257cd08caea6ee04374413214a1239ece524fa3"}, &(0x7f0000000140)=0x83) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0xfffffffffffffffc, 0x1000, 0xb, 0x7c, 0x800, 0x1f, 0x80, 0x7, r3}, &(0x7f00000001c0)=0x20) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)=0x1) 05:49:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:26 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1e, 0x4, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}}, 0x4000040) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x2}) [ 234.608122] binder: 8393:8411 ioctl c0306201 200002c0 returned -22 05:49:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0xc0010004, [0x40000080]}) [ 234.689387] binder_alloc: binder_alloc_mmap_handler: 8393 20001000-20004000 already mapped failed -16 [ 234.766276] binder: BINDER_SET_CONTEXT_MGR already set [ 234.813075] binder: 8393:8395 ioctl 40046207 0 returned -16 05:49:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc00caee0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 234.859164] binder: 8393:8416 unknown command 0 05:49:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, 0x0) 05:49:26 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00000b0000/0x18000)=nil, 0x0, 0x0, 0xd, &(0x7f0000000000), 0x1000000000000298) accept4$llc(r0, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f00002a2000/0x3000)=nil) r2 = shmget(0xffffffffffffffff, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmctl$SHM_UNLOCK(0x0, 0xc) [ 234.889284] binder: 8393:8416 ioctl c0306201 200002c0 returned -22 [ 234.899081] binder_alloc: 8393: binder_alloc_buf, no vma [ 234.905002] binder: 8393:8411 transaction failed 29189/-3, size 24-8 line 3035 [ 234.925440] binder: 8393:8439 Release 1 refcount change on invalid ref 1 ret -22 [ 235.050976] binder: 8393:8395 BC_ACQUIRE_DONE u0000000000000000 no match 05:49:26 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() fcntl$setown(r0, 0x8, r1) prctl$PR_GET_DUMPABLE(0x3) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000500)='./file0\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/152, 0x98}], 0x3, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x800, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000480)={0x400, 0xffffffffffffda21}) lstat(0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000006c0)=0x8000) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000680)="90f214cebbec633e83d819098f7f9cee2da44cbd4d484a3b02ebebfae96abc9e3f3a729a00") remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x3, 0x800) ioprio_set$uid(0x3, r4, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='mqueue\x00', 0x0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc, 0x0, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000100)='./file0\x00', 0x2000004) write$binfmt_misc(r0, 0x0, 0xfffffce6) getsockopt$inet_dccp_int(r2, 0x21, 0x0, &(0x7f0000000580), &(0x7f00000005c0)=0x4) faccessat(r3, &(0x7f00000000c0)='./file0\x00', 0x4a, 0x900) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) connect$l2tp(r2, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @loopback}, 0x4, 0x2, 0x0, 0x2}}, 0x26) 05:49:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/166) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffde, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000900)={0x0, 0x742, 0x0}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000140)=""/113) 05:49:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, 0x0) [ 235.133097] binder: release 8393:8411 transaction 2 out, still active [ 235.149109] binder: send failed reply for transaction 2, target dead [ 235.269912] QAT: Invalid ioctl [ 235.281267] Unknown ioctl -2142735306 [ 235.290220] mmap: syz-executor5 (8462) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 05:49:26 executing program 1: r0 = socket$inet6(0xa, 0x20800a2, 0x6) ioctl(0xffffffffffffffff, 0x8a36, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x100000002) io_setup(0x800100000001, &(0x7f0000000080)) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) flock(r3, 0xc) socketpair(0x19, 0x4, 0x3ff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000300)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, 0x64ca1839, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x20, 0x4, 0x7f, 0x9, 0x8, 0x0, 0x100000000, 0x0, 0x0, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0xf87, {}, 0x1, 0x100000000}) io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c04, r4) syz_open_dev$mice(0x0, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x8001) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 05:49:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xae03, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:26 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:26 executing program 2: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r0 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4}}, &(0x7f0000000180)=0xe8) r3 = getegid() setreuid(r2, r2) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r2, r3}, 0xc) setsockopt$inet6_buf(r0, 0x29, 0x36, &(0x7f0000000040)='C', 0x1) 05:49:26 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00000b0000/0x18000)=nil, 0x0, 0x0, 0xd, &(0x7f0000000000), 0x1000000000000298) accept4$llc(r0, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f00002a2000/0x3000)=nil) r2 = shmget(0xffffffffffffffff, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmctl$SHM_UNLOCK(0x0, 0xc) 05:49:26 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() fcntl$setown(r0, 0x8, r1) prctl$PR_GET_DUMPABLE(0x3) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000500)='./file0\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/152, 0x98}], 0x3, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x800, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000480)={0x400, 0xffffffffffffda21}) lstat(0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000006c0)=0x8000) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000680)="90f214cebbec633e83d819098f7f9cee2da44cbd4d484a3b02ebebfae96abc9e3f3a729a00") remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x3, 0x800) ioprio_set$uid(0x3, r4, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000400)='mqueue\x00', 0x0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc, 0x0, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000100)='./file0\x00', 0x2000004) write$binfmt_misc(r0, 0x0, 0xfffffce6) getsockopt$inet_dccp_int(r2, 0x21, 0x0, &(0x7f0000000580), &(0x7f00000005c0)=0x4) faccessat(r3, &(0x7f00000000c0)='./file0\x00', 0x4a, 0x900) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) connect$l2tp(r2, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @loopback}, 0x4, 0x2, 0x0, 0x2}}, 0x26) [ 235.384678] QAT: Invalid ioctl [ 235.389138] Unknown ioctl -2142735306 05:49:26 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00000b0000/0x18000)=nil, 0x0, 0x0, 0xd, &(0x7f0000000000), 0x1000000000000298) accept4$llc(r0, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f00002a2000/0x3000)=nil) r2 = shmget(0xffffffffffffffff, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmctl$SHM_UNLOCK(0x0, 0xc) 05:49:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 235.612305] QAT: Invalid ioctl 05:49:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 235.672466] Unknown ioctl -2142735306 05:49:27 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00000b0000/0x18000)=nil, 0x0, 0x0, 0xd, &(0x7f0000000000), 0x1000000000000298) accept4$llc(r0, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f00002a2000/0x3000)=nil) r2 = shmget(0xffffffffffffffff, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmctl$SHM_UNLOCK(0x0, 0xc) 05:49:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xae03, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00000b0000/0x18000)=nil, 0x0, 0x0, 0xd, &(0x7f0000000000), 0x1000000000000298) accept4$llc(r0, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f00002a2000/0x3000)=nil) r2 = shmget(0xffffffffffffffff, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmctl$SHM_UNLOCK(0x0, 0xc) 05:49:27 executing program 1: r0 = socket$inet6(0xa, 0x20800a2, 0x6) ioctl(0xffffffffffffffff, 0x8a36, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000580)='/dev/input/mice\x00', 0x0, 0x100000002) io_setup(0x800100000001, &(0x7f0000000080)) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) flock(r3, 0xc) socketpair(0x19, 0x4, 0x3ff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000300)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, 0x64ca1839, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x20, 0x4, 0x7f, 0x9, 0x8, 0x0, 0x100000000, 0x0, 0x0, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0xf87, {}, 0x1, 0x100000000}) io_setup(0x5, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c04, r4) syz_open_dev$mice(0x0, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x8001) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 05:49:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae76, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:27 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000100)={0x18, 0x0, 0x6, {0x5}}, 0x18) getpeername$unix(0xffffffffffffffff, &(0x7f0000003000), &(0x7f0000003000)=0x2b) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000001c0)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="98ad00cde090759700000c001473797a1ffb00000000ff6f02d6145b57ec00000000"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x50) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) socket$kcm(0x29, 