[ 93.869964] audit: type=1800 audit(1551847155.914:25): pid=10402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 93.889066] audit: type=1800 audit(1551847155.914:26): pid=10402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 93.908730] audit: type=1800 audit(1551847155.944:27): pid=10402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 94.078460] cat (10470) used greatest stack depth: 53280 bytes left [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.170' (ECDSA) to the list of known hosts. 2019/03/06 04:39:29 fuzzer started 2019/03/06 04:39:34 dialing manager at 10.128.0.26:38547 2019/03/06 04:39:34 syscalls: 1 2019/03/06 04:39:34 code coverage: enabled 2019/03/06 04:39:34 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/06 04:39:34 extra coverage: extra coverage is not supported by the kernel 2019/03/06 04:39:34 setuid sandbox: enabled 2019/03/06 04:39:34 namespace sandbox: enabled 2019/03/06 04:39:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/06 04:39:34 fault injection: enabled 2019/03/06 04:39:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/06 04:39:34 net packet injection: enabled 2019/03/06 04:39:34 net device setup: enabled 04:42:46 executing program 0: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) syzkaller login: [ 305.308733] IPVS: ftp: loaded support on port[0] = 21 [ 305.493846] chnl_net:caif_netlink_parms(): no params data found [ 305.570226] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.577012] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.585753] device bridge_slave_0 entered promiscuous mode [ 305.595585] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.602219] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.610801] device bridge_slave_1 entered promiscuous mode [ 305.649152] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 305.660847] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 305.694755] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 305.703715] team0: Port device team_slave_0 added [ 305.710835] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 305.719742] team0: Port device team_slave_1 added [ 305.726782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 305.735548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 305.818304] device hsr_slave_0 entered promiscuous mode [ 306.042717] device hsr_slave_1 entered promiscuous mode [ 306.203477] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 306.211273] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 306.245124] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.251726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.259000] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.265635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.367609] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 306.374409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.389367] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 306.403526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.416771] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.426371] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.438694] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 306.457567] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 306.463756] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.481812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 306.489052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.499384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.508202] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.514760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.533831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 306.541737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.551123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.561690] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.568285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.586491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 306.599507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 306.606932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.616816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.636054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 306.649170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 306.656451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.665891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.675193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.685813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.697432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.711867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 306.719494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.728225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.744343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 306.755461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.767619] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 306.773877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.783711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.792613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.826372] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 306.851211] 8021q: adding VLAN 0 to HW filter on device batadv0 04:42:49 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000200)="37bf714a03a40959c32786a153def83556fa50cd07a17e57dec67c6416a295c095eb32a4f530f4c9d5a1097ec9cb7ae16740e3757f15b6dcf57990782d6184c5e4008d0a13c88dde2489844d5ac77297e284a19202b19948d27e47580f8ba3d97f4b9c4002ed0be3a4772706db21e6218c26e76063cb18300682ff759367394a3dd6a021fbb7b9fbcf") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000000)={0x0}) 04:42:50 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x801) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="d3", 0x1}], 0x1, 0x0) 04:42:50 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 308.130352] bond0: Releasing backup interface bond_slave_1 04:42:50 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 04:42:50 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 04:42:50 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 04:42:50 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) 04:42:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x0, 0x0}) [ 309.575030] IPVS: ftp: loaded support on port[0] = 21 [ 309.760540] chnl_net:caif_netlink_parms(): no params data found [ 309.859592] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.866426] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.875187] device bridge_slave_0 entered promiscuous mode [ 309.885780] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.892414] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.900847] device bridge_slave_1 entered promiscuous mode [ 309.948019] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 309.976133] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 310.033368] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 310.042799] team0: Port device team_slave_0 added [ 310.050742] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 310.059498] team0: Port device team_slave_1 added [ 310.067057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 310.075759] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 310.158974] device hsr_slave_0 entered promiscuous mode [ 310.203286] device hsr_slave_1 entered promiscuous mode [ 310.253580] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 310.261245] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 310.329743] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.336415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.343698] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.350258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.507819] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 310.514690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.530429] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 310.546481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.557128] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.567056] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.596031] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 310.624787] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 310.630928] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.668241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.676672] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.683298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.738367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.747130] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.753742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.775614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 310.799862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 310.809990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.819293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.828116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.837730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.869101] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 310.882552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 310.894094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.903903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.916414] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 310.932503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.940912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.949544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.958487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.968137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.993088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 311.036916] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 311.066453] 8021q: adding VLAN 0 to HW filter on device batadv0 04:42:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = epoll_create1(0x0) flock(r1, 0x8ac5d6e14356429) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x32) signalfd4(r1, &(0x7f0000000000)={0x1}, 0x8, 0x800) mq_timedreceive(r2, &(0x7f00000000c0)=""/206, 0xce, 0x3, &(0x7f00000001c0)) close(r1) 04:42:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x1f5) [ 311.595029] kernel msg: ebtables bug: please report to author: Wrong len argument 04:42:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xfc, 0x18, 0x200, 0x70bd25, 0x25dfdbff, {0xc}, [@generic="83a05e77840a56bbcf43dc9f5231ed49ed633b81da5fa7f3bc21839af4e37c0d545361086d06bf07327aecc6941e16584877e37b0487aec2554584483dee09db7672a74ee0df1ecd37c41b7aa0e9ca0a4e88da4cc63cd6af0f1e4f37fa184b8fed704994fea03a13d9f8e91198d3c843d307f4c253ec2e11d17ac49cca90fbdc523cfefbb03808efda8b69a170d2ecbce555e0abb1ee27d85c8e188726332d157ce996657c9976bd956f34fe43373e897198791f8fd597b38112efdf8cc2ad0869af742786bc46428314ac729206224d95957c3dab9ae8fa5fb3039ee05a092531e431fce93ef7"]}, 0xfc}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000000) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='i\x9c\xe7\xe2\xbc\xd2\tk\xd1t\xc2\xde\xfd\xbf\xe9\xbd\xc7\xeb\x9aJ\xee\x80Z\x90Dq\xdc\xdc\xa4\x17+D\xcbAU\xb3\xba\x96\xacCSJ#\t\xfa\x8ev\x17\x9b\xcfn\t\xf1w\xad\xf2\xe8\xaf\xe8\x91\x1b\x05\xca\xee\x81J\x12\xa4\xf1\xd2\xd7Z\xb7\xea\x9a,\xd3v\";\x90\xf4\xfc\xa9V\x02', 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) write$cgroup_int(r2, &(0x7f00000000c0)=0x200000000000, 0x12) sendfile(r0, r3, 0x0, 0x20000000006) 04:42:53 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2) fcntl$getflags(r1, 0x401) 04:42:53 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x222200, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) prctl$PR_SET_DUMPABLE(0x4, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') getdents64(r1, &(0x7f0000009080)=""/231, 0xe7) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f00000000c0)=0x1000) clock_gettime(0x7, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100), 0x2000000000000396, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0), 0x8) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) move_pages(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000300)=[0x6, 0x3, 0x56, 0x7fffffff, 0x2], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000440)=0x10000, 0x4) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000003c0)={[{0xe6c, 0x3, 0x4, 0x100000000, 0x4, 0x6, 0x498b, 0x8000, 0x4, 0x8182, 0x0, 0x5, 0xfffffffffffffc00}, {0xc5, 0x7ff, 0x1000, 0x1, 0x10000, 0x189a, 0x6, 0x8, 0x0, 0x1, 0xdb, 0x7, 0x4}, {0x80000000, 0x49b7a377, 0x3, 0x3f, 0x8, 0x100000001, 0xf38, 0x81, 0x3, 0x6, 0x40, 0xca}], 0x5}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000004c0)={0x3f, 0x3ff}) setpriority(0x0, r4, 0xfff) ptrace$poke(0x5, r4, &(0x7f0000000380), 0xffffffff) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:42:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmget$private(0x0, 0x4000, 0x7c000000, &(0x7f0000ff9000/0x4000)=nil) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x75, 0x4, 0xfffffffffffffff9, "19f1e3ba302047f89d7a7b02d1254748", "7c8aca94465ba1c35feec17e39a3ebdb54800dbc80400e5a1e866939e0533041639842f31c0f8ac09c3561d91f20f7245e23ce3db33d45aa91cd3b9a27529f7324e5d68e140da04bff937f19c02b16724004d22075df8cf4c62070601ce4c516"}, 0x75, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 312.204012] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 04:42:54 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x3) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}, &(0x7f00000000c0)=0xc) move_pages(r0, 0x1, &(0x7f0000000100)=[&(0x7f00004ea000/0x4000)=nil], &(0x7f0000000180)=[0x0, 0x4, 0x9, 0x1, 0x8, 0xffffffffffffffc0, 0x400, 0x404, 0x0, 0x1ff], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) move_pages(0x0, 0x2, &(0x7f0000000140)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000180), &(0x7f00000001c0), 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:42:54 executing program 0: unshare(0x20100) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x10001, 0x0) close(r1) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000000)="dd32d7e2eede9ffb314e186f7090d308ecdf2d0d66a577a5f970db1387013272d92d3d528f9c76e16bd452afe9688abfde5e5d2705d37dc8e985f42375353ef2589fffff287131befc72834a2df7d5d8b4981f9b753c5e2c0585b7cd0a06ad0fe024ebc34165b2b5a4129f24c59079a29292e4471cd6bfc646ff62d81c09c7a8698e6a18fa295d2ae55f33c3d4607eb43e1a588c53567292df187272a75f45e2e661be14edc2330f4b7d0e9cf8e56609504d174ac6c6ac05e063237f6be2a587afa3ab5feed62a0b1940866d6ef40fcd2510030f66c85b9e5ecf10aabfb170d28b189f") 04:42:54 executing program 1: r0 = gettid() rt_sigqueueinfo(r0, 0x41, &(0x7f00000001c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x12900, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000040)=""/208) 04:42:54 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) socket(0x2, 0xf, 0x1000) init_module(&(0x7f0000000000)=']\x00', 0x2, &(0x7f0000000040)='-\\+Imime_type\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000240)={0x2654, 0x401, 0x7}) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000080)=""/209, 0xd1}, &(0x7f0000000180), 0x2}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 04:42:55 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000900)='/dev/sequencer2\x00', 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x0, 0x4]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x300, 0x0, 0x0}, 0x78) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000000)) 04:42:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x10000000000007) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4001, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000005}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xdf5f}}, 0xe8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x20000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:42:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000080), 0x4) close(r2) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 04:42:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000004a030000000000005c47955600000000829500000000256941f54e7f90bfafe50a0000000000"], 0x2a) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000580)=""/202, 0xca}], 0x1) 04:42:55 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) setrlimit(0x408000000000007, &(0x7f0000000000)) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x500, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000280)=0x3, 0x4) 