0x5, 0x0) ioctl$EVIOCGREP(r0, 0xc008744c, &(0x7f0000003000)=""/174) 05:49:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:27 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r1, 0x0, 0xff, 0x100000000, 0x7}) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) dup2(r0, r1) 05:49:27 executing program 5: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4400, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41f00}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890b, &(0x7f0000000000)) 05:49:27 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087705, &(0x7f0000000000)='\x00') 05:49:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setitimer(0x1, &(0x7f000000bfe0)={{}, {0x77359400}}, &(0x7f000002c000)) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x7530}}, &(0x7f0000000040)) 05:49:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @dev={[], 0x12}, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff88, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 05:49:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae76, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_dccp_int(r2, 0x21, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) dup2(r1, r0) 05:49:28 executing program 1: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = getpid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r1, &(0x7f00000004c0)=""/243, 0xf3, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'irlan0\x00', 0x20}) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r0) write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x7}, 0x7) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sched_getaffinity(r0, 0x8, &(0x7f0000000340)) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) ftruncate(0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 05:49:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = msgget$private(0x0, 0x440) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/203) unshare(0x40000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x50, 0x0, 0x0, 0x0, 0x2, 0x100}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc4) ioctl(r1, 0x6, &(0x7f0000000440)="cf714388fec396e4f83db025f691b83482af8cbaeaa0cb78f42ece13c2c17f677adff3e21517eb4b3dbe9d50f77ab16b5f1d57997449e99c74064c88c284f22c") ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) write$input_event(r1, &(0x7f0000000400)={{0x77359400}, 0x1f, 0x5, 0x6}, 0x18) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000340)=0xffffffffffff54f0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000380)="cf49187e9ecbb292eb6a047f34235aab249901cd5e6acbbc17ca7f17bd2a7d141ca0e76fe7231820c44ae8a071ee36e42b3386455a2fca53dd01d80f81e0efdd38516c6dda37ee3fe275b7ec23dfe988a6e68bb6ce808210b07a2da836db648f676fefd17500af223f326b63b30200b81f9ccfd00550a84528575ea09983cbdd") r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) r3 = dup2(r2, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f000000a000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x989680}}) 05:49:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") open_by_handle_at(r0, &(0x7f00000001c0)={0xf0, 0xffffffffffffff7f, "368659199f15ccd23a26b783d067efe9f506cdcaa07b9e8bb4b6becdb489d2a461b41e164be17e0d6a28c492a59564afc4c59665dccc44c0f657f08c6c519c8f7e486978593b289ae2ef72942d653f88dcce2705f64ce62906e64366dada5cb39b764a1a16120adfd66da0986cf768c7184f46590ef63f415a29fb72890e51b9eaa3d1ddc69e90947388809c7463455a783b90583f9f0f399085a1908959cd1295f19f6257c58a1268fc877660e5ba98174879ae04b61907a3ba4110cf1f2ba7df247b452e44f0c6e8213ba899501ccdfcec44933feeef2df3638fe990a87dcd82ebd1a43979eb05"}, 0x800) ioctl$int_out(r2, 0x8000451b, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f000051c000)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) recvmmsg(r4, &(0x7f0000002700), 0x2, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x2000) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x10000, 0x1, 0x8, 0x3e24, 0x3ff}, 0xc) ioctl$VIDIOC_S_FBUF(0xffffffffffffff9c, 0x4030560b, &(0x7f0000000180)={0x82, 0x4c, &(0x7f00000000c0)="cd5eb53ed0781dfcb5e3dc0605773ef1e819e260f1469c938345ef2346df42185e2fef14029e748ed239eef89fee8f5722f0af", {0x6, 0x9, 0x0, 0x9, 0x9, 0xb3, 0x2, 0x3}}) 05:49:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020aea5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:28 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0046d00, &(0x7f0000000100)={{}, {0xffffffe0}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xfffffffffffffeef) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0xed, 0x100000000}, {0x1, 0x1000000000000}], r1}, 0x18, 0x3) [ 237.152002] sched: DL replenish lagged too much 05:49:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000140)={0x0, 0xc0000000000000, 0x3003, 0x1}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="8b01359b1dfc", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 237.217242] IPVS: ftp: loaded support on port[0] = 21 05:49:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 237.435645] protocol 88fb is buggy, dev hsr_slave_0 [ 237.441930] protocol 88fb is buggy, dev hsr_slave_1 [ 237.448682] protocol 88fb is buggy, dev hsr_slave_0 [ 237.454582] protocol 88fb is buggy, dev hsr_slave_1 05:49:29 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) 05:49:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5451, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 237.695768] IPVS: ftp: loaded support on port[0] = 21 [ 237.721468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.732231] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.789430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.120050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.179956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 05:49:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000120003040000000000000000000000000000000000000000"], 0x28}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e21, @loopback}}) [ 238.454107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 238.468456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 05:49:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5460, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x40000, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="0f73f400b819068ec00f060f0766b8920c00000f23d80f21f86635400000900f23f8f20f1a0d0ffd1ede000f220366b9900d000066b8e400000066ba000000000f30d9fb", 0x44}], 0x1, 0x15, &(0x7f0000000340)=[@efer={0x2, 0x4001}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0xfffffffffffffff9, 0x0, 0x4, 0x0, 0x3}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x400000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r4, 0x8}) fstat(r2, &(0x7f00000001c0)) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40, 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x2, r2, 0xc}) 05:49:30 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x10000) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x81}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x3c}}, 0x40000) 05:49:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = msgget$private(0x0, 0x440) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/203) unshare(0x40000000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x9}, 'port0\x00', 0x0, 0x50, 0x0, 0x0, 0x0, 0x2, 0x100}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc4) ioctl(r1, 0x6, &(0x7f0000000440)="cf714388fec396e4f83db025f691b83482af8cbaeaa0cb78f42ece13c2c17f677adff3e21517eb4b3dbe9d50f77ab16b5f1d57997449e99c74064c88c284f22c") ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) write$input_event(r1, &(0x7f0000000400)={{0x77359400}, 0x1f, 0x5, 0x6}, 0x18) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000340)=0xffffffffffff54f0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000380)="cf49187e9ecbb292eb6a047f34235aab249901cd5e6acbbc17ca7f17bd2a7d141ca0e76fe7231820c44ae8a071ee36e42b3386455a2fca53dd01d80f81e0efdd38516c6dda37ee3fe275b7ec23dfe988a6e68bb6ce808210b07a2da836db648f676fefd17500af223f326b63b30200b81f9ccfd00550a84528575ea09983cbdd") r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) r3 = dup2(r2, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f000000a000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x989680}}) 05:49:30 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xffffffffffffff60}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x3, 0x1000, 0x3ff, 0x48c, 0x100}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x4) poll(&(0x7f00000000c0)=[{r5}, {r4, 0x2}], 0x2, 0xbf3) close(r5) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 239.574937] IPVS: ftp: loaded support on port[0] = 21 05:49:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:31 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, 0x0) clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x11, 0x141400) fstatfs(r0, &(0x7f0000000080)=""/46) r1 = request_key(&(0x7f0000000000)='bi\x00\x00\x00\x00y\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0), 0xfffffffffffffffc) close(r0) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, r1, 0x2, 0x80, r2) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000001c0)="0b29d57586ec3e865fe828322e476b953ed2eb15b03a841b31d2e3b92bfd6d2104267560bc022f8e0671db487ec9a0036b380d52dcea8184723267fb9a9d5fe6a2c2e5f3e5d5fd0f2486c28f9150f1e36fb07c5d80bd513138cea5c00dd87e870f5ed6d59be78245cc7424bd1b97c6c885f4b18fea154e1e0f1424fbb281de6f77a9c7bc30cd2eaad04bd59317a2f2b9b04e22e610e178306f1de55fa91981fa0380c32259a73e2df4856fc05be7c3bec6f58d600ec3461fb74704") ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000280)={r3, 0x3}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000100)={0xa1, 0x106}) syz_open_dev$dspn(0x0, 0x1, 0x0) 05:49:31 executing program 1: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@default, @netrom, @remote, @remote, @null, @default]}, &(0x7f0000000000)=0x48, 0x800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x1) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x0) socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) umount2(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0xfffffffffffffffe, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x16830c6900000000) timer_create(0x0, 0x0, &(0x7f0000000640)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000007c0)=0x10000, 0x0, 0x5) get_thread_area(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:49:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:31 executing program 5: connect(0xffffffffffffffff, &(0x7f0000000500)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x5f) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x7fffffff, @multicast2}, @in6={0xa, 0x4e21, 0x8, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @loopback}], 0x5c) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@un=@abs, &(0x7f0000000240)=0x80, 0x80000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380)=""/108, 0x6c, 0x40000121, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/240) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000280)={0x8000, 0x100000001}) 05:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:49:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xae41, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 240.288371] Unknown ioctl 1075883590 05:49:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 05:49:31 executing program 1: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@default, @netrom, @remote, @remote, @null, @default]}, &(0x7f0000000000)=0x48, 0x800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x1) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x0) socket$unix(0x1, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) umount2(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0xfffffffffffffffe, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x16830c6900000000) timer_create(0x0, 0x0, &(0x7f0000000640)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000007c0)=0x10000, 0x0, 0x5) get_thread_area(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:49:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 240.348881] Unknown ioctl 1075883590 [ 240.362745] Unknown ioctl 1075883590 05:49:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 240.426776] Unknown ioctl 1075883590 05:49:31 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000000)="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", 0xfb}], 0x1}, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) [ 240.458790] Unknown ioctl 1075883590 05:49:31 executing program 5: connect(0xffffffffffffffff, &(0x7f0000000500)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x5f) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x7fffffff, @multicast2}, @in6={0xa, 0x4e21, 0x8, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @loopback}], 0x5c) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@un=@abs, &(0x7f0000000240)=0x80, 0x80000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380)=""/108, 0x6c, 0x40000121, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/240) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000280)={0x8000, 0x100000001}) [ 240.479717] Unknown ioctl 1075883590 [ 240.483736] Unknown ioctl 1075883590 [ 240.493234] Unknown ioctl 1075883590 [ 240.538736] Unknown ioctl 1075883590 [ 240.576103] Unknown ioctl 1075883590 05:49:32 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc0bc5351, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, {0xffffffffbf03b100, 0xfffffffffffffffc, 0x37dd, 0x1ff, 0x4a, 0x7}, 0x20, 0x7cc}, 0xe) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x800}) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000180)) [ 240.610342] Unknown ioctl 1075883590 [ 240.618973] Unknown ioctl 1075883590 [ 240.632165] Unknown ioctl 1075883590 [ 240.655006] Unknown ioctl 1075883590 05:49:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae68, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 240.672342] Unknown ioctl 1075883590 [ 240.676298] netlink: 215 bytes leftover after parsing attributes in process `syz-executor4'. [ 240.708781] Unknown ioctl 1075883590 05:49:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:32 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x6, [0x0, 0x81, 0xfffffffffffffff9, 0x80, 0x7, 0x200000]}, &(0x7f0000000140)=0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x100000000, &(0x7f0000000080)=0x4) mount(0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001a40)='?\v\x1b\x04\xcfi\vZ\xad\xc3\x1d>V\x95\x0e\xf1\xe9\xb9Y\x9f\x01\xce\xe0\xd1N\xc0\xbet9\x06VL[\xfc\xa2\x1br>\x9eR\xf6\x1c\v$<\xacQ\xf2\x17\x99\xaeW\xc3+@|\x05\xfc\xcc\xd7\f/&6\x888\x82\xc7@\xd3,\xfcw\xfa\xae*\xe2\xd6-\x1b\xd8\xdb\x95\x00\x16\xcaSF\xd8\x88{\"\x8eY.+\x02f\r\xc4\x02\xce\xa3\xe9Rn\x84E6.\xfd\x1f\x04dm\x89\xbb\x9aMG\xaa\x85\xf9\xfa$\xc8\xc1[U\xd5\xa1\x93\xc0;1\"\xc2\xa6\x19\xfe\x90\xe7\x90\xf8\x8b\x8cdy\xc8|\x82\xc5@g\xd4\xee\xfcMp5\xe4\xbf\x81\xf8\xa9\x87\xaa\xf5\vTK\xa1\x97\a4\xd4\xaa\xf1>\x11\xea:\xd7\xeeN\xb2p\t\xf2rU\xb8\"\xf6D\rC\xec\x9c\xb2xq;\x0f\x1c\\E\xed\xdb\x80\xd0%\xde\v\x1fA\x03%!ha\x9d\x14\xae\x8a\xba\x8e\xa9\xdd\xecL\r,\n\xf8d\xa5V\x1b\xb2\xcb+\x81\x9aE\xa3(&\xac\xab\xecT5!\xe2\xef\x86{\xf3}\x9e\"\xd6 \xea\x812\x98\xf8\xc6\xbfb\xba\x1e\r\xae\xd7\xf8\xa0\x84\xb5q3\x87<\x1e\x15/0$C\x98>\xd7:\x9f\xb1n\xf2\x99S\xcdQH\x8f\xa8\x02,\xf0\xc4V\xd7\xbdY~\xc8\xa9\xe7\x9d\x1a\f\xe7YW:\xdc#\x10\xce\x1b\xac\xe0\x14\xd1\xec\xc3kJ\"\xf3\x00=\xe3Z\xfbv\xd1\xca\x80\"\xf5\xafH') [ 240.728144] Unknown ioctl 1075883590 [ 240.752759] netlink: 215 bytes leftover after parsing attributes in process `syz-executor4'. [ 240.754067] Unknown ioctl 1075883590 [ 240.798928] Unknown ioctl 1075883590 [ 240.812136] Unknown ioctl 1075883590 [ 240.834308] Unknown ioctl 1075883590 [ 240.856520] Unknown ioctl 1075883590 [ 240.868872] Unknown ioctl 1075883590 [ 240.880329] Unknown ioctl 1075883590 [ 240.893169] Unknown ioctl 1075883590 [ 240.920245] Unknown ioctl 44609 [ 240.942277] Unknown ioctl 1075883590 [ 240.970584] Unknown ioctl 1075883590 [ 240.978295] Unknown ioctl 1075883590 [ 241.011895] Unknown ioctl 1075883590 05:49:32 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x93b8ceee9f6ea0fc}, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x18, 0x1) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/242) 05:49:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x200, 0x6, 0x401, 0x0, 0x3553800000, 0x7f}) r2 = socket(0xa, 0x3, 0x8) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x80, 0x0, 0xff}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400}, {0x7, 0x0, 0x7}, 0x0, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2}, 0x0, @in6=@remote, 0x3501, 0x3, 0x0, 0x2, 0x0, 0x0, 0x20}}, 0xe8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00f6e803000200080000000000000000000000000000"], 0x1c}}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000780)={0x1, 0x3}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x101) r6 = shmget(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) shmat(r6, &(0x7f0000ffd000/0x3000)=nil, 0x3000) sched_rr_get_interval(r1, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100), 0x28) add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840), 0x0, 0x0, 0xfffffffffffffffa) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6aaaa4fbf70536d9, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="380bab0b7f35b4bd367cf689e4d2d93c845c129658368acbdde4fef8063d0bfdff07005941d6e569c404ffd380afa06609f6226281f0a9c901ad6e613633c11af6decc21568fe71d56fd918c237f9cecdedd92fd674cff4c33ab0e235df1a240856ee82d581d587f32e623b6df5abdf0ab5b9803f980bdb2937f5c844ee0c2a9fa5fa246f7d27129e3824084c898a50bb77b9f21814544f69cd61730692750b9a671d011d6258e39832be88d988c8d77678414f8da7993e1d5770815a5cc"], 0x0, 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xa}, 0x48) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000240)=""/11, &(0x7f0000000280)=0xb) request_key(&(0x7f00000003c0)='rxrpc\x00', 0x0, &(0x7f0000000740)='IPVS\x00', 0xfffffffffffffff9) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000040)=""/97) 05:49:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0x4000000000000003) r1 = dup(r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffefff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)={0x5432, 0x3, 0x200}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x100, 0x200000) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000180)={0x100000000, 0x765}) 05:49:32 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc0bc5351, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, {0xffffffffbf03b100, 0xfffffffffffffffc, 0x37dd, 0x1ff, 0x4a, 0x7}, 0x20, 0x7cc}, 0xe) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0x800}) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000180)) 05:49:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5451, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:32 