04:42:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) sendmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x60, 0x29, 0x3b, "e10984fa3279d7a9e03a22b169d736c06ab11a96f7d25adf9166e34ba01ef80187324065bcda06ab9013268169230973698dc95dde627650790df783841dcbb38ed04b54d5375b9d6a"}], 0x60}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x40}, &(0x7f0000000380)=0x8) r2 = syz_open_dev$admmidi(&(0x7f0000000640)='/dev/admmidi#\x00', 0x27, 0x100000000200) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={r1, 0x400, 0x30}, &(0x7f0000000240)=0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x44, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbd}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r3, 0x7fffffff}, 0x8) r5 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="2f4f23eb6f82082cf440e3859e0040fbf92155f94172e427c0df1b8d51b6c182a7709fb10c508e52328ec9fc66c99c307fe4cbe54349fc1bcffcc372c70a09268d40b13cf768381561e6b4a2a3aec335ed358de9744e5aa928ed482ee7679d326770efb7be449aa3358eb152d074", 0x6e, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)=@secondary='builtin_and_secondary_trusted\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e20, 0xffffffffffffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, [0x9, 0x101, 0xc28e, 0x1, 0x6, 0xafcb, 0xffffffff, 0x3, 0x100000000, 0xca, 0x200000000000000, 0xfffffffffffffff8, 0x6, 0x7, 0x4]}, &(0x7f0000000180)=0x100) 04:42:55 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x7530}, 0x10) read(r0, &(0x7f000083b000)=""/1, 0x1) 04:42:55 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) setrlimit(0x408000000000007, &(0x7f0000000000)) accept4$packet(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x500, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000280)=0x3, 0x4) 04:42:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) 04:42:56 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x400, 0x5) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000003c0)={0x1, 0x0, {0x7, 0x2, 0x2003, 0xf, 0x7, 0x6, 0x1, 0x4}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xbc, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x200, @mcast2, 0x7}, @in6={0xa, 0x4e20, 0x32, @mcast1, 0xffff}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x8}, @in6={0xa, 0x4e20, 0x2000d092, @ipv4={[], [], @local}, 0x401}, @in6={0xa, 0x4e20, 0x7fff, @remote, 0x1}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) write$FUSE_DIRENT(r1, &(0x7f0000000300)={0xb0, 0x0, 0x6, [{0x4, 0x2, 0x13, 0x288, 'cgroupmd5sum$eth1b-'}, {0x4, 0xdf, 0x27, 0xcb, '\x06%wlan1vmnet0vboxnet1ppp0nodevcpusetGPL'}, {0x4, 0x2, 0x16, 0x1000, 'lo/mime_typeeth0]user}'}]}, 0xb0) dup3(r1, r0, 0x0) [ 314.159968] Bluetooth: hci0: Frame reassembly failed (-84) [ 314.189768] Bluetooth: hci1: Frame reassembly failed (-84) 04:42:56 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x400, 0x5) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000003c0)={0x1, 0x0, {0x7, 0x2, 0x2003, 0xf, 0x7, 0x6, 0x1, 0x4}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xbc, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x200, @mcast2, 0x7}, @in6={0xa, 0x4e20, 0x32, @mcast1, 0xffff}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x8}, @in6={0xa, 0x4e20, 0x2000d092, @ipv4={[], [], @local}, 0x401}, @in6={0xa, 0x4e20, 0x7fff, @remote, 0x1}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) write$FUSE_DIRENT(r1, &(0x7f0000000300)={0xb0, 0x0, 0x6, [{0x4, 0x2, 0x13, 0x288, 'cgroupmd5sum$eth1b-'}, {0x4, 0xdf, 0x27, 0xcb, '\x06%wlan1vmnet0vboxnet1ppp0nodevcpusetGPL'}, {0x4, 0x2, 0x16, 0x1000, 'lo/mime_typeeth0]user}'}]}, 0xb0) dup3(r1, r0, 0x0) 04:42:56 executing program 1: unshare(0x8000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0xffffffffffeffffe, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @rumble}}) getgid() 04:42:56 executing program 1: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() fchown(r0, r1, r2) 04:42:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1a, &(0x7f0000000000), 0x20395dd4) 04:42:57 executing program 1: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x7}, 0xfffffffffffffe74) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, '\xc3?\x06\xf2\x97\xbb\x94\x92\x00\x00\x00\x00\x00\x00 \x00'}, 0x18) 04:42:57 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x42002) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7}, 0x7) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x200) uname(&(0x7f0000000280)=""/251) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2051, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000100)="8c8f1233a4f6829d604ddd1f71958232b589fea44429e81ecd895fd52ae3352ed80a4c6e4cc6e74d9edfd3b8aeedff3835501173a56c631ce7d330e1cb45e1bb2345614407aed05e3e733d031e792348e9c8baae5d66dd71b2ead1bbf9f48844f54477282cd415650bf97c7c4bc573bbb1adb5427bfaa052e74582f97d6cc71a9bcfce5f6ce7973ad10b11ba19ea692c611c82d6d61f565cdcd3038abae2f2a05037c8a4b52c52ea38f72292b021b194f0898dbe93e2bb9b07f7d26f3f5411e325fe3f2ce8ff8e285b297a545a56f94f07", 0xd1, r0}, 0x68) 04:42:57 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x202, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x6) prctl$PR_SET_FP_MODE(0x2d, 0x3) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x7, 0x9, 0x800, 0x8001}, 0x42, [0x1, 0x4, 0xfffffffffffffff7, 0xc035, 0x800, 0x1, 0x4, 0x3f, 0x3, 0x80, 0x3, 0x6, 0x9, 0x64b, 0x0, 0x8000, 0x8, 0xffff, 0x4, 0x1ff, 0x7, 0x6, 0x8, 0xcdb, 0x100, 0x5, 0x9, 0x6, 0x81, 0x20, 0x4, 0x3, 0xfffffffffffffffa, 0x100000001, 0x7fffffff, 0x64be, 0x8000, 0x5, 0xa1, 0x9, 0x59820000000000, 0x100, 0x749, 0x5, 0x8000, 0x100000000, 0x8, 0xfffffffffffffffa, 0x8, 0xad85, 0x9, 0x1ff, 0x8e, 0x7, 0x7, 0x1, 0x42, 0x3, 0x0, 0x7fff, 0x1f, 0xfffffffffffffff8, 0x4, 0x81], [0x8, 0x5, 0x200, 0x3, 0x7fffffff, 0x101, 0x37b, 0x7, 0x20, 0x8, 0x3, 0x32, 0x7, 0x9, 0x1, 0x0, 0x8, 0x2, 0x80, 0x0, 0x9, 0x5, 0xff, 0x2f77, 0x1, 0x40, 0x77, 0x1f, 0x3, 0x2, 0x6, 0x1f, 0x3, 0x0, 0x7, 0x3, 0x4, 0xffffffffffffffff, 0xffffffff, 0x8, 0xb42, 0x101, 0x2, 0x4, 0x80000001, 0xffffffff00000000, 0x7f6947ee, 0xffffffff, 0x3b9, 0x2, 0x8, 0x80000000, 0x211, 0x62, 0x2, 0x0, 0x7, 0x8, 0x0, 0x401, 0xfec3, 0x6, 0x0, 0x1f], [0x400, 0x100, 0x9c05, 0x1, 0x8, 0x39, 0x2, 0x900, 0x7, 0xd3, 0x1000, 0xb0e6, 0x0, 0x5, 0x6, 0x6, 0xf4, 0x2852abe6, 0x5, 0xffffffff, 0x3f, 0x8, 0x3, 0x9, 0x9, 0xffffffffffff0001, 0x9, 0x2, 0xaaaa, 0xffff, 0x4, 0x9, 0x37d, 0x86, 0x5, 0x2, 0x8, 0x280, 0xffffffffffffff51, 0x6, 0x3ff, 0x4, 0x84, 0x28c74254, 0x5, 0x96, 0x8, 0x8, 0x3, 0x9, 0x0, 0x2341, 0x95, 0x9, 0x80, 0x1, 0x4, 0x100000000, 0x3f, 0x5, 0x3, 0x4, 0x0, 0x6], [0x91, 0x1, 0x3, 0x9, 0xa0, 0x8, 0x0, 0x7ff, 0x2, 0x1f, 0xab47, 0x8, 0xfffffffffffff0ee, 0x800, 0x7, 0x0, 0x6, 0x5, 0x9, 0x7045, 0x5, 0xff, 0x1f, 0xfff, 0x8, 0x6, 0x1, 0x3, 0x8, 0x8, 0x1, 0x1000, 0x2, 0x8, 0x15880000000000, 0x4, 0x6, 0xeb, 0xe77, 0x400, 0x9, 0x2, 0x5, 0x100000000, 0x800, 0x9ef, 0x6, 0x2, 0x4, 0x8000, 0x0, 0x5244e638, 0x8, 0x1000, 0x100, 0xffffffffffffffc1, 0xa8f, 0x5, 0x10001, 0x9, 0x4, 0x1, 0x9, 0x6]}, 0x45c) r1 = inotify_init1(0x80000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x400000, 0x0) sendmsg$unix(r2, &(0x7f0000001900)={&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000580)="9ac3b1457754a55e0697306666ea6c4002c0de0b9d8b75c5ec94e87ee0a67d9cf3653af2975d6447a94f32175a2b7a53f722e2f61d2c2fc4dcdf14cc868a00ef3240c88d41628167d291029639dbe1fd6c6624e1b980ec2255cfce770423e2b1c0d5bd768b4596f4a25b32055b6716bf57b82762b146a65cf60919417414cb48d726282f0aa52c40620ac9b8c08a9ad694c5bb5a461dd766a73fb33f841ab86fccf5b4862b6c4baa64fca02d5055ff55d3718b9bfee33074d0e21663450df886304c92", 0xc3}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="46ebafbc55028f5a8163bff1d2a2aa5160ea39b4297af061d6292f112e97c64121374a52bc819614c7dcf66d3c46ff95dfb3c243d70e1aafedf1f041536248b0edde3efc893b06f9579e98f74984f61d18d55f0f243800aaf867b62b092518298244810c7278d800474e4957ac0aea131cf9cf9f59408a831f1f942dc0be5c68cd5f0123b54ac4a78c145b78bd1be6e2d069697a6bb4c840fd3d787fd2391e9fd1ccfe370022a9f08d991e5690082b8cc7796a74b70f76b5cb81664cb5b322c78bed1cd50b721d292a01b638293c4939b963cc9dbfc31a", 0xd7}, {&(0x7f0000001780)="6f2ff9daef4ab90b78b9eeaa9e88911a86c5df636931b15a40d1de16165a66568ea357534db0997130d2684e", 0x2c}, {&(0x7f00000017c0)="fb775ecd2a98d894009475ee7f5f657355728f797cb0c91a6c45d02917d704d536f7b0b4799c964e375828083c4442209b71306975036a9b121cb78c4b1576b4ec734544f24397ef13e7018c36b7d6527aaa8697a0cc12fab4e35f38afbfeb02af7f1918901a6e263e9ebc4e358856405cf18dc8", 0x74}], 0x5, &(0x7f00000018c0)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18, 0x20008000}, 0x40000) r3 = dup(r0) write$uinput_user_dev(r3, &(0x7f0000001940)={'syz0\x00', {0x22fe, 0x561e, 0x10001, 0x6}, 0x2a, [0x1, 0x3, 0x100000001, 0x40, 0x1, 0x7, 0x9, 0x29, 0x1, 0x1, 0xfffffffffffeffff, 0x1, 0x0, 0x5, 0x9, 0x20, 0x3, 0x3ff, 0x8, 0x4, 0x1000, 0x80000000, 0x1, 0x5, 0xf85b, 0x8, 0x0, 0xa9, 0x8000, 0x2, 0x1, 0x3, 0xffff, 0x5, 0x101, 0x401, 0x0, 0x5, 0x5, 0x1, 0x5, 0x9, 0x80000000, 0xffffffff, 0x6, 0x8, 0x401, 0x5, 0x9, 0x8, 0x80000000, 0x8, 0x80, 0x0, 0x3ff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x5, 0x40, 0x5, 0x7], [0xf3, 0x40, 0x9, 0x6, 0x3, 0x4, 0x7629, 0x4, 0x7, 0x9, 0x100, 0x1c000000000, 0x4, 0x10001, 0x6, 0x1d0, 0x7fff, 0x7fffffff, 0xc5f, 0x1, 0xffff, 0x8000, 0x3, 0x4, 0x3, 0x5, 0x3f, 0x1ff, 0x9, 0x3f, 0x5, 0x1ff, 0xe0000000, 0x13, 0x0, 0x2, 0x0, 0x80, 0xc6, 0x40, 0x0, 0x1, 0x4, 0x101, 0x1000, 0x0, 0x61d, 0x1f, 0x8, 0xffffffff, 0x6, 0x10001, 0x0, 0x41, 0x80000000, 0xeed, 0x3031, 0x1000, 0x8, 0x1, 0x400, 0x2, 0x80, 0x7fff], [0x0, 0x5, 0x6, 0x55, 0x1, 0x100000001, 0x2, 0x61cd46d4, 0x665b0a93, 0x4, 0x7ff, 0x100000001, 0x8, 0x7fffffff, 0x4, 0x2, 0x5, 0x100000000, 0x4, 0x3, 0x7, 0x4, 0x1ff, 0x0, 0x74, 0x2, 0x19a6, 0x2, 0x1, 0x0, 0x33, 0x8fc4, 0x6, 0x6, 0x6, 0xa0d3, 0x0, 0x3, 0xf99, 0x4, 0xf5, 0x3, 0x8000, 0xffffffffffffffff, 0x4eea, 0x1, 0x140d, 0x2, 0x3, 0x5, 0x1, 0x3ff, 0x0, 0x0, 0x3, 0xa8ed, 0x8, 0x3, 0x48f5, 0x27, 0x401, 0x0, 0x3, 0x9], [0x7f, 0x10001, 0x7f, 0x4, 0x2, 0x7, 0x9, 0xec9c, 0x0, 0xfffffffffffffffd, 0x200, 0x10000, 0x4, 0x9, 0x9, 0xeea, 0x6, 0x4d, 0x7fff, 0x39, 0x8, 0x7fffffff, 0x7, 0x4, 0x1, 0x0, 0x1, 0x5, 0x5, 0x80, 0x55, 0x80000001, 0x9, 0x7f, 0x7ff, 0x270c, 0x6, 0x7, 0x10000, 0x800, 0xfff, 0x9, 0x20, 0xa2, 0x7, 0xfffffffffffffffa, 0x401, 0x8, 0x8, 0x100000000, 0x6c, 0x401, 0x8, 0x10001, 0x0, 0x1, 0x10001, 0x2, 0x8, 0x1, 0x8, 0xfffffffffffffffe, 0xc364, 0xfffffffffffffffc]}, 0x45c) getegid() write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001e00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001dc0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000001e40)={0x4, 0x8, 0xfa00, {r4, 0xfe}}, 0x10) inotify_init1(0x80000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000001e80)={0x20, 0x0, 0xa64a6693c95ed88f, 0x2, 0x1, {0x401, 0x9}, 0x7eebb69206b39633}) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0xfbc6) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000001ec0)={@multicast1, @multicast1}, 0x8) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000001fc0)={0xb, 0x10, 0xfa00, {&(0x7f0000001f00), r4, 0x401}}, 0x18) ioctl$KDSETMODE(r3, 0x4b3a, 0xab3) r5 = epoll_create(0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000002000)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000002080)) fanotify_mark(r3, 0x85, 0x2, r3, &(0x7f00000020c0)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002100)='/dev/kvm\x00', 0x800, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000002140)='/dev/uinput\x00', 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x9) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000002180)=""/203) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000002280)) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000022c0)={0x4, 0x2, 0x7, 0x8, 0x12, 0x401, 0x7fffffff, 0xb34f, 0x0, 0x101}) 04:42:57 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f000021d000)={0x2, 0x4e21}, 0x3e) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @multicast1}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0)) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f0000000180)=0x4) syz_emit_ethernet(0x2, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX], 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, "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", 0x1000}, 0x1006) 04:42:58 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) syz_emit_ethernet(0xffffffffffffff26, &(0x7f0000001300)=ANY=[@ANYBLOB="0180c2000000cd8d58709dab8100310008050139003cfeae2659da0ef03a031c593800fe475a54ad6b781eb4b62a90a45c90762572517ab64eaa7818a375c2078c802eb400714dc4dce5c44a04af5905849130cb5e308cd0ab9551164b5710ad11fa706ae1de94e4c2fd121cd8a5077524f6a70e97e7a6988d30743b1fe89752af17443d188b4b587403ce2ae35ab77300138a788e313281b0b723c415effe55be23e9d6d4b72e51ff224e65343c203a587f2954794b3b93da0bcc135fcb730064905b6fa19f256e838c6a34e15d14b7ef6bcce7e7e850df297d49e62acd947df84d5d0a43dc90441f95a51f4e4365a5940cba091e62af0b129e6e3f01402043859f4aeedffa016dfe4ca76a2f5e17c52c74ad4b1093c21f9630d19aea3d18667f2b3c5cc30a735b3a55cfedb384e2106789252544ad605e926a53d03c3e289d46ae3a0f1f801b0fdf3b4932b67c6d53dde5ab814fb89cc9f6d793c18b207588e4fe2817eaab47dae9a00fd422dd5beecee30b7fc506cfdea42f3183e92777770619ad1f3e2679e24a67c0b25db08c8834890b61bd320b012a02c11d7dce3a68ba859f2b1bda29fd2c8146807c5098226678a67a0470f8178fb82c869daf623e7eccd3f81e4df1ec773211f416bcb63cc30b5aaab7f900a331ba5ca4ba899a752f837b0677c45114217ac35ebc24652e3583b848db484536463d3e3e3f779e8bda41b280673204caca0df5a91e405b3b57cd2ead58c15f9f4cd8469b5a196b149120423c8a190063fc24945911ecca64615ae9660a783540777c4dcea97fe3ee9b3b9df05c720c43804d5e90315b16a312790861e969e7ba592a43f31e9a73ebd296c56513631d4d927fb8df27d88c571e462cae53e95a6d34c4af000e25fab427cfe152da1ab33a56c2e4e8ad79ccd4077d3e2070b9ddc88cc28064281fb71808633d0bd30bf6e7e6ee4cc5ccd7d3bffaeb51fd5ba8abd5937e9792d78dfdaa1dd6e287599954bb15a1d5042ca524873426da6bdfc4e67f1cec6d30dcad0f655308487236035174a700e43ffe72fd9a89bafb0938aa4501cb443ed84ebb7923511f5a8c000a9a445995a3727b5fb2f70b03952bcca2c5dfd6972154759141bfccb23cd04c7e30e32cb70c28f96ed05b805e082a25dbf929e0460abf27a56ac2b1be642d429bbd55d61d9b9c120f2478fa5645bc520c7e1fe2ee8d60d1529e9c435d67e85bebd7e606018272523660a0607fe1d6f8d582b37d6319a31d403f0c835aa3f0b9c64495c204b16385f035613e4cf425003b7846a4aa922026d5171383428d5da08cc9bc03d6f436e1957394feb4e48cc36fd4ecbe7ab0d7e6415fb7be23033ba8a2839476a252ba6f327bcc8d2956a88e2878f8eb4725bf2ca41c2ba0e245199259a731e6dd9ecbe0693643ee5f6906a541047c76681d610e39dbb82028e517e462a8728312c4bb29e7dee09cf8995efcf92229fc851b4022de9d30c3dffbb479bd8f3d11e78c37112bcd04cb265df4ca4d21629d885bc7b194e400defb657fee77ef1aa3a4a5c7e48dd49f466a073f7688d20393145cdb14b19bfeb9acd6acee57d7482cd798aba02d8ef569720ac0aabb8a23be4d9ddc8cbe4bf2c0a3bc6cf0f8387fd712bd2a8fe7a5a0666dc0ae68ef07bc1110d35be368dfd19ddb3d51980d7ff994033bc47c3c79298c8ba477c7884623d446ca13d15580452bc419f8f0e0bc666b775ad8b072987dfeebd156240210b75826a361df6ae7a39b6e7b31c24163cfbbcf2fd338f87924a9df03b6d3702134f46742c6ea98813ea62c6a3c119b28eb6ac32ee6d27e8f90ac6221e939e2f9d5a3722641bf8f373bf01aa49c482691fcb77e80f2f851b437cbd28948e64665d2579d4adb78603dab297f1868e52090210c139993f71bc1c96281c85a3aae2e6dbada059d2a3478ba5fe17cf4835eb025bfa0f7084910cc2b990300d73ac6a8a6014fd8a34fb437ade04e2c0d3ce1ec5aa8a542573eda9eb7dbcb75964b5d19cb50c8cde148e92219c6e2d1e5d0faaa575fca9a034926440600000000000000d927e298905d162c61e821630d161ad9bd87f473ff629e6f4d2456b91d4a31f6e0c50c9a12cd739439ca851a7718ef7f1cd8a1db8a1d6998d2bc0a8a285115cb26f08f947c6d3b8808794ef055a9500cfc66363ca4429c2d250ae99e235b5e2d80f38bb92eace688e7651a9a142a9899b7f8a6adcee44324aede43d414cfc4f21f250e270e1b704a9f7ef091b6ec027206b59db6dd3520912489c84af8d21b637f80761a3ed5fc9738327fe3d79315664f96a0f2e9ffd2a7fbcc239ca5db613e4c1d58fff4016b3ac8b1b577a9b5d8f76b85fd035260def149946d853d380ae6b88005990ca4603c3c403693262a2f5ef8c7b648bc583703c5bd6ca9b572a499f0c1660a108b1c2ad8f23588c09605069a86fe8f86e7345f593980cc043aa510422f91b41ebbedc22e9ac13346db9523b78382798b0b06f36c4c88afaa5ebe90e589994f44792425a9e38f656d9131e668022de02c89ec341c0cb4126c92227a98880aae042d89bf016cd5fc6f78dca358450d83a90f684df45fbff34b87c31698a2cafdd2d1f4fa7dd481a4b47eb6678e8da03fe9507f3f056fadc3caae65271be5b8548a4d5654858bcb8f3591535a0aacebb32bdafde702fb60681db98dea0ac1bce1b179370d971671c0e5cc6d5df6cb9e4bf845b6a3069b3bfd5def1bab4e09d0d97cb29e8a1bc8acd56a5ec92bf2cb1a99912866299ebe0891cdd5599d19d2cc5373f1d1f262a73a602c1423ca5891b86f54215848c30e790cc3873fac08e95fa1df3a1fe240a7668d09e627ffb9e772e8f2f859a49dfa0f587ea3f56174805164c1742d20b94e1e6e80a40915efb0239d996abe02fe579074d074720a0e4b9abd3e43b54e1c3e6fc129876be0018cfb0a10a39cd6e45726f347a06fbd6965e01f511da3a2187979370b3b06dfee397e541a3c69c7b7885ea9f6c94adc571d221dac25d987b9545f036c1aba618d52225d96267a7c5f6e29efea93bfd44d9665195f1263e54d1d967493b55344e3b16f8bc5f59ee5ecdbeb858fa9bf8c8204f2ac67688f5621f62cf1e960622261ecc0ae0e9c43c314e313a5a885c149ab69e6586e8dc09e5b1ea1e024e23ca933b9c4b6534598cdbf8644e03c8e5270e7b191ac70c05c21f9788622c29c7eaa3105edb102bd2c6876ad2ca4c613ccdf80be817e8d523496e4d48d3682ae02ed282ac90ebcf978f3cd06000000000000d655ba3428b59497f433df510bd57a0d910cdb20a573a20e889d0b740500000000000000c5fe66cb70a68b6ccfddc42641ebdf6b2b58100feea0292496cacbeb688889c2ce3f6113aa46eecb3b27b0b3de84fe4fa69959f5936d66cb958f9453e99700278a1fe67be9356b9867c73717195a190f28c75f58440c10e2fc56ccebe7adae425cbaf01cba6d809f0446104d1a2344dcfde6a895c5cfbaf79f4f877e0819404afb65f1c94edf724937fcdfccf5971c12336c75c29abc87be99b2cd466bef9b762f8a5330e4314729ada9ec493b86fc89f1276362bc3575e411de48cdb402df6964a048473023839702903fbfab9a5812a7f37cd354ed655b0cdc4b1bc0f47d3cff8eebda9a198625e803ee978b8ec40f5681fd57a56d40a3d84b8182f7f0adba5bc455e2b5ee2b145a23ce5195817b34121fa203c580fe0910c43e38a6924fa0df5978c95e0d0ea9c89fdfba9b8c25222d8d415f6a3ababe40ad32befe79423d925ce87634032e9053006f95dfe5a111ca27f6cad30f28b239d684a17df97a6b2ccc6a77d1be441c1d0236bb256602c97ec681a7a4191776694e23686b3d40f001d66e62e924d326115ab115d12a76d77076e2503778ce5dddf6d02d625bb07b249751c2df30301a74ecf6b1f8db7a616cce703f0ccfb7d6d26c366e4d2e3264f2817d8558e9265f457400a9b974b1ed06a8635c2a44c92b1cc3daeb2891f3c6a06791d7f2f5cd8a3e48857ed585abd182985cab61def9c2b33b73d6481c3b35d0b2a2f7d02c8f033f56f5b388e4a2b078872ccc8fe292f22827024e221700088647b587d853b781b812b167626fa10c99574c57ef56e1efcd0799b51056c04dd8c12435934a8bc694bbbac3cbda9ae7b1356a70133f782a5febae7f2821ff670f30f267705f7bf78ffdfdc58d5c65a6c33cdc5918fae2dae6e8ed9f43ae28d108e0da2bed92e5529e190102ec6a8de78a5bcc02cf50f068b5a6ad9badd15201f656f2cb85a2113624140eea887c6ad94383ef96cff0122d7141d8de5ea71dd71b5cea2bad8c6ebb1ce3b95092920b304a9b17435513e0c6aeccf308c2f9bead53f771b23b9d8d0027fc90d08244a3263216292c9379b4673c0c8ff06e70fcdb5cd5c940dca807a66c9f84af5c45a62d5d34155e2c4510a1e18723aab6674d0650c0ce5df01279958267e6ade8682aa7fb031b09753eafc35d032d725ce0aba09b8532e670757cc9f3bc9e2444d56617cfd619caa3d4ed6311163db1b37994f5ac0617205f3f53d24d2d3d4301a3551286b234b8e76f698cbcce35a458dcfd44ff3c063a6627a4ab79c5a3892b68d1565e4a404466a8502500d0d8007b2fa7204372d20006fee04469253c8d814fe31c28ed21c6daae544b0da9b68ce403e796a6adfbc054130c302fa8fcfd4461709c9e9d038f44c403d7093f4b258ed3820d06b8fd00682839f2205fe2c43339d02e233547a82b0afb6af7f72af22b33bfc7be84d8095dc493295433bd87cbe9d268a9cd15d50f937fda13a20ed2dd8fa998aedbb96e4752a45515e130dc1e675553aeb41cf9a2b93d96585d520f3fdc2fca0e8dda0dff42c8ed0be28203f707b22d39f73194c56a382f046793e641800a36ca71cde9f632d72dba07c9c69655290d7cd8d3a703f2317bf9507c4d5a01acdc593c390d0c9ef0219e6d369813f9e9969c4c93f591471772b2127bb3e0ebb6a918837fd38ff26ee5e0bb94a3da15165855aee2e63f7e29402f17a465ae81b6f24d1b54922556a5e4480b6e43e849a9aad3820614bb37edf3181d4740ac6d32797d78c9f0212917a2f10b42388f1bba0d68d2bbcc505990ef98cefa8f96853bc7851600cd4a3c411f7f05e2b26e950c024bad1aa8f96ff1056a2c121c2ee9c0edc494f8c2627e4f9bbecdf3a164e9bff433c51e0f812719522208e9f3d6dc14a84b206758972fba6493e92dd453e30261e138b96e86b4a905fa9ad3f173f3e20e0302370e3dcd10a4cf8916f02ce7ad686adfcff92f07d3b8b4ddb1802de35c79cd4b36c3b97c87b4e3e0fe65b585a9a7df7546ae4bbb624e25cce09279bf9a841ccf32036b0d110a2e5037c0884603857f314d22a87c5580fb1e6d471c6f0ac25f6ccf42259350766d6c5ba60904933da482d43c018ee361b37eafc61fe58ea9e7d9bc6d3c60e266b8bca672a87dc491c3bdbd2f98724f1872c90bbd67363bfe7f3bd3c1cb319dfa15d55c7bde79a264b5a6dcdb7c9f874ec93592c6b6552cb3b0476e6fbc06a021ad672a577d9f865f8ac7233d87655659db09f28275e7f6c6ac31c68737ba1a3ab204cd1c2da70b38dd93c89263929ab25cbddb580813abc1e5ba4216331addfd38b7229eda465c8cdb19d847a2bca82447de5bf47fd6805c43244d174cd35ce99ae5bacfe883370b2eea45d87df713e01135ef3d41e450b835ba8245f113a96d31a7cfd79a2bedd37c4e64f86da33d1571c2377941937dcdf64c1b445580aa0f87c5e5039d457c879b3313d234560f4ac7eabab6a7b5e0ed79de"], 0x0) [ 316.192544] Bluetooth: hci0: command 0x1003 tx timeout [ 316.198114] Bluetooth: hci0: sending frame failed (-49) [ 316.229185] IPVS: ftp: loaded support on port[0] = 21 04:42:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000002ec0)={0x0, 0xfeed, &(0x7f00000008c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="0506000000000000000011000000040000000000000000000000"], 0x20}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x1) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x6, 0x48000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000100)={{0x97, 0x80000001, 0x80000000, 0x800, 0x6000000000000000, 0x9}, 0x1000, 0x9, 0xffffffffffffff81, 0x2, 0x23, "4b29385fed394512e7f9bf49d3d2f6cd4fbb0af22ac54f703b515dbf62c08ddb9c3c41d54eaf7c90825a8e99fb287e3a5bc65d01e4b0f5f8cd61e4a60e616639c97787534f404f8955dd41effd7ba446a68f6bdf3a6c5f430f90d2117254453a901583374e09fe99609f09e8d8f224988a8810b274e56750548941dcc0958350"}) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) [ 316.302250] Bluetooth: hci1: command 0x1003 tx timeout [ 316.322777] Bluetooth: hci1: Frame reassembly failed (-84) [ 316.496040] chnl_net:caif_netlink_parms(): no params data found [ 316.586428] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.593154] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.601722] device bridge_slave_0 entered promiscuous mode [ 316.613141] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.619759] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.628418] device bridge_slave_1 entered promiscuous mode [ 316.664620] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 316.676485] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 316.709920] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 316.718953] team0: Port device team_slave_0 added [ 316.726626] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 316.735627] team0: Port device team_slave_1 added [ 316.742559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 316.751713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 316.829262] device hsr_slave_0 entered promiscuous mode [ 316.864725] device hsr_slave_1 entered promiscuous mode [ 316.905036] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 316.913983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 316.946414] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.953036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.960217] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.966862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.059064] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 317.065486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.080117] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 317.097310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.108500] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.120518] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.133470] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 317.155938] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 317.162668] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.182416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.190804] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.197421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.245974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.254720] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.261247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.271514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.307888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.317731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.329579] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 317.339685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.348704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.358306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.367361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.377826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.411532] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 317.442312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.263369] Bluetooth: hci0: command 0x1001 tx timeout [ 318.268945] Bluetooth: hci0: sending frame failed (-49) [ 318.343676] Bluetooth: hci1: command 0x1001 tx timeout [ 318.349675] Bluetooth: hci1: Frame reassembly failed (-84) [ 320.342153] Bluetooth: hci0: command 0x1009 tx timeout [ 320.423976] Bluetooth: hci1: command 0x1009 tx timeout 04:43:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x40044591, 0x0) close(r0) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r2, 0x9}, 0x8) 04:43:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x30000) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x51, 0x0, 0x9, {0x364, 0x4e1}, {0x5, 0x101}, @ramp={0x800, 0x3f, {0x0, 0x5, 0x1000, 0x800}}}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bondxrl \xbf\xf1\xdc\x9c,\x96R~', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_delneigh={0x24, 0x1d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@NDA_DST_IPV4={0x8}]}, 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 04:43:06 executing program 2: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={r2, 0x7}, 0x8) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x3, 0xa, 0x8001) semget(0xffffffffffffffff, 0x0, 0x0) ptrace(0x11, r0) 04:43:06 executing program 3: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, [0x2, 0x8d, 0xefb, 0x6, 0x3, 0xcf3, 0x3, 0x741, 0x40, 0x9, 0x80, 0x0, 0xd3d2, 0x80000000, 0x8]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0x7, @remote, 0x8}}, 0x2, 0x7, 0x5, 0x3, 0x88}, &(0x7f0000000240)=0x98) setsockopt$inet_dccp_int(r0, 0x21, 0x1, &(0x7f0000000280)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth0_to_bond\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="fb74d7d651e5ca54b10303efa0ca8f04a25a3fa960297a11d1b1601c81a8944cf5c8e76c682cf7ecd8ec6da04ceecffc4d5f7528ebd120f4230d65a926cec325e47627162c16e5aff1671e972343b34272ca85e647719d15f2279ced6ca1940ac19f7919b4e1243f2cf0b5e9c8a10e9c", 0x70, 0x4, &(0x7f0000000500)={0x11, 0xfd, r3, 0x1, 0x6, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r2, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dsp\x00', 0x400, 0x0) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000640)={0x9, 0x9}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$TIOCSTI(r4, 0x5412, 0x610) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000700)="3aa4de9982e76f2d605a26fe728667e91577d8718efbcfbe06b6a1ed4baac590", 0x20, r0}, 0x68) sendto$packet(r4, &(0x7f00000007c0)="fd663c20a084b40bd47a7111f11d91f24af20d9da93be239a25bdaae3a412eecd2b8a26e004a3350ffcb0c5e1638c11dfd5926392a2eb7844caeb89f4af0f785b544ccaff40106b291f0aeecf22e1be21902fc2dc5eb84c12b831f8e0140677779f01fa2d2bc05edae0f5a8fa0178976c63eac081458bf335ccea2706109d76c7755bc2f6e58d68c3ad0f471ccde44daa29f9bb29832217953d27205e80d5bea0677e8799238e2f5afc268e54aebfd195df5c472f77d00a1ee57974e89342a0c5866c12a2bd152f88de49d623857feb0b7b5eda6df06b4a0444a7aac", 0xdc, 0x4000000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000008c0)=[@mss={0x2, 0x101}, @window={0x3, 0x2, 0x10000}, @window={0x3, 0x4, 0xdcd}], 0x3) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000900)={0x3c7, 0x0, [], {0x0, @reserved}}) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x2) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000009c0)={0x8000, 0x1000, 0xffffffffffffffff, 0x1000, 0x1f, 0xc2}) r5 = accept4(r0, &(0x7f0000000a00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000a80)=0x80, 0x80800) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b00)={&(0x7f0000000ac0)='./file0\x00', r4}, 0x10) write$FUSE_OPEN(r4, &(0x7f0000000b40)={0x20, 0xffffffffffffffda, 0x8, {0x0, 0x1}}, 0x20) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) getxattr(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)=@random={'user.', '/dev/vga_arbiter\x00'}, &(0x7f0000000c40)=""/9, 0x9) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000c80)=""/147) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000d40)=0xffffffffffffe836) sendto$isdn(r0, &(0x7f0000000d80)={0x9, 0x3b, "c0408b35b1c443f55c1275b5c41b45046678416fe4dca06564388f99659d5424964eb0d03e7ebabc0fbceb28bc7ca7aecf3f4c89d1e98dfd00a9d1404f524cb39cc45942a90448c6df548cd6df49bf4a27b143875850fb17a0218e96689d9748a4fafc50acca941930c2cdd40768"}, 0x76, 0x4000000, &(0x7f0000000e00)={0x22, 0xfffffffffffff001, 0x4}, 0x6) setsockopt$packet_int(r4, 0x107, 0x1f, &(0x7f0000000e40)=0x3, 0x4) recvfrom(r6, &(0x7f0000000e80)=""/53, 0x35, 0x0, &(0x7f0000000ec0)=@llc={0x1a, 0x308, 0x400, 0x2, 0xfffffffffffffff9, 0xc, @local}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000f40)={0xd7, 0x6, 0x3f, 'queue1\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000001000)={{0x0, 0x3}, {0x81, 0x32}, 0x38fd6733, 0x0, 0x4}) 04:43:06 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xd5e, 0x200000) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x0, 0x8, 0x6, 0x2, 0x8, 0x4, 0x10000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xa001, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x100000001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r2, 0x100000001, 0x8}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@local, @ipv4={[], [], @multicast1}, @dev={0xfe, 0x80, [], 0x14}, 0x8, 0x9, 0xfffffffffffffffe, 0x100, 0x7, 0x40010, r3}) r4 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000780)={0x0, 0xfffffffffffffffd, 0x64, 0x8, @buffer={0x0, 0xf0, &(0x7f00000004c0)=""/240}, &(0x7f00000005c0)="f88198e270f1e3ef23f67b5e87f0f0be2fa588ae2e9498a94d61f4ea8d32047ae7aa7dc19c04c0fed863f0af59f8a5d070c8758a2828305b7c7d46219c6d71171532393c9ece6446b81c8c868e5ac7096bc234b8c3d5e0610ba93488f4cbce01ec8dcdce", &(0x7f0000000640)=""/195, 0x0, 0x0, 0x1, &(0x7f0000000740)}) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000800)=@srh={0x73, 0x6, 0x4, 0x3, 0x101, 0x20, 0x8, [@empty, @mcast2, @remote]}, 0x38) fsetxattr$security_ima(r4, &(0x7f0000000840)='security.ima\x00', &(0x7f0000000880)=@v1={0x2, "b58c43740b8ae1fd1c32391f1a6f9f134c75"}, 0x13, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f00000008c0)={{0x5, 0xffff}, 'port0\x00', 0xb1a8114e35a7a04d, 0x2, 0x5195d604000000, 0x5, 0x96, 0xfffffffffffff001, 0x8c, 0x0, 0x4, 0x7fff}) readv(r1, &(0x7f0000001e80)=[{&(0x7f0000000980)=""/174, 0xae}, {&(0x7f0000000a40)=""/50, 0x32}, {&(0x7f0000000a80)=""/161, 0xa1}, {&(0x7f0000000b40)=""/130, 0x82}, {&(0x7f0000000c00)=""/10, 0xa}, {&(0x7f0000000c40)=""/214, 0xd6}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/175, 0xaf}, {&(0x7f0000001e00)=""/113, 0x71}], 0x9) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/audio\x00', 0x8000, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000001f80)={0x5eaf, "2fcf33f122aa08a02cdefa856f5f88aa91bc681a7d8e39fe2257b79aef644779", 0x5, 0x4, 0x6, 0xfffffffffffffffa, 0x1, 0x4, 0x4, 0x8af}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000002000)="a276be434fa7a411716631a594d8edca9ddc75c44debedbf230930da6a58f2c9bc78f359adf37d58218935143596ddfa029f3bfdad384f18c32162dc6573fd37c4698bcd4c22708428ddd4275e1600b30f57d1c0b76d75ebce6c8bcfc6e4f02597ed4fb1e05576a3c3007940e856a9bf11b61f5b6917f46587338a489751dd40cc53", 0x82) ioctl$KDADDIO(r4, 0x4b34, 0x2) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f00000020c0)={0x6}) write$cgroup_type(r1, &(0x7f0000002100)='threaded\x00', 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000002140), &(0x7f0000002180)=0xc) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x3c, r6, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8010) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000002480)={&(0x7f0000002300), 0xc, &(0x7f0000002440)={&(0x7f0000002340)={0xf8, r6, 0x108, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x89}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3e00000000}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf4c}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcd0}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f00000024c0)={0x2, 0x0, 0x1010, 0x8000, 0x75f, {0x1f, 0x6b6704a6}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000002500)={@ipv4={[], [], @empty}, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9, 