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x2d) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) listen(r1, 0xfa) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r3 = getuid() stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="040000000000000008000300", @ANYRES32=r6, @ANYBLOB="100024ab000000002000040000000000"], 0x4c, 0x2) r7 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000006c0)={0x0, 0x3f, 0x9, 0x5f57, 0x1ff, 0x800, 0x7, 0x8, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0xd5cb, 0x29cf, 0x4, 0xfffffffffffffffe}}, &(0x7f0000000540)=0xb0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000580)={r8, 0x8000, 0x7fff, 0x2, 0x1, 0x6}, &(0x7f0000000780)=0x14) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) connect$inet6(r7, &(0x7f00000005c0)={0xa, 0x4e22, 0x10000, @empty, 0x4d}, 0x1c) [ 241.239209] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.246767] bridge0: port 1(bridge_slave_0) entered disabled state 05:49:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4008ae61, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:32 executing program 2: clone(0x7fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') exit(0x0) wait4(0x0, 0x0, 0x40000000, 0x0) getdents(r0, 0x0, 0x0) 05:49:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:32 executing program 1: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000700)=r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000080)}, 0x10) 05:49:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4008ae61, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:33 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000200)={@remote, r1}, 0x14) r2 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240), 0x8) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x8c) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x0, 0x100, 0x400}, 0x6) r4 = socket(0x11, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={0x0, 0xffffffff, 0x30, 0x1, 0x3}, &(0x7f0000000380)=0x18) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r4, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r4, 0x107, 0x5, &(0x7f0000001000), 0xc5) r5 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0x300000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x3, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @my}, 0x10) 05:49:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae68, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 241.828675] protocol 88fb is buggy, dev hsr_slave_0 [ 241.833944] protocol 88fb is buggy, dev hsr_slave_1 [ 242.151806] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.158241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.164996] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.171410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.190128] device bridge0 entered promiscuous mode [ 242.196085] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.223981] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.230499] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.253953] device bridge0 left promiscuous mode 05:49:34 executing program 5: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001940)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d0200000000000000000f000000240007000c000300000000ddb1aac90008000100080000000c0004000000000000000000"], 0x38}}, 0x0) 05:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:34 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x6f, "8ec15bae181c37fbc86f538364c64fafa1a9e34ce59d3e6d1d0bfe12f7382cc050d269d098ca279f70140b7596a594881c30e26169386094b184be95d2aad7fa54eb0a16d80b249b6beb95c1267095fe37cb4377d2ba3d10145c2e5df0590235405e9e4c27f6120a70d532289e3e5a"}, &(0x7f0000000140)=0x77) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x81, 0x2, 0x1d, 0x1, r2}, &(0x7f0000000200)=0x10) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x400000000003, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x80044dfc, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x821}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x284, r4, 0x110, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ffe0f88}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x500cdb70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffe1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200000000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x284}}, 0x800) 05:49:34 executing program 2: clone(0x7fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') exit(0x0) wait4(0x0, 0x0, 0x40000000, 0x0) getdents(r0, 0x0, 0x0) 05:49:34 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x420000, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000120000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) gettid() setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="afaefc5d", 0x4) 05:49:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xa2, "e879e1ae697256f5c6bb024e12ec9fc6709dab679562ad7708fefafbbb4106af7121362b27808c21680849f8781c12273010c8c15ead3a6475552a6bac1dc35cfbcafd89b1d86a432e6e41fa360c37cd1883a621997a11f06ae0ecfb280a6ad8f1edcdde3c3c0132985309ae6d3aae9fc049dca9a9fd9cba7a3ef295a22495202b75e29c1314fa6d0bac11db5c434eb99511f18ace29f188e4aca51dd9407a728eee"}, &(0x7f0000000140)=0xaa) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e24, @broadcast}}, 0x1, 0x2000000000007, 0x0, 0x0, 0x20}, 0xfffffffffffffe2b) 05:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) r3 = msgget(0x0, 0x80) msgrcv(r3, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x1, 0x3800) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d4", 0x1}], 0x1}, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) 05:49:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x48000000}, 0xc) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) [ 242.888500] Started in network mode [ 242.935439] Own node identity 000000ddb1aac9, cluster identity 8 05:49:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4008ae6a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 243.127051] Cannot configure node identity twice 05:49:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) r3 = msgget(0x0, 0x80) msgrcv(r3, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x1, 0x3800) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d4", 0x1}], 0x1}, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) 05:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xae41, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) r3 = msgget(0x0, 0x80) msgrcv(r3, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x1, 0x3800) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d4", 0x1}], 0x1}, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) 05:49:34 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x7, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000300), &(0x7f0000000280)}, 0x20) r1 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="ee1d50af9e28d10588413f522d87950e8d67acc0020e6f83c7639ab14a2f9ec8746d028b4804bc8c79a8d47a96e4849c9b91c3c140c15a05c98e2393cbb6cf3087c4924658090042320dea8f90efd14c244225c613166a264c3e9e26a1bb886209ebbbd50a5d6d203ad1422e46cf893868c32ee6c8814063c318ba94f6e4c8b554eeeec8d52dc0cd3d1e1f2e78529a38055eaca49fb351c66c74e8c513da0d10a630f7a767535bd01578fc9ff04800fadf722403f2d6762c7fbde04d8b34d370d895c07e0e2da977960c82a92089549c", 0xd0, 0xfffffffffffffffd) r2 = request_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='^self\x00', 0xfffffffffffffff8) keyctl$unlink(0x9, r1, r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x8e) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=0x0, &(0x7f0000000440)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000480)={r4, 0x8}, &(0x7f00000004c0)=0x8) accept4$rose(r3, &(0x7f0000000300)=@short={0xb, @remote, @rose, 0x1, @null}, &(0x7f0000000340)=0x1c, 0x80000) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000380)=0x15a) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff8, 0x2a2480) 05:49:34 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) 05:49:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc00caee0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x275, 0x0, 0x0, 0x2c5) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") 05:49:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) r3 = msgget(0x0, 0x80) msgrcv(r3, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x1, 0x3800) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d4", 0x1}], 0x1}, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) 05:49:34 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) r3 = msgget(0x0, 0x80) msgrcv(r3, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x1, 0x3800) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d4", 0x1}], 0x1}, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) 05:49:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc008ae67, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) r3 = msgget(0x0, 0x80) msgrcv(r3, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x1, 0x3800) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d4", 0x1}], 0x1}, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) 05:49:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000040)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004600002c00000000002f9078ac141400a41414aa89030000fffd0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 05:49:35 executing program 1: set_robust_list(&(0x7f0000000300)={&(0x7f0000000280)={&(0x7f0000000240)}, 