0x4, 0x3, 0x100, 0xf2, 0x20000, r3}) openat$cgroup_subtree(r5, &(0x7f0000002580)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 04:43:07 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4001) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240), 0x90) close(r2) close(r3) 04:43:07 executing program 2: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="e83aceb3ea7679c9d9c7c4fb039c970e3aa892ce4f9b87231381b21a210a48a1f4aeee453061ee636bc5eda9503e80", 0x2f, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0xffffffff80000000, 0x100) write$P9_RLERROR(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000033b6019d00"], 0x9) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x10000, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000100)={@loopback}, &(0x7f0000000140)=0x14) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 04:43:07 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x420000, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x7, 0x6}, 0x2) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0xf732, 0x3, 0x1, 0x200}, 0x8) 04:43:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3a503e3db, 0x1, 0xffffffffffffffff}) r3 = getpgid(0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x800, 0x0) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0x80) ptrace$poke(0xffffffffffffffff, r3, &(0x7f0000000080), 0x8001) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) [ 325.551008] ion_buffer_destroy: buffer still mapped in the kernel 04:43:07 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x2, 0x1) fchdir(r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60000020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040894) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000200)={0x4, {0x9, 0x0, 0x6, 0xffff}, {0x79, 0x800, 0x1, 0x3}, {0x3, 0x5}}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x800, 0x7fffffff, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ftruncate(r0, 0x2) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000340)=""/107, &(0x7f00000003c0)=0x6b) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000440)={0x2}, 0x4) lseek(r0, 0x0, 0x2) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="ad2af7d7c0347d210a08e584f07cd287131c0089c68d5bf74a2b065ccf85cb19313db3d3f415e29d48676a04c10aafa45a37ed19aa5b23cbd941bf1b4156907cc9c506ed9278274a5307847021fce6fa02b9a87bfb87fca2323bc7acd0501d42b8362e81a08afb1ca833efa984bbed87a8972a6e62eb0408b384bfc29735ff823bcf0106cdc7d90eb9d2cd7801d48acb6d06590ef96617e91ab7df838db08c89662527f84b", 0xa5, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000640)='encrypted\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="8e3692abe8dfedf11791207d6ea277dcc2bbb333c2e2c51867ca012c5a072a4f353028c85e292e1aa914bf9793a855e3a6f8be643885f812f684c0abdba616b6eecf026ef8a612cf598ea434cdf8c67fd224569512531975bc791f11a9bbccb8841e07a0731950f662914618fd426b5b5808a34e57ef486484eca07b6179bd8516235b0e4f430ac92e851913b6c2fdeab0525c66", 0x94, 0x0) keyctl$search(0xa, r2, &(0x7f00000005c0)='blacklist\x00', &(0x7f0000000600)={'syz', 0x0}, r3) add_key(&(0x7f0000000780)='id_legacy\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)="87d802b5708eac299ed08c03858686ca49e3d29e0e3b25039bb8a63611efaa2de36d8363e1f370278dcf8aaad47cd9075573189504586781d0648fb84f07f287119e03b39e82668aa65f7836ee2e4e95770362d66ea5b8e0049af8c35f9fa176f1b1492110c6b5041a26c0d5d731109800e1e3698362505cd08fee382ab0e707cf659e6deb927e6e", 0x88, r3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vsock\x00', 0x20000, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000940)={0x0, &(0x7f0000000900)}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000980)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000009c0)={r5, 0x80000, r4}) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000a00)={0x3, {0x1, 0x20, 0x1, 0x6}, {0x5, 0x80, 0x4, 0xf7d8}, {0x3}}) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000a40)) write$P9_RWALK(r0, &(0x7f0000000a80)={0x4a, 0x6f, 0x2, {0x5, [{0xa8, 0x2, 0x7}, {0x80, 0x1, 0x3}, {0xbd, 0x2, 0x6}, {0x20, 0x2, 0x6}, {0x4, 0x0, 0x2}]}}, 0x4a) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000b40)={0x0, 0x43f5, 0x1, [], &(0x7f0000000b00)=0x80000000}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000b80)={0x0, 0x100000001, 0x30, 0x5, 0x5}, &(0x7f0000000bc0)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000c00)={r7, 0x5, 0x1, [0x7fff]}, &(0x7f0000000c40)=0xa) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000c80)=""/130) 04:43:07 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") unshare(0x60000000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x3}], 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 04:43:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x0) sendto(r1, &(0x7f0000000000)="bbc40ab393cb622870148853f7a7e6eb6f0169f05665f44f6b", 0x19, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/101, 0x640}], 0x1}}], 0x600, 0x0, 0x0) [ 325.842529] IPVS: ftp: loaded support on port[0] = 21 [ 326.088983] IPVS: ftp: loaded support on port[0] = 21 04:43:08 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) getsockname(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, 0x0, 0x0}, 0x78) [ 326.113351] IPv6: ÿÿÿÿ: Disabled Multicast RS [ 326.118819] IPVS: ftp: loaded support on port[0] = 21 [ 326.150986] IPVS: ftp: loaded support on port[0] = 21 04:43:08 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x7c0, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#! ./file0 #! \n'], 0xf) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) execveat(r1, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001000) 04:43:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) [ 326.661106] chnl_net:caif_netlink_parms(): no params data found [ 326.752583] chnl_net:caif_netlink_parms(): no params data found [ 326.913305] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.919877] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.928405] device bridge_slave_0 entered promiscuous mode [ 326.986907] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.993635] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.002413] device bridge_slave_1 entered promiscuous mode [ 327.064810] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.071349] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.080335] device bridge_slave_0 entered promiscuous mode [ 327.126493] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.130270] IPVS: ftp: loaded support on port[0] = 21 [ 327.133093] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.146732] device bridge_slave_1 entered promiscuous mode [ 327.175438] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 327.204233] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 327.218670] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 327.234366] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 327.308386] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 327.317378] team0: Port device team_slave_0 added [ 327.328075] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 327.336918] team0: Port device team_slave_0 added [ 327.348240] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 327.357214] team0: Port device team_slave_1 added [ 327.368690] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 327.377554] team0: Port device team_slave_1 added [ 327.389481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 327.405281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 327.413959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 327.422776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 327.547190] device hsr_slave_0 entered promiscuous mode [ 327.602807] device hsr_slave_1 entered promiscuous mode [ 327.643628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 327.651537] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 327.707677] device hsr_slave_0 entered promiscuous mode [ 327.792768] device hsr_slave_1 entered promiscuous mode [ 327.916667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 327.929087] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 327.946043] chnl_net:caif_netlink_parms(): no params data found [ 327.980868] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 328.050458] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 328.113625] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.120190] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.128946] device bridge_slave_0 entered promiscuous mode [ 328.147866] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.154485] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.162445] device bridge_slave_1 entered promiscuous mode [ 328.243491] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 328.275733] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 328.324498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.355652] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 328.369295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.387103] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 328.396232] team0: Port device team_slave_0 added [ 328.408699] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 328.421331] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 328.435122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.443266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.457297] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 328.464431] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 328.474384] team0: Port device team_slave_1 added [ 328.490948] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 328.497244] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.507522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.515604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.531507] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 328.538263] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.545636] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 328.567126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 328.575125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 328.595214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.604268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.613358] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.619897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.640695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.658760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 328.668380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.677420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.685967] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.692527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.703630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 328.710782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.720094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.728502] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.735035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.748846] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 328.763648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.771853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.796151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 328.809240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 328.819964] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 328.876135] device hsr_slave_0 entered promiscuous mode [ 328.922803] device hsr_slave_1 entered promiscuous mode [ 328.967975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 328.975373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.985010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.994609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.003192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.011476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.019808] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.026263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.034121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.042979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.053331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.065487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 329.073415] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 329.080151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.099689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 329.109971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 329.118562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.128545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.137119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.146984] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 329.160743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 329.175064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 329.188338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 329.199832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.212698] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 329.218876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.234287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.243725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.252770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.261330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.269844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.279124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.302788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 329.310064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.319016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.327174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.343841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 329.351012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.360057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.376161] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 329.391576] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 329.399470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.439342] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 329.470730] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 329.516302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.533147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.615115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.629146] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 329.658782] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 329.666906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.674917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.693340] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 329.699452] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.747450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 329.754873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.763708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.772192] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.778683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.828099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 329.852463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.860668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.869780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.878196] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.884752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.902113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 329.909578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.933851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 329.941024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.968100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 329.977532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.988470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.010300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 330.020455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.031262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.040329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.064693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 330.073190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.081575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 04:43:12 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000052007f4512fe01b2a4a280930a06000000a84306910000000b00140035000c000600000019001540020000003649609b1338d53300009b84136ef75afb83de4411001600c43ab8220000060cec4faba7d4", 0x55}], 0x1}, 0x0) 04:43:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:12 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'sit0\x00\x00\x02\x00'}) recvmmsg(r0, &(0x7f0000001900)=[{{&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=""/30, 0x1e}, 0x6605}], 0x1, 0x100, &(0x7f0000001940)={0x77359400}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000001980)={{0x2, 0x4e23, @multicast1}, {0x6}, 0x6e, {0x2, 0x4e20, @multicast1}, 'team0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000004c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\xfe', 0x141}) r2 = accept4(r0, &(0x7f0000000040)=@ipx, &(0x7f0000000240)=0x80, 0x807fd) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) 04:43:12 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") unshare(0x60000000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x3}], 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 04:43:12 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, 0x0) eventfd2(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001280)='/dev/ptmx\x00', 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000004cc0)) [ 330.114641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 330.125238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.133786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.156853] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 330.163732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.239252] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 330.286437] IPVS: ftp: loaded support on port[0] = 21 [ 330.302663] 8021q: adding VLAN 0 to HW filter on device batadv0 04:43:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r4+30000000}}, 0x0) readv(r2, &(0x7f000058c000)=[{&(0x7f0000000240)=""/151, 0x7ffff000}], 0x10000000000001f4) dup3(r1, r2, 0x0) tkill(r3, 0x1000000000014) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 330.882588] device sit0 entered promiscuous mode [ 331.210457] device sit0 left promiscuous mode [ 331.526182] device sit0 entered promiscuous mode [ 331.704085] Unknown ioctl -1072929747 [ 331.710463] Unknown ioctl -1070836166 [ 331.715464] Unknown ioctl 21505 [ 331.719841] Unknown ioctl -2143271671 [ 331.753311] Unknown ioctl -1072929747 [ 331.770785] Unknown ioctl -1070836166 [ 331.788566] Unknown ioctl 21505 04:43:13 executing program 5: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 04:43:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:13 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$unix(r0, &(0x7f0000005c40)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001740)="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", 0x1000}], 0x1}], 0x1, 0x4000000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000077000/0x3000)=nil, 0x3000, 0xff0f}, &(0x7f00000000c0)=0x10) 04:43:13 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") unshare(0x60000000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x3}], 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 04:43:13 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) close(r0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 332.047343] IPVS: ftp: loaded support on port[0] = 21 [ 332.069510] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:43:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") sendmmsg(r0, &(0x7f0000007200)=[{{&(0x7f00000002c0)=@rc, 0x80, 0x0}}], 0x1, 0x20000000) write$P9_RFSYNC(r1, 0x0, 0x0) 04:43:14 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800210a00000000000000000a00000000000000000000001400050000000000000000000000000100000000"], 0x1}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x924924924924c81, 0x0) 04:43:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0), 0x0) 04:43:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") sendmmsg(r0, &(0x7f0000007200)=[{{&(0x7f00000002c0)=@rc, 0x80, 0x0}}], 0x1, 0x20000000) write$P9_RFSYNC(r1, 0x0, 0x0) [ 332.952030] hrtimer: interrupt took 203862 ns 04:43:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 04:43:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0), 0x0) 04:43:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 04:43:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:16 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mount(&(0x7f0000000180)=ANY=[@ANYBLOB="5b643a3a9e5e696b5a8ca10fc53a623a"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x20000, 0x0) tkill(r0, 0x34) wait4(0x0, 0x0, 0x0, 0x0) 04:43:19 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") unshare(0x60000000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x3}], 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 04:43:19 executing program 1: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x40c2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x666f) 04:43:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) 04:43:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r1, 0x21, 0x0, 0x0, {{}, 0x0, 0x3, 0x0, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0) 04:43:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 337.624084] IPVS: ftp: loaded support on port[0] = 21 04:43:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:19 executing program 1: recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x800000000080000, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006386dd0f"], 0x5) 04:43:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in, @in=@local={0xac, 0x14, 0x7ffff}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 04:43:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) sendto(r1, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/124, 0xffffffd6, 0x0, &(0x7f0000001680)=@nfc, 0x93019b) [ 338.126594] device nr0 entered promiscuous mode 04:43:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000180)=""/162, &(0x7f0000000240)=0x8) 04:43:20 executing program 4: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:20 executing program 5: clone(0xa0101, 0x0, 0x0, 0x0, 0x0) 04:43:20 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x88001) 04:43:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x8}]}, 0x0, 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 04:43:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 04:43:21 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0xbbb8820c) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffc98, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getegid() prctl$PR_GET_SECUREBITS(0x1b) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) 04:43:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close(r0) 04:43:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1}]}) 04:43:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:21 executing program 4: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x7c0, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) execveat(r1, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x800000001000) 04:43:21 executing program 3: syz_execute_func(&(0x7f0000000180)="3666440f50f564ff0941c3c48ee2c997584242c27d794e0066420fe2e33e251110c2664bd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000dc0)='./file0\x00', 0x841, 0x0) clone(0x3102101ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0x4b64, 0x0) 04:43:21 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x5, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) 04:43:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp], 0x20000726) syz_execute_func(&(0x7f0000000180)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x162) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 340.182856] protocol 88fb is buggy, dev hsr_slave_0 [ 340.188587] protocol 88fb is buggy, dev hsr_slave_1 04:43:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, 0x0}}], 0x1, 0x40000060, 0x0) 04:43:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:22 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000010000000000000000000e00000004000000480300002801000000000000280100003401"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:43:22 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="5b643a3a9e5e696b5a8ca10fc53a623a00"], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x101000, 0x0) tkill(r0, 0x34) wait4(0x0, 0x0, 0x0, 0x0) [ 340.689922] ptrace attach of "/root/syz-executor.5"[11094] was attempted by "/root/syz-executor.5"[11095] 04:43:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000001, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x84) socket$packet(0x11, 0x2, 0x300) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 04:43:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:22 executing program 5: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:23 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x80000000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r0, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r0, &(0x7f0000000200), 0x1000) 04:43:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfffffffffffffff8}]}) 04:43:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:23 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000240)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0xefff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000380)="0f0766b818008ed80f20e035000040000f22e00faea66647000066ba2000b801000000efc4c13565d4b805000000b9f4ce05c80f01d9670f01750c66b8e3000f00d8c4c2e99626", 0x47}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) pipe(0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x80000000, 0xffffffffffffff01, 0x7, 0x9, 0x1}) 04:43:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:24 executing program 5: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) 04:43:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0xfffffece) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') socketpair$unix(0x1, 0x40000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 04:43:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:26 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x2) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000001000002, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x80001000005008, 0x0) 04:43:26 executing program 4: creat(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) pipe(0x0) connect(0xffffffffffffffff, 0x0, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x2, 0x0, 0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) clock_gettime(0x0, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) tkill(0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 04:43:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000001c0)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 04:43:26 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) symlink(0x0, 0x0) stat(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 04:43:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:43:26 executing program 0: timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, 0x0) 04:43:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000400)={'syz'}, 0x0, 0xfffffffffffffffe) 04:43:26 executing program 0: unshare(0x6c060000) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0xc0000080805, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) 04:43:26 executing program 3: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$SHM_UNLOCK(0x0, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x6000000, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 04:43:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 344.594970] IPVS: ftp: loaded support on port[0] = 21 04:43:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x8000000000d}, 0x10) 04:43:26 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 04:43:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000040)={0x2, 0xb, 0x0, 0x4, 0x2, 0x2000000}, 0x10}}, 0x0) 04:43:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:43:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000180)) 04:43:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r2, &(0x7f00000003c0)="bbc40ab393cb622870148853f7a7e6eb6f0169f05665f44f6b354c04c63cd5d0", 0x20, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/101, 0x640}], 0x1}}], 0x600, 0x0, 0x0) 04:43:27 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x20900, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) inotify_add_watch(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000340)={0x5, 0x3, 0x5, 0x1, 0x4}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000140)) 04:43:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) 04:43:28 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 04:43:28 executing program 0: 04:43:28 executing program 1: 04:43:28 executing program 4: 04:43:28 executing program 3: 04:43:28 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 04:43:28 executing program 1: 04:43:28 executing program 5: 04:43:28 executing program 0: 04:43:28 executing program 4: 04:43:28 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 04:43:28 executing program 1: 04:43:29 executing program 5: 04:43:29 executing program 3: 04:43:29 executing program 0: 04:43:29 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:43:29 executing program 4: 04:43:29 executing program 1: 04:43:29 executing program 3: 04:43:29 executing program 5: 04:43:29 executing program 0: 04:43:29 executing program 4: 04:43:29 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:43:29 executing program 5: 04:43:29 executing program 1: 04:43:30 executing program 3: 04:43:30 executing program 0: 04:43:30 executing program 4: 04:43:30 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:43:30 executing program 1: 04:43:30 executing program 3: 04:43:30 executing program 5: 04:43:30 executing program 0: 04:43:30 executing program 4: 04:43:30 executing program 1: 04:43:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:30 executing program 5: 04:43:30 executing program 3: 04:43:31 executing program 0: 04:43:31 executing program 4: 04:43:31 executing program 1: 04:43:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:31 executing program 5: 04:43:31 executing program 0: 04:43:31 executing program 4: 04:43:31 executing program 1: 04:43:31 executing program 0: 04:43:31 executing program 3: 04:43:31 executing program 4: 04:43:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:32 executing program 5: 04:43:32 executing program 1: 04:43:32 executing program 0: 04:43:32 executing program 4: 04:43:32 executing program 3: 04:43:32 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:43:32 executing program 5: 04:43:32 executing program 1: 04:43:32 executing program 4: 04:43:32 executing program 0: 04:43:32 executing program 3: 04:43:32 executing program 5: 04:43:32 executing program 4: 04:43:32 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:43:33 executing program 1: 04:43:33 executing program 0: 04:43:33 executing program 4: 04:43:33 executing program 5: 04:43:33 executing program 3: 04:43:33 executing program 1: 04:43:33 executing program 4: 04:43:33 executing program 0: 04:43:33 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:43:33 executing program 3: 04:43:33 executing program 0: 04:43:33 executing program 4: 04:43:33 executing program 5: 04:43:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:33 executing program 1: 04:43:34 executing program 3: 04:43:34 executing program 0: 04:43:34 executing program 4: 04:43:34 executing program 5: 04:43:34 executing program 1: 04:43:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:34 executing program 0: 04:43:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setfsgid(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) chdir(&(0x7f0000000340)='./file0\x00') 04:43:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000019c0)={0x20}, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x4) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team0\x00'}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x6}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={r3, 0x6}, &(0x7f0000000400)=0x8) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000280), 0x4) geteuid() sendmsg$nl_generic(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x29, 0x800, 0x70bd25, 0x25dfdbfd, {0x1a}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x800, 0x8000, 0x7}) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xe09, 0x36, 0x1ff, 0x0, 0x3, 0x3f, 0x3, 0x204, 0x38, 0x120, 0x3, 0x7fffffff, 