0x5, &(0x7f00000002c0)}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400101, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x37a, 0x24c1, 0x1}, {0x4, 0x9, 0xffff, 0x28ce}, {0x7, 0x1, 0x100, 0xaf4e}]}, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000040)={0x7882, 0x7, 0x796d, 0x3}, 0x6) dup2(r2, r4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000200)={'eql\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x7fff, 0x4) lseek(r0, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000000000000000000000000007f000000841c908e11ed4c50bb76c02edeb0e9cf94c406ed647641af3d2d39"], 0x14}}, 0x0) 05:49:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket(0x10, 0x802, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='~', 0x1}], 0x1) write(r1, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010010000100", 0x24) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x800, 0x0) 05:49:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) r3 = msgget(0x0, 0x80) msgrcv(r3, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x1, 0x3800) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d4", 0x1}], 0x1}, 0x0) 05:49:35 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x0, 0x80000001, 0x100000001, 0x1}, {0x6, 0x3, 0x100, 0x7f}, {0x3, 0xffffffff, 0x3, 0x5}, {0x1f, 0x6c1, 0x40, 0x1}, {0xffff, 0x2, 0x7, 0xff}]}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$lock(r1, 0x0, &(0x7f00000000c0)={0x1, 0x3, 0x1, 0x10000, r2}) r3 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4) getpeername$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f0000000040), 0x4) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000300)={0x75, "26db82f3cffd89cae43d28016e225111514003163ae3b6c5b036c056c759ed278f96ad33978f87fd791e6212bb78cc75d75987b4c9be3821c690b997306edeeb43c4f456673cb79ff5d4a26c068d9e06ee93725869a052638c71c58b2f596ff60359d777250cf4ee6fb75effe634c36f9f4439b7c9cc536135a0e61fb2642caa"}) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 05:49:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xffff8000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="c34e113ad764048fe1ca82f4630e991bcffaa80fda849de540bc218068f4197cf7645d5583ac2f9cc64423856ed2ba8bc700e1ec163de856e6590d4a43e2d7a251c37a64723a28bf69a0c9b3bf340d65c126bced5e742241c7f92209ff5e3f152e1362fbc39f5806ba44a00afcf8f29ad7d051bae8fdd60cb1ff1f9151cca4a0e54c3609425dbb415b736b9382520eb4270cd2a4c2a8c68e153ad77ef47166901e8b27851a6cb50d72023c69339c7965dd1b0f6e75d70628313c538028995c01e19f71537826b76e161d28bd248fdbee7ae33e4402ae1e6489d4012a274896", 0xdf, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b80100001900010000002dc1ddffa1cac100000079b90a603c90d6ac34a2000000ff01f2000000000000000000000100000000000000008000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote, 0xe, 0x3}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000000)='}.\x00'}, 0x30) accept4(r1, &(0x7f0000000100), &(0x7f0000000080)=0x80, 0x80000) r4 = getpgrp(0x0) kcmp(r3, r4, 0x1, r0, r1) 05:49:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) r3 = msgget(0x0, 0x80) msgrcv(r3, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x1, 0x3800) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d4", 0x1}], 0x1}, 0x0) 05:49:35 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000000)=0x5, 0x5) 05:49:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000380), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000008c0)='team\x00') accept(0xffffffffffffffff, &(0x7f00000003c0)=@hci, &(0x7f00000004c0)=0xfffffdea) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[]}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00\x00\x00\x02', {0x2, 0x0, @local}}) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x554, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @dev, 0x6}}}, 0x30) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880), 0x4) setresuid(r1, r1, r1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x3f, 0x2) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000240)={0x380, 0x3bdb, 0x6, 0x522, 0x7f, 0x10001}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 05:49:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xce4e, 0x2, 0x4, 0x7f, 0x6, 0x401, 0xfff, {0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x26}, 0x3}}, 0x6f, 0xc45, 0x6, 0x6, 0xffffffffffffffe1}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x6, 0x1000, 0x7}, &(0x7f0000000180)=0x10) 05:49:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x80ffff, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:36 executing program 2: syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000080)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x40, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00\xba\"\"Q\xc0#{Y\xf0\x0e\xe4>\n\xe4f*(\xe4\xc7\x13\xd1G\xbc\xef\xa4\xdd\x03\x1e~4K\xd8\x1a\x85\fy\x83E\x84d^*SS\xfd7\xe8\xaexs{\xc9\x13\xac\a\xdc\xa1\x85j\x9b\xd3\x01\"\xe7\x8b\xbc}\xc0\xb1\xf5\xe3\xa3\r\xf7\xd5\\\xadh\xa8\v\'&GQ\xa2q\x9e0\x80!\xf974\xacRB9d\xa8\xe9\x8b=1&\xdb\xd3\xdb;\xd8\x05\xfe9\xd6>v\xed\xab,$\xc7\x9d0x0) io_cancel(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000580)="88995eaa71773c6384406c5efa68d7ea2c8987d120c9e7e27340cb18e6c15937a044adaeb9bc3725debbe7387eea9eddbef9f38c9778fe606cdb29adfe1e42a18f52fbd7165a436ef51ef98a00f0fa4f77ef9dbca674b2eac57bbf4b086a8e", 0x5f, 0x17b, 0x0, 0x1, r5}, 0x0) 05:49:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020aea5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xce4e, 0x2, 0x4, 0x7f, 0x6, 0x401, 0xfff, {0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x26}, 0x3}}, 0x6f, 0xc45, 0x6, 0x6, 0xffffffffffffffe1}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x6, 0x1000, 0x7}, &(0x7f0000000180)=0x10) 05:49:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) r3 = msgget(0x0, 0x80) msgrcv(r3, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x1, 0x3800) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d4", 0x1}], 0x1}, 0x0) 05:49:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xce4e, 0x2, 0x4, 0x7f, 0x6, 0x401, 0xfff, {0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x26}, 0x3}}, 0x6f, 0xc45, 0x6, 0x6, 0xffffffffffffffe1}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x6, 0x1000, 0x7}, &(0x7f0000000180)=0x10) 05:49:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:36 executing program 4: r0 = socket$inet6(0xa, 0x400000000000803, 0xe9d) ioctl(r0, 0x400001000008912, &(0x7f0000000100)="0a5c2d023c126285718070") r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000003c0)={r1}) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}}, 0x8080) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_LSEEK(r3, &(0x7f00000000c0)={0x18, 0x0, 0x4}, 0x18) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x81, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000140)) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000003ec0)={0x14}, 0x14}}, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000080)=0x7fff, 0x4) [ 244.962834] 9pnet_virtio: no channels available for device 127.0.0.1 05:49:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xce4e, 0x2, 0x4, 0x7f, 0x6, 0x401, 0xfff, {0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x26}, 0x3}}, 0x6f, 0xc45, 0x6, 0x6, 0xffffffffffffffe1}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x6, 0x1000, 0x7}, &(0x7f0000000180)=0x10) 05:49:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) r2 = msgget(0x0, 0x80) msgrcv(r2, &(0x7f0000000000)={0x0, ""/123}, 0x83, 0x1, 0x3800) 05:49:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfc01, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x5460, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 245.240955] 9pnet_virtio: no channels available for device 127.0.0.1 05:49:36 executing program 2: syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000080)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x40, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00\xba\"\"Q\xc0#{Y\xf0\x0e\xe4>\n\xe4f*(\xe4\xc7\x13\xd1G\xbc\xef\xa4\xdd\x03\x1e~4K\xd8\x1a\x85\fy\x83E\x84d^*SS\xfd7\xe8\xaexs{\xc9\x13\xac\a\xdc\xa1\x85j\x9b\xd3\x01\"\xe7\x8b\xbc}\xc0\xb1\xf5\xe3\xa3\r\xf7\xd5\\\xadh\xa8\v\'&GQ\xa2q\x9e0\x80!\xf974\xacRB9d\xa8\xe9\x8b=1&\xdb\xd3\xdb;\xd8\x05\xfe9\xd6>v\xed\xab,$\xc7\x9d0x0) io_cancel(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000580)="88995eaa71773c6384406c5efa68d7ea2c8987d120c9e7e27340cb18e6c15937a044adaeb9bc3725debbe7387eea9eddbef9f38c9778fe606cdb29adfe1e42a18f52fbd7165a436ef51ef98a00f0fa4f77ef9dbca674b2eac57bbf4b086a8e", 0x5f, 0x17b, 0x0, 0x1, r5}, 0x0) 05:49:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xce4e, 0x2, 0x4, 0x7f, 0x6, 0x401, 0xfff, {0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x26}, 0x3}}, 0x6f, 0xc45, 0x6, 0x6, 0xffffffffffffffe1}}, &(0x7f0000000000)=0xb0) 05:49:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x8000000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) msgget(0x0, 0x80) 05:49:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:36 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) [ 245.749310] 9pnet_virtio: no channels available for device 127.0.0.1 05:49:37 executing program 4: syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000080)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x40, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00\xba\"\"Q\xc0#{Y\xf0\x0e\xe4>\n\xe4f*(\xe4\xc7\x13\xd1G\xbc\xef\xa4\xdd\x03\x1e~4K\xd8\x1a\x85\fy\x83E\x84d^*SS\xfd7\xe8\xaexs{\xc9\x13\xac\a\xdc\xa1\x85j\x9b\xd3\x01\"\xe7\x8b\xbc}\xc0\xb1\xf5\xe3\xa3\r\xf7\xd5\\\xadh\xa8\v\'&GQ\xa2q\x9e0\x80!\xf974\xacRB9d\xa8\xe9\x8b=1&\xdb\xd3\xdb;\xd8\x05\xfe9\xd6>v\xed\xab,$\xc7\x9d0x0) io_cancel(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000580)="88995eaa71773c6384406c5efa68d7ea2c8987d120c9e7e27340cb18e6c15937a044adaeb9bc3725debbe7387eea9eddbef9f38c9778fe606cdb29adfe1e42a18f52fbd7165a436ef51ef98a00f0fa4f77ef9dbca674b2eac57bbf4b086a8e", 0x5f, 0x17b, 0x0, 0x1, r5}, 0x0) 05:49:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x4000000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfffffdfd, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") write(0xffffffffffffffff, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) recvmsg(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:37 executing program 2: syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000080)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x40, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00\xba\"\"Q\xc0#{Y\xf0\x0e\xe4>\n\xe4f*(\xe4\xc7\x13\xd1G\xbc\xef\xa4\xdd\x03\x1e~4K\xd8\x1a\x85\fy\x83E\x84d^*SS\xfd7\xe8\xaexs{\xc9\x13\xac\a\xdc\xa1\x85j\x9b\xd3\x01\"\xe7\x8b\xbc}\xc0\xb1\xf5\xe3\xa3\r\xf7\xd5\\\xadh\xa8\v\'&GQ\xa2q\x9e0\x80!\xf974\xacRB9d\xa8\xe9\x8b=1&\xdb\xd3\xdb;\xd8\x05\xfe9\xd6>v\xed\xab,$\xc7\x9d0x0) io_cancel(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000580)="88995eaa71773c6384406c5efa68d7ea2c8987d120c9e7e27340cb18e6c15937a044adaeb9bc3725debbe7387eea9eddbef9f38c9778fe606cdb29adfe1e42a18f52fbd7165a436ef51ef98a00f0fa4f77ef9dbca674b2eac57bbf4b086a8e", 0x5f, 0x17b, 0x0, 0x1, r5}, 0x0) 05:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x8000000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x40000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) recvmsg(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) [ 246.167459] 9pnet_virtio: no channels available for device 127.0.0.1 [ 246.210334] 9pnet_virtio: no channels available for device 127.0.0.1 05:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfffffdfd, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x4000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x2, 0x1, 0x300e, 0x2, 0x8, 0x0, 0x0, 0x7}}) recvmsg(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xa, 0x800, 0x3}, 0x2c) unshare(0x10040000) time(&(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000011c0)=""/4096}, 0x18) 05:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="10ef1e00000000341157e822cb87b937b10084f25319ac01cb96bf30ba5dcecb25050000006b8ef5669108a7ea8454d0482bd1f8e8856d3f4d2d856356091b85d5d6796941c3c7c48ab3ded2226a27abd4452cab24fdf83abc36e550fe2e8f32f6aa5a34b196001a16660000000000000000000000000000000000"], 0x7b) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') fcntl$setown(r1, 0x8, r2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x7) sendfile(r1, r1, &(0x7f0000000380), 0x8080fffffffe) r3 = getpid() sched_setattr(r3, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000280)={0x43, 0x9, 0x0, {0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0x0, 0x0, 0xb3, 0xfffffffffffffffd}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) ptrace$peekuser(0x3, r2, 0xffff) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="00fbbb000688249db10c3e8aaafcda1f2466c837a310d66660d0071b089540051554885e852bc1b494838e2134f7e7eeba4ea6556def2840e67b809b7d08bffe71e107ec675f4a01c6f141dc1f87db6756fac2f95a7a10b8d33f5ba90d184dee308585892dcfcc5ad87e93c04d53b3a1e2dba298722a886973158a55422def499f22a2db0bb7896f4cfef54f9264e25f32de835c5e7660cc62738da05a4bdb47debf2a739b516d48a735f6b40a0b117ff643edf2472403407c4cac"], 0xbb, 0x3) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x0, 0x10001}]}, 0xc, 0x3) creat(&(0x7f0000000100)='./file1\x00', 0x0) creat(0x0, 0x104) rename(&(0x7f0000000000)='./file1\x00', 0x0) 05:49:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfc01000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xffff8000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x5, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00') bind(r0, &(0x7f0000000100)=@in6={0xa, 0x4e23, 0xb8c, @mcast1, 0x148}, 0xfffffffffffffd27) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r3 = socket(0x3, 0x5, 0x7) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) sendmsg(r3, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, 0x0}, 0x0) 05:49:38 executing program 1: ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfdfdffff00000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:38 executing program 1: ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xd5d, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x800001, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0070696462d7eca5"], 0x8) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, 0x7ffffffc, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) mmap(&(0x7f0000357000/0x1000)=nil, 0x1000, 0x3000000, 0x8071, r1, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) ioctl$int_in(r0, 0x80000040045010, 0x0) 05:49:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x80ffff00000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 247.247440] audit: type=1800 audit(1546408178.660:37): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16592 res=0 [ 247.407345] audit: type=1804 audit(1546408178.690:38): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir547917167/syzkaller.na1hXC/47/file0" dev="sda1" ino=16592 res=1 05:49:39 executing program 4: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000280)={0x9, 0x40, 0x39, 'queue1\x00', 0x3f4}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) getsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x4000, 0x0) 05:49:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:39 executing program 1: ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x100000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfffffdfd, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:39 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfc010000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfc01000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) [ 248.092985] audit: type=1804 audit(1546408179.510:39): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir547917167/syzkaller.na1hXC/47/file0" dev="sda1" ino=16592 res=1 05:49:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x800001, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0070696462d7eca5"], 0x8) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, 0x7ffffffc, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x10000) mmap(&(0x7f0000357000/0x1000)=nil, 0x1000, 0x3000000, 0x8071, r1, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) ioctl$int_in(r0, 0x80000040045010, 0x0) 05:49:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x4}}, 0x18) 05:49:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) [ 248.468749] audit: type=1800 audit(1546408179.880:40): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16595 res=0 [ 248.612517] audit: type=1804 audit(1546408179.920:41): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir547917167/syzkaller.na1hXC/48/file0" dev="sda1" ino=16595 res=1 05:49:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:40 executing program 4: r0 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000040)=""/4, &(0x7f0000000000)=0x4) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00', &(0x7f0000000140)='cpuset+proc^\x00', 0xd, 0x1) 05:49:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfdfdffff00000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:40 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xf4, "6a2c62dd3207374b5983a51845fb74bc2c84da5d87741c7577bc13c47ae0163402d61b3896e47835469a0284ecc4ef4f4b4ff8804d202e59378ceeabfa516735a81b69db3a3d20f6f3c888c5a10c53e3a1f6d7ede4d2ce8bd2587517a4980bcd424040814d2c16b100c531de4783ec98b2b6713cf94726a14778b0e442d08d0428bbb2ea257dcd62c413d63ad5c1da28125c489da8830b37c3aada2fab257212c3c2c58bd385d93a6fa1bba5afc668098ac129b11c62a7ddf8051ef9d4638774228a7be559e53f273aa6bfa58115cf4f1fa2d893bb9f530e7e76f746840d716c69783acc37d92c1033632a20025ec8a425154b80"}, &(0x7f0000000200)=0xfc) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0x3f}, 0x8) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp\x00') setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000280)=0x8001, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) 05:49:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:40 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5404, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x400, 0x0) write$P9_RLERROR(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x137) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000280)={@mcast1}, &(0x7f00000002c0)=0x14) getsockopt$inet_int(r4, 0x0, 0x2f084359881b81cc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000340)='./file1\x00', 0x11) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x8000100042, 0x2b0) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x80000) accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25, &(0x7f00000005c0)=0xffffffd6, 0x80000) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket(0x40000000216, 0x3, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r6 = geteuid() r7 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000080)) fchownat(r4, &(0x7f00000000c0)='./file1\x00', r6, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$llc(r5, &(0x7f0000000380)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffff1, 