0x20, 0x2, 0x2, 0x4, 0x2}, [{0x5, 0x100000000, 0x401, 0x7, 0x9dd3, 0x7f, 0x6, 0x1f}], "54f62506c29ce33fd9c4717c4697709c87ec9208caa2d0710a4f30b0cbadf2c8f27ea7b88ccf1bec450aecb3702f66673adedf1be26b02a5bd6d5cf2b572cd8a35ecf3ab91270e1a3f8eafdd64226a04ceade51482620fa531569e9d706813df49eaa5d2ef31d40737", [[], [], [], [], [], [], [], [], []]}, 0x9c1) fcntl$dupfd(r1, 0x0, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) 04:43:34 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev}, 0x0) 04:43:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0xfffffffffffffffd, 0xff90) 04:43:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x10000080800) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) fstatfs(0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 04:43:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 352.979839] IPVS: ftp: loaded support on port[0] = 21 [ 352.982810] protocol 88fb is buggy, dev hsr_slave_0 [ 352.990841] protocol 88fb is buggy, dev hsr_slave_1 [ 352.997939] protocol 88fb is buggy, dev hsr_slave_0 [ 353.003648] protocol 88fb is buggy, dev hsr_slave_1 04:43:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x4000)=nil, 0x4000, 0x0, 0x10000031, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x33, &(0x7f0000abaff9)={0x3, 0xfff}, 0x10) 04:43:35 executing program 1: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4f, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) 04:43:35 executing program 5: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x2) 04:43:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 353.405377] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) [ 353.538528] IPVS: ftp: loaded support on port[0] = 21 04:43:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000d80)='./file0\x00', 0x0) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000080)) r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000015) 04:43:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") sendmmsg(r0, &(0x7f0000007200)=[{{&(0x7f00000002c0)=@rc, 0x80, 0x0}}], 0x1, 0x20000000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 04:43:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 04:43:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000019c0)={0x20}, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x4) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$int_in(r0, 0x800000c0045005, 0x0) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team0\x00'}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x6}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={r3, 0x6}, &(0x7f0000000400)=0x8) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000280), 0x4) geteuid() sendmsg$nl_generic(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x29, 0x800, 0x70bd25, 0x25dfdbfd, {0x1a}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000040)={0x8875, 0x800, 0x8000, 0x7}) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xe09, 0x36, 0x1ff, 0x0, 0x3, 0x3f, 0x3, 0x204, 0x38, 0x120, 0x3, 0x7fffffff, 0x20, 0x2, 0x2, 0x4, 0x2}, [{0x5, 0x100000000, 0x401, 0x7, 0x9dd3, 0x7f, 0x6, 0x1f}], "54f62506c29ce33fd9c4717c4697709c87ec9208caa2d0710a4f30b0cbadf2c8f27ea7b88ccf1bec450aecb3702f66673adedf1be26b02a5bd6d5cf2b572cd8a35ecf3ab91270e1a3f8eafdd64226a04ceade51482620fa531569e9d706813df49eaa5d2ef31d40737", [[], [], [], [], [], [], [], [], []]}, 0x9c1) fcntl$dupfd(r1, 0x0, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf7fffffffffffffd, 0x2012, r2, 0x0) unshare(0x40000000) 04:43:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:36 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fstatfs(r2, &(0x7f0000000280)=""/4096) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 04:43:36 executing program 4: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x14a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:43:36 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:43:36 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x7fe000000000, 0xfffffffffffffffe, 0x4a0a}) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffef4, &(0x7f0000000140)=0x40000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000241, 0x0) 04:43:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) [ 354.587666] ptrace attach of "/root/syz-executor.4"[11503] was attempted by "/root/syz-executor.4"[11506] [ 354.800358] IPVS: ftp: loaded support on port[0] = 21 04:43:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 04:43:37 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:43:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000080)={0x1, 0x0, [{0x1}]}) 04:43:37 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000), 0x10) [ 355.226388] binder: BINDER_SET_CONTEXT_MGR already set [ 355.231849] binder: 11525:11530 ioctl 40046207 0 returned -16 04:43:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) sendmmsg(r0, 0x0, 0x0, 0x800) r1 = accept4(r0, 0x0, 0x0, 0x10000080800) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) 04:43:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 04:43:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8800, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x25d, 0x0, 0x0, 0x0) 04:43:37 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:43:37 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") write$UHID_DESTROY(r0, &(0x7f0000000200), 0x1a7) [ 355.883057] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 355.890027] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 355.897007] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 355.903890] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 355.910701] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 355.917687] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 355.924588] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 355.931415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 355.938344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 355.945266] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 355.952219] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 04:43:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x20000800003, 0x8012, r0, 0x0) 04:43:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x20000800003, 0x8012, r0, 0x0) 04:43:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) [ 356.349637] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 04:43:38 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:43:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:43:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:38 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}, @icmp=@address_reply}}}}, 0x0) [ 356.703873] binder: 11583 RLIMIT_NICE not set [ 356.708544] binder: 11583 RLIMIT_NICE not set 04:43:38 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0xbbb8820c) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffc98, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getegid() fdatasync(r2) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000040)={{0x2e, @initdev={0xac, 0x1e, 0x1}, 0x4e21, 0x3, 'ovf\x00', 0x0, 0x80000000, 0x76}, {@remote, 0x4e23, 0x3, 0x1, 0xc4e9, 0xfffffffffffffffa}}, 0x44) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) [ 356.806253] binder: 11582:11585 got reply transaction with no transaction stack [ 356.814199] binder: 11582:11585 transaction failed 29201/-71, size 0-0 line 2801 [ 356.954410] binder_alloc: binder_alloc_mmap_handler: 11582 20001000-20004000 already mapped failed -16 [ 357.024887] binder: BINDER_SET_CONTEXT_MGR already set [ 357.030824] binder: 11582:11583 ioctl 40046207 0 returned -16 [ 357.057732] binder_alloc: 11582: binder_alloc_buf, no vma [ 357.063720] binder: 11582:11598 transaction failed 29189/-3, size 0-0 line 3035 [ 357.103413] binder: 11585 RLIMIT_NICE not set [ 357.104556] binder: 11582:11599 got reply transaction with no transaction stack [ 357.115773] binder: 11582:11599 transaction failed 29201/-71, size 0-0 line 2801 04:43:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 357.152213] binder: release 11582:11583 transaction 3 out, still active [ 357.159116] binder: undelivered TRANSACTION_COMPLETE [ 357.164468] binder: undelivered TRANSACTION_ERROR: 29201 [ 357.191154] binder: undelivered TRANSACTION_ERROR: 29189 [ 357.196934] binder: undelivered TRANSACTION_ERROR: 29201 04:43:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000301ffff00000000000000000000000008001500000000000800080076366f60"], 0x24}}, 0x0) [ 357.202576] binder: release 11582:11583 transaction 3 in, still active [ 357.209281] binder: send failed reply for transaction 3, target dead 04:43:39 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xcc78dcb0005829d2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x4, 0x0, &(0x7f0000000300)={0x0, {}, 0x0, 0x0}, 0x0, 0x0) 04:43:39 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:43:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) gettid() r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006386dd0f"], 0x5) 04:43:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:39 executing program 3: clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c344ee9dc01497f542f542b0796e0266420fe2e33edb11aa6114f241d1e7d3196f") setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x3f553e5) link(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='./file1\x00') lstat(&(0x7f00000005c0)='./file2\x00', 0x0) [ 357.834771] binder: 11620 RLIMIT_NICE not set [ 357.839484] binder: 11620 RLIMIT_NICE not set [ 357.935372] binder: 11619:11620 got reply transaction with bad transaction stack, transaction 8 has target 11619:11620 [ 357.946508] binder: 11619:11620 transaction failed 29201/-71, size 0-0 line 2816 04:43:40 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x1) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 357.997265] device nr0 entered promiscuous mode 04:43:40 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) [ 358.094632] binder: release 11619:11620 transaction 8 out, still active [ 358.101476] binder: undelivered TRANSACTION_COMPLETE [ 358.106793] binder: undelivered TRANSACTION_ERROR: 29201 04:43:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x448) r1 = gettid() ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0xda28c3dbba77cfd9, &(0x7f0000000000)={@mcast2}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prlimit64(r1, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000016) [ 358.323675] binder: release 11619:11620 transaction 8 in, still active [ 358.330608] binder: send failed reply for transaction 8, target dead 04:43:40 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x1) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) setsockopt$inet6_mreq(r0, 0x29, 0x400000000001b, &(0x7f0000000000)={@remote}, 0x14) 04:43:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000001880)=""/196, 0x7}) 04:43:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x0, @time={0x77359400}}) 04:43:41 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x1) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 04:43:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') 04:43:41 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8012, r0, 0x0) 04:43:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 04:43:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:41 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x8f4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) 04:43:41 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) 04:43:42 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$unix(r0, &(0x7f0000005c40)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001740)="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", 0x1000}], 0x1}], 0x1, 0x4000000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000077000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) 04:43:42 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 360.182426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:43:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:42 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000003c0)=""/34) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) 04:43:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() syz_execute_func(&(0x7f0000000d40)="3666440f50f564ff0941c30f0f441e04a4c4c27d794e0066420fe2e33e0f1110c442019dcc6f") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) mkdir(&(0x7f0000000d80)='./file0\x00', 0x0) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000080)) r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) tkill(r2, 0x1000000000015) 04:43:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 04:43:42 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:42 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000010005, 0x0) 04:43:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000000000b, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000029ca2c5068c6c6810000000095"], 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="a7ad5699603372a3dbadf3e39e7a", 0x0, 0xa09c}, 0x28) 04:43:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) 04:43:43 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00\x86o\x9br\xcc&p:4\x96\x1dn\x17B\x00\xbccT\x8c\f2b\xd8\x80\xf8\x19\tq>\x8e\xb4\xc8\x7f\x00\x00\x00cU)\xae\x8f0xffffffffffffffff}) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000060, 0x0) 04:43:43 executing program 1: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x14a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:43:43 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000200), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = memfd_create(&(0x7f0000000000)='\x00\'\x00\fZ\x04P\xa3/\xcd\xefe\x9c\x15`\xad\xd9\xcd\xa2\x00\x00\x00\x00\x00\x00\x00i\x89l\xd7n-\xc9``\xe4\xae\\=\xe3\v\'X<\xc1|\x86\xe1', 0x0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="cc", 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/165, 0xffffff08) [ 362.115494] ptrace attach of "/root/syz-executor.1"[11798] was attempted by "/root/syz-executor.1"[11799] 04:43:44 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000180)) 04:43:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 04:43:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x20000007, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000016c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc018aec0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x713000, &(0x7f0000000000/0x2000)=nil}) [ 362.424705] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 362.479580] binder: 11816 RLIMIT_NICE not set [ 362.484565] binder: 11816 RLIMIT_NICE not set 04:43:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:44 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x10000080800) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) 04:43:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}]) [ 362.584309] binder_alloc: binder_alloc_mmap_handler: 11814 20001000-20004000 already mapped failed -16 [ 362.744398] binder: BINDER_SET_CONTEXT_MGR already set [ 362.749854] binder: 11814:11820 ioctl 40046207 0 returned -16 [ 362.822241] binder_alloc: 11814: binder_alloc_buf, no vma [ 362.824709] binder: 11835 RLIMIT_NICE not set [ 362.827993] binder: 11814:11834 transaction failed 29189/-3, size 0-0 line 3035 [ 362.917651] binder: undelivered TRANSACTION_ERROR: 29189 [ 362.923392] binder: release 11814:11816 transaction 11 in, still active [ 362.930214] binder: send failed reply for transaction 11 to 11814:11816 [ 362.937446] binder: undelivered TRANSACTION_COMPLETE [ 362.942642] binder: undelivered TRANSACTION_ERROR: 29189 04:43:45 executing program 4: timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) eventfd2(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001280)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000004cc0)) 04:43:45 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x20000800003, 0x8012, r0, 0x0) 04:43:45 executing program 5: open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x20000800003, 0x8012, r0, 0x0) 04:43:45 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, 0x0) 04:43:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:45 executing program 4: r0 = open(&(0x7f0000000000)='./file1\x00', 0x400043, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) close(r0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0xfffffee0) setsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 04:43:45 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, 