0x40) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) 05:49:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfdfdffff, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfc010000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, 0x0) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000940), 0x0) lstat(0x0, &(0x7f0000000a00)) getresgid(&(0x7f0000000a80), 0x0, &(0x7f0000000b00)) getpgrp(0x0) getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@loopback, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000e00)=0xe8) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000ec0)={{{@in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000fc0)=0xe8) getpgrp(0xffffffffffffffff) getgroups(0x3, &(0x7f0000001140)=[0xffffffffffffffff, 0xee00, 0xee00]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000011c0)={0x0, r2, 0x0, 0x2, &(0x7f0000001180)='\\\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001200), 0x0) fstat(r0, &(0x7f0000001280)) getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001300)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000001400)=0xe8) stat(&(0x7f0000001440)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)={0x19, 0x8e5, 0x100, 0x0, 0xb, 0x1}, 0x2c) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21}, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000001700)=ANY=[], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = gettid() r7 = getpgrp(r6) kcmp(r6, r7, 0x0, r4, r5) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="5e000000f0a88a5c76000044c7cd9f8f27a0ac1c5e64e14694b794066353b812ec5bcb766d2067590000000000000000000000000000009106761025e38d93ad4c835a192042b129d9bcc4e033cb20874d248681329a7ad94629c5b9bf64245013f67b90f8a5cadba66b27a5c21a0d286cc7cfcfc786431bf0710fdeee3a992f1668833b521439a3f528077080bab82b443ce0907472205e8d8a9fef41e1382ae773e9c6a381008cfc8255c7f0e1a408091b7c9144ddc0b2771ad96b497ef9ef8e49cbed0e218a84cfcafad76c6bfc27545f22"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x20048040) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, 0x0) 05:49:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0xfc01, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0xfffffdfd, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x80ffff00000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000940), 0x0) lstat(0x0, &(0x7f0000000a00)) getresgid(&(0x7f0000000a80), 0x0, &(0x7f0000000b00)) getpgrp(0x0) getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@loopback, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000e00)=0xe8) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000ec0)={{{@in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000fc0)=0xe8) getpgrp(0xffffffffffffffff) getgroups(0x3, &(0x7f0000001140)=[0xffffffffffffffff, 0xee00, 0xee00]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000011c0)={0x0, r2, 0x0, 0x2, &(0x7f0000001180)='\\\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001200), 0x0) fstat(r0, &(0x7f0000001280)) getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001300)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000001400)=0xe8) stat(&(0x7f0000001440)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)={0x19, 0x8e5, 0x100, 0x0, 0xb, 0x1}, 0x2c) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21}, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000001700)=ANY=[], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = gettid() r7 = getpgrp(r6) kcmp(r6, r7, 0x0, r4, r5) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="5e000000f0a88a5c76000044c7cd9f8f27a0ac1c5e64e14694b794066353b812ec5bcb766d2067590000000000000000000000000000009106761025e38d93ad4c835a192042b129d9bcc4e033cb20874d248681329a7ad94629c5b9bf64245013f67b90f8a5cadba66b27a5c21a0d286cc7cfcfc786431bf0710fdeee3a992f1668833b521439a3f528077080bab82b443ce0907472205e8d8a9fef41e1382ae773e9c6a381008cfc8255c7f0e1a408091b7c9144ddc0b2771ad96b497ef9ef8e49cbed0e218a84cfcafad76c6bfc27545f22"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x20048040) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, 0x0) 05:49:41 executing program 4: set_mempolicy(0x3, &(0x7f0000000080)=0x10001, 0x401) clone(0xa29e0dcdcdf67d6b, 0x0, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc000, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000040)={0x0, 0x4, 0x80}) 05:49:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, 0x0) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x100000000000000, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:41 executing program 4: clock_nanosleep(0x0, 0x1, 0x0, &(0x7f0000000600)) getpgrp(0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xc9, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x128) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x42042, 0x0) set_robust_list(&(0x7f0000000840), 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000880)="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", 0x35f) ftruncate(r1, 0x7f) sendfile(r1, r1, &(0x7f00000000c0), 0x8080ffffff10) gettid() poll(&(0x7f0000000180)=[{}], 0x1, 0x0) 05:49:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, 0x0) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:41 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="05841f561530ab46b147a73af5416eb3751a4d5154b2c2219d449533f3207c9eea803f294df4a9504d583992029c73a46ec9096e7a4cfe8f91e0cdd2f92ffc34aceae6bc5b83fce2deb6802968325223e184fb54a1e3cb8f0ce7879b01ff14102c9d86126e4ccf876d5e5a0a823fa5ef348c2bdf6cf36e7ebce4d77c2f8c327c4ea892e20c5d3bca1c78498f79a746155dff1e871bcba5844597b62b07cef33f679af768bda6acc4bf959d879a160e2e4fa2d7b1e67bfb9d9e0800ab41f7117ab07bd17f8d508d3cb4dfd5ee93f66a751b884e467b46264ed9b3f5"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='/dev/zero\x00', 0xfffffffffffffffa) keyctl$get_security(0x11, 0x0, &(0x7f0000000400)=""/186, 0xba) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300), 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r2, 0x10000, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x0, {"7bc05d9238c9123282c01cf494a0fb49"}, 0x8000, 0x200, 0x8}, @ib={0x1b, 0x8, 0x0, {"82988ab8590cedf9f21706dfe6f3dd36"}, 0x3ff, 0x2, 0x3}}}, 0x118) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000600)={0x50, 0x0, 0x5, {0x7, 0x1b, 0x5, 0x0, 0x100000000, 0x6, 0x7ffd}}, 0x2e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000080)={0x1a, 0x337, 0x4b, 0x4, 0x3, 0x7f, @local}, 0x10) 05:49:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000100)=0x4) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0100000000000000000087ba8110f9ac28530100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063ba06a927000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x32, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x108) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x6, 0x100) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'hsr0\x00'}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000200)="8cdcaa68", 0x4}], 0x2}, 0x4008000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 250.516714] llc_conn_state_process: llc_conn_service failed 05:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x100000000000000, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) 05:49:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x8000000000000000, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000200)=""/249, 0xf9) getdents(r0, &(0x7f0000000100)=""/223, 0xa6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xb940}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={r1, 0x1, 0x50, "bf5da6fc0294f039ae386014512399cd7b9ee97105350ea0ca4e070223c8e6c9ec623059da4999b85d3bdf8acc6658991c6ca25c79c63ab42de8fc46ff59a5ecc0f48da4548a8648bd94b8a2d99e0940"}, 0x58) 05:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d0000000f00c53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c00000000", 0xb1) 05:49:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x80ffff, 0x0, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001740)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0xfc010000, 0x0, 0x712000, &(0x7f0000001000/0x2000)=nil}) 05:49:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint}]}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000080)={0xe, @output={0x1000, 0x1, {0xfc1, 0xf8}, 0x8, 0xfff}}) 05:49:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) [ 251.034651] ================================================================== [ 251.042581] BUG: KASAN: slab-out-of-bounds in kvm_clear_dirty_log_protect+0x8cf/0x970 [ 251.050549] Read of size 8 at addr ffff88809eab2790 by task syz-executor0/9336 [ 251.057951] [ 251.059616] CPU: 1 PID: 9336 Comm: syz-executor0 Not tainted 4.20.0+ #4 [ 251.066359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.066366] Call Trace: [ 251.078363] dump_stack+0x1db/0x2d0 05:49:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) [ 251.082003] ? dump_stack_print_info.cold+0x20/0x20 [ 251.087034] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 251.092490] print_address_description.cold+0x7c/0x20d [ 251.097781] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 251.103066] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 251.108351] kasan_report.cold+0x1b/0x40 [ 251.112432] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 251.117812] __asan_report_load8_noabort+0x14/0x20 [ 251.122742] kvm_clear_dirty_log_protect+0x8cf/0x970 [ 251.122765] ? vcpu_stat_get_per_vm_open+0x40/0x40 [ 251.122851] ? lock_downgrade+0x910/0x910 [ 251.122864] ? lock_release+0xc40/0xc40 [ 251.141019] kvm_vm_ioctl_clear_dirty_log+0xff/0x260 [ 251.141036] ? kvm_vm_ioctl_get_dirty_log+0x260/0x260 [ 251.151359] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.156935] ? _copy_from_user+0xdd/0x150 [ 251.161083] kvm_vm_ioctl+0xc19/0x1fe0 [ 251.164962] ? __lock_acquire+0x572/0x4a30 [ 251.169197] ? kasan_check_read+0x11/0x20 [ 251.173341] ? do_raw_spin_unlock+0xa0/0x330 [ 251.177771] ? kvm_unregister_device_ops+0x70/0x70 05:49:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) [ 251.182715] ? mark_held_locks+0x100/0x100 [ 251.182768] ? get_futex_key+0x2050/0x2050 [ 251.191176] ? add_lock_to_list.isra.0+0x450/0x450 [ 251.196110] ? mark_held_locks+0x100/0x100 [ 251.200380] ? __fget+0x472/0x710 [ 251.200394] ? find_held_lock+0x35/0x120 [ 251.207866] ? __fget+0x472/0x710 [ 251.211332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.216878] ? lock_downgrade+0x910/0x910 [ 251.221027] ? kasan_check_read+0x11/0x20 [ 251.225366] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 251.230649] ? rcu_read_unlock_special+0x380/0x380 [ 251.235596] ? __fget+0x499/0x710 [ 251.239085] ? iterate_fd+0x4b0/0x4b0 [ 251.242877] ? lock_release+0xc40/0xc40 [ 251.246868] ? kvm_unregister_device_ops+0x70/0x70 [ 251.251847] do_vfs_ioctl+0x107b/0x17d0 [ 251.255830] ? ioctl_preallocate+0x2f0/0x2f0 [ 251.260291] ? smack_inode_setattr+0x290/0x290 [ 251.264874] ? __fget_light+0x2db/0x420 [ 251.268847] ? fget_raw+0x20/0x20 [ 251.272348] ? put_timespec64+0x115/0x1b0 [ 251.276506] ? nsecs_to_jiffies+0x30/0x30 [ 251.280667] ? do_syscall_64+0x8c/0x800 [ 251.284648] ? do_syscall_64+0x8c/0x800 [ 251.288633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.294203] ? security_file_ioctl+0x93/0xc0 [ 251.298714] ksys_ioctl+0xab/0xd0 [ 251.302172] __x64_sys_ioctl+0x73/0xb0 [ 251.306059] do_syscall_64+0x1a3/0x800 [ 251.309955] ? syscall_return_slowpath+0x5f0/0x5f0 [ 251.314888] ? prepare_exit_to_usermode+0x232/0x3b0 [ 251.319910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.324779] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.329963] RIP: 0033:0x457ec9 05:49:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) [ 251.333162] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.352052] RSP: 002b:00007ff37d6b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.352066] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 251.352073] RDX: 0000000020000080 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 251.352081] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 251.352089] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff37d6b46d4 [ 251.352097] R13: 00000000004c9ef0 R14: 00000000004d2a10 R15: 00000000ffffffff [ 251.352116] [ 251.352121] Allocated by task 9336: [ 251.352134] save_stack+0x45/0xd0 [ 251.352142] kasan_kmalloc+0xcf/0xe0 [ 251.352150] __kmalloc_node+0x4e/0x70 [ 251.352203] kvmalloc_node+0x68/0x100 [ 251.352215] __kvm_set_memory_region+0x1da1/0x2c40 [ 251.352225] kvm_set_memory_region+0x2f/0x60 [ 251.352233] kvm_vm_ioctl+0xafa/0x1fe0 [ 251.352242] do_vfs_ioctl+0x107b/0x17d0 [ 251.352249] ksys_ioctl+0xab/0xd0 [ 251.352256] __x64_sys_ioctl+0x73/0xb0 [ 251.352266] do_syscall_64+0x1a3/0x800 [ 251.408832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.408836] [ 251.408842] Freed by task 7719: [ 251.408855] save_stack+0x45/0xd0 [ 251.408866] __kasan_slab_free+0x102/0x150 [ 251.408877] kasan_slab_free+0xe/0x10 [ 251.408886] kfree+0xcf/0x230 [ 251.408898] kvfree+0x61/0x70 [ 251.421456] __vunmap+0x2e1/0x400 [ 251.421470] vfree+0x8d/0x140 [ 251.421524] do_ip6t_get_ctl+0x968/0xc00 [ 251.421580] nf_getsockopt+0x80/0xe0 [ 251.421626] ipv6_getsockopt+0x23b/0x320 [ 251.421649] tcp_getsockopt+0x95/0xf0 [ 251.421713] sock_common_getsockopt+0x9a/0xe0 [ 251.421727] __sys_getsockopt+0x196/0x370 [ 251.433954] __x64_sys_getsockopt+0xbe/0x150 [ 251.433968] do_syscall_64+0x1a3/0x800 [ 251.433983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.517892] [ 251.519517] The buggy address belongs to the object at ffff88809eab2780 [ 251.519517] which belongs to the cache kmalloc-32 of size 32 [ 251.532000] The buggy address is located 16 bytes inside of [ 251.532000] 32-byte region [ffff88809eab2780, ffff88809eab27a0) [ 251.543689] The buggy address belongs to the page: [ 251.548618] page:ffffea00027aac80 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff88809eab2fc1 [ 251.558065] flags: 0x1fffc0000000200(slab) [ 251.562309] raw: 01fffc0000000200 ffffea00025ffa88 ffffea00024c3a48 ffff88812c3f01c0 [ 251.570198] raw: ffff88809eab2fc1 ffff88809eab2000 000000010000003f 0000000000000000 [ 251.578072] page dumped because: kasan: bad access detected [ 251.583773] [ 251.585397] Memory state around the buggy address: [ 251.590329] ffff88809eab2680: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 251.597688] ffff88809eab2700: 00 fc fc fc fc fc fc fc 02 fc fc fc fc fc fc fc [ 251.605254] >ffff88809eab2780: 00 00 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 251.612617] ^ [ 251.616497] ffff88809eab2800: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 251.623847] ffff88809eab2880: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 251.631191] ================================================================== [ 251.638534] Disabling lock debugging due to kernel taint [ 251.644965] Kernel panic - not syncing: panic_on_warn set ... [ 251.650864] CPU: 1 PID: 9336 Comm: syz-executor0 Tainted: G B 4.20.0+ #4 [ 251.657014] kobject: 'loop4' (00000000176536ba): kobject_uevent_env [ 251.658991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.658997] Call Trace: [ 251.659017] dump_stack+0x1db/0x2d0 [ 251.659036] ? dump_stack_print_info.cold+0x20/0x20 [ 251.659112] panic+0x2cb/0x589 [ 251.659126] ? add_taint.cold+0x16/0x16 [ 251.685674] kobject: 'loop4' (00000000176536ba): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 251.686315] ? trace_hardirqs_on+0xb4/0x310 [ 251.707223] ? trace_hardirqs_on+0xb4/0x310 [ 251.709432] kobject: 'loop3' (00000000ed6f3590): kobject_uevent_env [ 251.711562] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 251.711580] end_report+0x47/0x4f [ 251.711596] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 251.726870] kobject: 'loop3' (00000000ed6f3590): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 251.731955] kasan_report.cold+0xe/0x40 [ 251.731978] ? kvm_clear_dirty_log_protect+0x8cf/0x970 [ 251.731997] __asan_report_load8_noabort+0x14/0x20 [ 251.732012] kvm_clear_dirty_log_protect+0x8cf/0x970 [ 251.732035] ? vcpu_stat_get_per_vm_open+0x40/0x40 [ 251.732052] ? lock_downgrade+0x910/0x910 [ 251.732064] ? lock_release+0xc40/0xc40 [ 251.732088] kvm_vm_ioctl_clear_dirty_log+0xff/0x260 [ 251.774336] kobject: 'loop2' (00000000d9652315): kobject_uevent_env [ 251.778989] ? kvm_vm_ioctl_get_dirty_log+0x260/0x260 [ 251.779009] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.779024] ? _copy_from_user+0xdd/0x150 [ 251.779040] kvm_vm_ioctl+0xc19/0x1fe0 [ 251.779051] ? __lock_acquire+0x572/0x4a30 [ 251.779065] ? kasan_check_read+0x11/0x20 [ 251.779095] ? do_raw_spin_unlock+0xa0/0x330 [ 251.779109] ? kvm_unregister_device_ops+0x70/0x70 [ 251.779126] ? mark_held_locks+0x100/0x100 [ 251.826363] ? get_futex_key+0x2050/0x2050 [ 251.830590] ? add_lock_to_list.isra.0+0x450/0x450 [ 251.835590] ? mark_held_locks+0x100/0x100 [ 251.839815] ? __fget+0x472/0x710 [ 251.843267] ? find_held_lock+0x35/0x120 [ 251.847318] ? __fget+0x472/0x710 [ 251.850764] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.856291] ? lock_downgrade+0x910/0x910 [ 251.860425] ? kasan_check_read+0x11/0x20 [ 251.864560] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 251.869827] ? rcu_read_unlock_special+0x380/0x380 [ 251.874747] ? __fget+0x499/0x710 [ 251.878188] ? iterate_fd+0x4b0/0x4b0 [ 251.881969] ? lock_release+0xc40/0xc40 [ 251.885930] ? kvm_unregister_device_ops+0x70/0x70 [ 251.890930] do_vfs_ioctl+0x107b/0x17d0 [ 251.894901] ? ioctl_preallocate+0x2f0/0x2f0 [ 251.899296] ? smack_inode_setattr+0x290/0x290 [ 251.903975] ? __fget_light+0x2db/0x420 [ 251.907933] ? fget_raw+0x20/0x20 [ 251.911484] ? put_timespec64+0x115/0x1b0 [ 251.915617] ? nsecs_to_jiffies+0x30/0x30 [ 251.919770] ? do_syscall_64+0x8c/0x800 [ 251.923731] ? do_syscall_64+0x8c/0x800 [ 251.927693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.933222] ? security_file_ioctl+0x93/0xc0 [ 251.937629] ksys_ioctl+0xab/0xd0 [ 251.941078] __x64_sys_ioctl+0x73/0xb0 [ 251.944951] do_syscall_64+0x1a3/0x800 [ 251.948829] ? syscall_return_slowpath+0x5f0/0x5f0 [ 251.953744] ? prepare_exit_to_usermode+0x232/0x3b0 [ 251.958750] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.963589] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.968767] RIP: 0033:0x457ec9 [ 251.971948] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.990834] RSP: 002b:00007ff37d6b3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.998530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 252.005788] RDX: 0000000020000080 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 252.013042] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 252.020298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff37d6b46d4 [ 252.027551] R13: 00000000004c9ef0 R14: 00000000004d2a10 R15: 00000000ffffffff [ 252.035969] Kernel Offset: disabled [ 252.039598] Rebooting in 86400 seconds..