0x0) pipe2(0x0, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 04:43:45 executing program 5: 04:43:45 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffff9c, 0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:45 executing program 1: 04:43:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:46 executing program 5: 04:43:46 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) epoll_create1(0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:43:46 executing program 1: clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x3f553e5) link(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='./file1\x00') lstat(&(0x7f00000005c0)='./file2\x00', 0x0) 04:43:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000130000005d0000000000400095000023fb000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 04:43:46 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:46 executing program 5: 04:43:47 executing program 3: 04:43:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:47 executing program 0: pipe2(&(0x7f0000000200), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:47 executing program 5: 04:43:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:47 executing program 3: 04:43:47 executing program 4: 04:43:47 executing program 5: 04:43:47 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x68}}, 0x0) 04:43:47 executing program 0: pipe2(0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f0000000a40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000a80)='keyring\x00', &(0x7f0000000ac0)={'syz', 0x1}, 0x0) 04:43:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:47 executing program 3: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000010000000000000000000e00000004000000480300002801000000000000280100003401"], 0x1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:43:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffef4, &(0x7f0000000140)=0x40000000009) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 04:43:48 executing program 1: r0 = open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) unlink(0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000440), 0x0) getpgid(0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@ipv4={[], [], @initdev}}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000480)={0x0, @loopback}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x800) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, 0x0) sendto(0xffffffffffffffff, 0x0, 0xffffffffffffff13, 0x0, 0x0, 0xfffffffffffffde2) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x20000800003, 0x8012, r2, 0x0) fstatfs(r0, &(0x7f0000000940)=""/4096) pipe(&(0x7f0000000140)) 04:43:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='io.max\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/95}], 0x30e) [ 366.164907] ptrace attach of "/root/syz-executor.3"[11966] was attempted by "/root/syz-executor.3"[11967] 04:43:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 04:43:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:48 executing program 0: pipe2(0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:48 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x80001080045017, 0x0) 04:43:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000000000000000000600000003030000000000000000000000000000000000000000000000000001ac1414bb00007600000000000000000003000500000000000200"], 0x72}}, 0x0) 04:43:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:48 executing program 0: pipe2(0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 04:43:49 executing program 3: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x40c2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x666f) 04:43:49 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="19000000043c6cbc1fa3178688c0c8050000000000000009c9c6c32a6d6e70b7d53244a38c3abfd1fa13cb9668e0ce64d584ed3c828a347791"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:43:49 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_execute_func(&(0x7f00000005c0)="36429266460f73fc0093f6c89c7b50d2d6f2440f34a2ebf717c4dc7518ffc4e24d4a3ef1d6722b691f1f63ad489e66460fd9cc000000615167620fda980300005b0000fdc4427932505c22c5c4e3d90fe006aa4b9ec4237d0295c20000000026660fdd624466470f384077007e") ppoll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000080)={0x496916c9}, 0x8) 04:43:49 executing program 1: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffef4, &(0x7f0000000140)=0x40000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000241, 0x0) 04:43:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fe"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:49 executing program 0: pipe2(&(0x7f0000000200), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 04:43:49 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x10000000000003f4, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x4018920a, &(0x7f0000000180)) 04:43:49 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000002c0), 0x0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r0, &(0x7f0000000500)="264fd6d7fbf656733e24154cf1cce76e080a", 0x0}, 0x18) 04:43:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 04:43:50 executing program 1: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x3) ptrace$cont(0x9, r0, 0x0, 0x1) 04:43:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fe"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:50 executing program 0: pipe2(&(0x7f0000000200), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 04:43:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) gettid() add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6174000501000000009fcc99a44932deb62ed56310f909f6563039e4c40000000000800000000048e02100000000000000000000001a0317df3ba26e6a52483915720c5d5596f28438a291a4dde6850454a087b89a4f06f9c2ee99ccaaab055e157b2b7803312cd8545d5b6d40fd28aa2338bd2751be050043512934276603d7db6845d801485b8c117da83c2027b7d003164de23dd3377b6c31c64ff78b71825afe1f60011154a5000000000000000000009a00008eeccf061da6"], 0x1) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 368.410212] ptrace attach of "/root/syz-executor.1"[12054] was attempted by "/root/syz-executor.1"[12055] 04:43:50 executing program 1: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:43:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) getsockopt(r0, 0x114, 0x271c, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0xd) semget(0xffffffffffffffff, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) 04:43:50 executing program 0: pipe2(&(0x7f0000000200), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 04:43:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fe"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0xffffffffffffff8d) close(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 04:43:51 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) inotify_init() ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 04:43:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f0000000a40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000a80)='keyring\x00', &(0x7f0000000ac0)={'syz', 0x1}, 0x0) 04:43:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee691"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:43:51 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xfe, 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x4, 0x4) [ 369.483858] binder: 12101:12103 got reply transaction with bad transaction stack, transaction 14 has target 12101:0 [ 369.494728] binder: 12101:12103 transaction failed 29201/-71, size 0-0 line 2816 [ 369.541360] binder_alloc: binder_alloc_mmap_handler: 12101 20001000-20004000 already mapped failed -16 04:43:51 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000200)="37bf714a03a40959c32786a153def83556fa50cd07a17e57dec67c6416a295c095eb32a4f530f4c9d5a1097ec9cb7ae16740e3757f15b6dcf57990782d6184c5e4008d0a13c88dde2489844d5ac77297e284a19202b19948d27e47580f8ba3d97f4b9c4002ed0be3a4772706db21e6218c26e76063cb18300682ff759367394a3dd6a021fbb7b9fbcf") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000040)={&(0x7f00000022c0)=""/4096, 0x1000}) 04:43:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') set_mempolicy(0x3, &(0x7f0000000200)=0x3f, 0x3) close(r1) creat(&(0x7f00000002c0)='./bus\x00', 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) [ 369.606594] binder: BINDER_SET_CONTEXT_MGR already set [ 369.612165] binder: 12101:12103 ioctl 40046207 0 returned -16 04:43:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee691"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 369.663715] binder_alloc: 12101: binder_alloc_buf, no vma [ 369.669491] binder: 12101:12113 transaction failed 29189/-3, size 0-0 line 3035 [ 369.722354] binder: undelivered TRANSACTION_ERROR: 29189 [ 369.727957] binder: send failed reply for transaction 14 to 12101:12103 [ 369.734994] binder: undelivered TRANSACTION_COMPLETE [ 369.740135] binder: undelivered TRANSACTION_ERROR: 29201 [ 369.745694] binder: undelivered TRANSACTION_ERROR: 29189 04:43:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="05393f6db3e7dd71141b2fc73c4ec5e07f3d6b84b04f91ecddff000700050700eda5000000800000923fbd8afe9aba44d744a0997acda76fd2"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x20, r1, 0x0, 0x0) 04:43:52 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') set_mempolicy(0x3, &(0x7f0000000200)=0x3f, 0x3) close(r1) creat(&(0x7f00000002c0)='./bus\x00', 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) 04:43:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="05393f6db3e7dd71141b2fc73c4ec5e07f3d6b84b04f91ecddff000700050700eda5000000800000923fbd8afe9aba44d744a0997acda76fd2"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x20, r1, 0x0, 0x0) 04:43:52 executing program 3: r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}, 0x8000) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:43:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) inotify_init() ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 04:43:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee691"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:52 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) 04:43:52 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0xbbb8820c) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) accept4$inet(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) accept4(r1, 0x0, &(0x7f0000000100), 0x80000) [ 370.498110] ptrace attach of "/root/syz-executor.0"[12143] was attempted by "/root/syz-executor.0"[12147] 04:43:52 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) inotify_init() ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 04:43:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="05393f6db3e7dd71141b2fc73c4ec5e07f3d6b84b04f91ecddff000700050700eda5000000800000923fbd8afe9aba44d744a0997acda76fd2"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x20, r1, 0x0, 0x0) 04:43:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:52 executing program 3: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="05393f6db3e7dd71141b2fc73c4ec5e07f3d6b84b04f91ecddff000700050700eda5000000800000923fbd8afe9aba44d744a0997acda76fd2"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x20, r0, 0x0, 0x0) 04:43:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:53 executing program 3: r0 = open(&(0x7f0000000000)='./file1\x00', 0x400043, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0xfffffee0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 04:43:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="05393f6db3e7dd71141b2fc73c4ec5e07f3d6b84b04f91ecddff000700050700eda5000000800000923fbd8afe9aba44d744a0997acda76fd2"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x20, r1, 0x0, 0x0) 04:43:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:53 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) inotify_init() ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 04:43:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00') set_mempolicy(0x3, &(0x7f0000000200)=0x3f, 0x3) close(r1) creat(&(0x7f00000002c0)='./bus\x00', 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', 0x0, 0x0, 0x0) 04:43:53 executing program 1: request_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz'}, 0x0, 0xfffffffffffffffb) 04:43:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48) 04:43:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 04:43:54 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x201, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 04:43:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syslog(0x3, 0x0, 0x0) 04:43:54 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 04:43:54 executing program 1: r0 = gettid() accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0xf4afee09d24e70e4) r1 = perf_event_open(0x0, r0, 0x6, 0xffffffffffffffff, 0x1) fcntl$dupfd(r1, 0xfffffffffffffffc, 0xffffffffffffffff) accept$unix(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f0000001280)={0x0, 0x4000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000001240)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'L-', 0x1ff}, 0x28, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 04:43:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200), 0x1000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) 04:43:54 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) inotify_init() ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 04:43:54 executing program 0: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x14a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 04:43:54 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) ftruncate(r0, 0x81ff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) mlock(&(0x7f0000005000/0x2000)=nil, 0x2000) creat(&(0x7f00000006c0)='./bus\x00', 0x0) 04:43:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x6400000000000000, 0x0, 0x0) 04:43:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.063089] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 373.133755] cgroup: fork rejected by pids controller in /syz0 04:43:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200), 0x1000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) 04:43:55 executing program 1: openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x121000, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) unlink(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@ipv4={[], [], @initdev}}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x20000800003, 0x8012, r0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 04:43:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200), 0x1000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) 04:43:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:56 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) inotify_init() ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:43:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6174000501000000009fcc99a44932deb62ed56310f909f6563039e4c40000000000800000000048e02100000000000000000000001a0317df3ba26e6a52483915720c5d5596f28438a291a4dde6850454a087b89a4f06f9c2ee99ccaaab055e157b2b7803312cd8545d5b6d40fd28aa2338bd2751be050043512934276603d7db6845d801485b8c117da83c2027b7d003164de23dd3377b6c31c64ff78b71825afe1f60011154a5000000000000000000009a00008eeccf061da6"], 0x1) 04:43:56 executing program 1: getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x15, &(0x7f0000000280)) 04:43:56 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8012, r0, 0x400000000000) 04:43:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syslog(0x3, &(0x7f00000000c0)=""/93, 0x5d) 04:43:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x6400000000000000, 0x0, 0x0) 04:43:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:43:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 04:43:58 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) inotify_init() vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:43:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x3bd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") sendto$inet(r0, &(0x7f00000000c0)="dd", 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000880)=ANY=[], 0x7ff8) 04:43:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:43:58 executing program 3: syslog(0x3, &(0x7f00000000c0)=""/93, 0x5d) 04:43:58 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xbc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0xf000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="e0030f000a0002001b800000aaaa002c6d9ace61ab09e16e80d4a061b2be9fbdd0a8c69b9f2b5914f0ffcf00dc063798bcf5f95d583ead1f287b7e24fce17ee3697e29d8b5c432362cbf4225f04d83d9ce4b"], 0x1}}, 0x0) 04:43:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="7f"], 0x1) fallocate(r1, 0x2040000000003, 0x0, 0x2) 04:43:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d72b070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x13, 0xfffffffffffff800, 0xf, 0x6, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_lifetime={0x4, 0x3, 0x1, 0x9, 0x2800000000000, 0xc1}]}, 0x30}}, 0x44080) 04:43:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:43:59 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:43:59 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="46000000060000000000000000000000010000000000008000000000000000001d000000000000002f7365ec696e75782f6176632f63614368655f7468726573686f6c640000"], 0x46) 04:43:59 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) close(r0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1}, @loopback}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) stat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001700)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b40)={{{@in=@dev, @in=@empty}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000001c40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e00), &(0x7f0000001e40)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001e80), &(0x7f0000001ec0)=0xc) recvmmsg(r1, &(0x7f0000006d40)=[{{&(0x7f0000006180)=@isdn, 0x80, &(0x7f0000006400)=[{&(0x7f0000006200)=""/158, 0x9e}, {&(0x7f00000062c0)=""/164, 0xa4}, {&(0x7f0000006380)=""/69, 0x45}], 0x3, &(0x7f0000006440)=""/63, 0x3f}, 0x8001}, {{0x0, 0x0, &(0x7f0000006480), 0x0, &(0x7f00000064c0)=""/44, 0x2c}, 0x1}, {{&(0x7f0000006500)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000006640)=[{&(0x7f0000006580)=""/61, 0x3d}, {0x0}, {&(0x7f0000006600)=""/60, 0x3c}], 0x3, &(0x7f0000006680)=""/49, 0x31}, 0x48}, {{&(0x7f00000066c0), 0x80, &(0x7f0000006800)=[{&(0x7f0000006740)=""/26, 0x1a}, {&(0x7f0000006780)=""/112, 0x70}], 0x2, &(0x7f0000006840)=""/199, 0xc7}, 0xbe39}, {{&(0x7f0000006940)=@xdp, 0x80, &(0x7f0000006b40)=[{&(0x7f00000069c0)=""/219, 0xdb}, {&(0x7f0000006ac0)=""/84, 0x54}], 0x2, &(0x7f0000006b80)=""/146, 0x92}, 0xfffffffffffffff9}, {{0x0, 0x0, &(0x7f0000006cc0)=[{&(0x7f0000006c40)=""/123, 0x7b}], 0x1, &(0x7f0000006d00)=""/59, 0x3b}, 0x10001}], 0x6, 0x40000000, &(0x7f0000006ec0)={0x0, 0x989680}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000004c40)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000006480)) 04:43:59 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x4, 0x4) 04:44:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000000000001000000000900000100000008000000ffff000000000000010000000100000013000000030000007f0000000000000001000080c74c1a851f2e57ceac6248fee69181e2"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:44:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:44:00 executing program 1: 04:44:00 executing program 0: 04:44:00 executing program 1: 04:44:00 executing program 2: 04:44:00 executing program 3: 04:44:00 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:00 executing program 1: 04:44:00 executing program 2: 04:44:01 executing program 4: 04:44:01 executing program 3: 04:44:01 executing program 1: 04:44:01 executing program 2: 04:44:01 executing program 0: 04:44:01 executing program 4: 04:44:01 executing program 3: 04:44:01 executing program 4: 04:44:01 executing program 2: 04:44:01 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:01 executing program 1: 04:44:01 executing program 3: 04:44:01 executing program 0: 04:44:01 executing program 4: 04:44:02 executing program 2: 04:44:02 executing program 3: 04:44:02 executing program 1: 04:44:02 executing program 4: 04:44:02 executing program 0: 04:44:02 executing program 3: 04:44:02 executing program 2: 04:44:03 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:03 executing program 1: 04:44:03 executing program 3: 04:44:03 executing program 2: 04:44:03 executing program 4: 04:44:03 executing program 0: 04:44:03 executing program 1: 04:44:03 executing program 4: 04:44:03 executing program 3: 04:44:03 executing program 2: 04:44:03 executing program 1: 04:44:03 executing program 2: 04:44:04 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:04 executing program 4: 04:44:04 executing program 0: 04:44:04 executing program 3: 04:44:04 executing program 1: 04:44:04 executing program 2: 04:44:04 executing program 4: 04:44:04 executing program 3: 04:44:04 executing program 2: 04:44:04 executing program 1: 04:44:04 executing program 0: 04:44:04 executing program 4: 04:44:05 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:05 executing program 3: 04:44:05 executing program 2: 04:44:05 executing program 1: 04:44:05 executing program 4: 04:44:05 executing program 0: 04:44:05 executing program 4: 04:44:05 executing program 2: 04:44:05 executing program 3: 04:44:05 executing program 1: 04:44:05 executing program 0: 04:44:05 executing program 4: 04:44:06 executing program 2: 04:44:06 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:06 executing program 3: 04:44:06 executing program 1: 04:44:06 executing program 4: 04:44:06 executing program 0: 04:44:06 executing program 3: 04:44:06 executing program 1: 04:44:06 executing program 4: 04:44:06 executing program 2: 04:44:06 executing program 3: 04:44:06 executing program 1: 04:44:06 executing program 0: 04:44:07 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:07 executing program 4: r0 = getpgid(0x0) sched_setscheduler(0x0, 0x0, 0x0) getpgid(0x0) openat$zero(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000080)) 04:44:07 executing program 2: 04:44:07 executing program 3: 04:44:07 executing program 1: 04:44:07 executing program 0: 04:44:07 executing program 2: 04:44:07 executing program 3: 04:44:07 executing program 4: 04:44:07 executing program 1: 04:44:07 executing program 2: 04:44:07 executing program 4: 04:44:08 executing program 0: 04:44:08 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:08 executing program 4: 04:44:08 executing program 2: 04:44:08 executing program 1: 04:44:08 executing program 3: 04:44:08 executing program 2: 04:44:08 executing program 1: 04:44:08 executing program 4: 04:44:08 executing program 3: 04:44:08 executing program 2: 04:44:08 executing program 4: 04:44:08 executing program 0: 04:44:09 executing program 3: 04:44:09 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:09 executing program 0: 04:44:09 executing program 4: 04:44:09 executing program 2: 04:44:09 executing program 1: 04:44:09 executing program 4: 04:44:09 executing program 3: 04:44:09 executing program 2: 04:44:09 executing program 1: 04:44:09 executing program 0: 04:44:09 executing program 3: 04:44:09 executing program 2: 04:44:10 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:10 executing program 4: 04:44:10 executing program 1: 04:44:10 executing program 3: 04:44:10 executing program 0: 04:44:10 executing program 2: 04:44:10 executing program 4: 04:44:10 executing program 2: 04:44:10 executing program 3: 04:44:10 executing program 1: 04:44:10 executing program 0: 04:44:10 executing program 4: 04:44:11 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:11 executing program 4: clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x3ff, 0x0, 0xa6}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 04:44:11 executing program 1: 04:44:11 executing program 3: 04:44:11 executing program 2: 04:44:11 executing program 0: socket$inet(0x2, 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000400), 0x10) dup(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="09014000887c46d73ae2179d7027dae74f76b39152c96733f3b01cb1992ff45db272e2fd"], 0x24) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285") openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 04:44:11 executing program 4: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x7fe000000000, 0xfffffffffffffffe, 0x4a0a}) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffef4, &(0x7f0000000140)=0x40000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000241, 0x0) [ 389.485309] ptrace attach of "/root/syz-executor.4"[12768] was attempted by "/root/syz-executor.4"[12770] 04:44:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000400)=[@register_looper, @reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) 04:44:11 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x0, 0x0, @start}) 04:44:11 executing program 2: r0 = userfaultfd(0x800) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000003c0)=0x3) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600)=[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='/dev/video#\x00'], &(0x7f0000000800)=[&(0x7f0000000640)='syz', &(0x7f0000000680)='syz', &(0x7f00000006c0)='user\x00', &(0x7f0000000700)='lo--@^\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='syz', &(0x7f00000007c0)='])ppp1cpuset\x00']) r1 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x40, 0xffffffffffffffff) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x800, 0x4, 0x7f45777a, 0x9, 0x7, [{}, {}, {}, {0x5, 0x7f}, {0x9, 0x1}, {0x1, 0x10001}, {0x8, 0x80}, {0xfff, 0x1}]}}) r2 = dup(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x200, 0x4) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) r3 = add_key(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="81af0d4c025d25cc0a5a21aba76abf256f2a568df13766d57f8243730e158ef3ef57665cb3bf8d0c3e13f4f5f92dd516f8d0b6f5a47ab17b846dadd72856a9c7f198e2fcc16d359e195e1008ba812c1bd481e5004cee5ea6f0fc2f0e57a7a67bb4163cbf", 0x64, 0xfffffffffffffffc) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', r3) [ 389.828319] binder: 12786:12787 transaction failed 29189/-22, size 0-0 line 2896 [ 389.870972] binder: 12786:12790 ERROR: BC_REGISTER_LOOPER called without request [ 389.878717] binder: 12786:12790 got reply transaction with no transaction stack [ 389.886414] binder: 12786:12790 transaction failed 29201/-71, size 0-0 line 2801 04:44:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0xa, 0x9}, {0x1, 0x0, 0x0, 0xfffffffffffffff8}]}) [ 390.013543] binder: 12786:12790 ERROR: BC_REGISTER_LOOPER called without request [ 390.021295] binder: 12786:12790 got reply transaction with no transaction stack [ 390.029338] binder: 12786:12790 transaction failed 29201/-71, size 0-0 line 2801 04:44:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x48, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) [ 390.156808] binder: undelivered TRANSACTION_ERROR: 29201 [ 390.162553] binder: undelivered TRANSACTION_ERROR: 29189 [ 390.168049] binder: undelivered TRANSACTION_ERROR: 29201 [ 390.396519] binder: 12804:12805 transaction failed 29189/-22, size 0-0 line 2896 [ 390.426092] binder: 12804:12813 transaction failed 29189/-22, size 0-0 line 2896 [ 390.467583] binder: 12805 RLIMIT_NICE not set [ 390.480784] binder: 12804:12811 got reply transaction with no transaction stack [ 390.488482] binder: 12804:12811 transaction failed 29201/-71, size 0-0 line 2801 04:44:12 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffea) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") getgroups(0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff]) setfsgid(r1) 04:44:12 executing program 3: writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x11) writev(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000180)='./bus\x00', r3, r4) fcntl$addseals(r0, 0x409, 0xd) clone(0x800000008004000, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) rt_sigsuspend(&(0x7f0000000080), 0x8) signalfd4(r2, 0x0, 0x0, 0x80000) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ipv6_route\x00') connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$VT_RELDISP(r2, 0x5605) write(r5, &(0x7f0000000380)="c12814e8779b1e6e3aca793132607789dae4a5d780968545cb3e984dc7e33e5eca030984ba53cf6ec146ab5fad527fd1e2f6492b4f373349877a74ecb2fa9070d806af3c78a909c7db0fd0d005060a00be0be33d1095e2776806be36b97f664fab0055b0c1b90f0ffc031933e3bd12a0fd8c4d8dae567dd3c3ef6e214aba401b", 0x80) sendfile(r5, r6, 0x0, 0xcb49) 04:44:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0xa, 0x9}, {0x1, 0x0, 0x0, 0xfffffffffffffff8}]}) [ 390.609020] binder: undelivered TRANSACTION_ERROR: 29201 [ 390.614900] binder: undelivered TRANSACTION_ERROR: 29189 [ 390.620413] binder: undelivered TRANSACTION_ERROR: 29189 04:44:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x31) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 04:44:13 executing program 0: socket$inet(0x2, 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000400), 0x10) dup(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="09014000887c46d73ae2179d7027dae74f76b39152c96733f3b01cb1992ff45db272e2fd"], 0x24) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285") openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 04:44:13 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffea) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:13 executing program 4: r0 = open(&(0x7f0000000000)='./file1\x00', 0x400043, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) close(r0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0xfffffee0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 04:44:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0xa, 0x9}, {0x1, 0x0, 0x0, 0xfffffffffffffff8}]}) 04:44:13 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0xffffffffffffffc2) 04:44:13 executing program 3: writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x1ff) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x11) writev(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000180)='./bus\x00', r3, r4) fcntl$addseals(r0, 0x409, 0xd) clone(0x800000008004000, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) rt_sigsuspend(&(0x7f0000000080), 0x8) signalfd4(r2, 0x0, 0x0, 0x80000) r5 = socket$inet6(0xa, 0x100800000000002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ipv6_route\x00') connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$VT_RELDISP(r2, 0x5605) write(r5, &(0x7f0000000380)="c12814e8779b1e6e3aca793132607789dae4a5d780968545cb3e984dc7e33e5eca030984ba53cf6ec146ab5fad527fd1e2f6492b4f373349877a74ecb2fa9070d806af3c78a909c7db0fd0d005060a00be0be33d1095e2776806be36b97f664fab0055b0c1b90f0ffc031933e3bd12a0fd8c4d8dae567dd3c3ef6e214aba401b", 0x80) sendfile(r5, r6, 0x0, 0xcb49) 04:44:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) 04:44:14 executing program 5: write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffea) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0xa, 0x9}, {0x1, 0x0, 0x0, 0xfffffffffffffff8}]}) 04:44:14 executing program 5: pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffea) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:44:14 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) dup3(r0, r1, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7}, 0x7) 04:44:14 executing program 3: syz_execute_func(&(0x7f0000000280)="3666440f50f564ff0941c31e5bc9c92242c4c27d794e00c4227d248a000001006a410fc40fd325c5c953b73edaf70f0f4cebddaee4ff419d9dd3196f") clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x1) unshare(0x44010000) [ 392.842836] ================================================================== [ 392.850412] BUG: KMSAN: uninit-value in gue6_err+0x475/0xc40 [ 392.856231] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.0.0-rc1+ #10 [ 392.862923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.872293] Call Trace: [ 392.874959] dump_stack+0x173/0x1d0 [ 392.878636] kmsan_report+0x12e/0x2a0 [ 392.882471] __msan_warning+0x82/0xf0 [ 392.886309] gue6_err+0x475/0xc40 [ 392.889826] ? fou6_build_header+0x640/0x640 [ 392.894300] __udp6_lib_err+0x18d0/0x2590 [ 392.898537] udpv6_err+0x118/0x130 [ 392.902119] icmpv6_notify+0x462/0x9f0 [ 392.906034] ? udpv6_rcv+0x70/0x70 [ 392.909609] icmpv6_rcv+0x18ac/0x3fa0 [ 392.913498] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 392.918717] ? icmpv6_sk_exit+0x2c0/0x2c0 [ 392.922954] ip6_protocol_deliver_rcu+0xb5a/0x23a0 [ 392.927932] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 392.933194] ip6_input+0x2b6/0x350 [ 392.936774] ? ip6_input+0x350/0x350 [ 392.940519] ? ip6_protocol_deliver_rcu+0x23a0/0x23a0 [ 392.945730] ip6_rcv_finish+0x4e7/0x6d0 [ 392.949751] ipv6_rcv+0x34b/0x3f0 [ 392.953252] ? local_bh_enable+0x40/0x40 [ 392.957379] process_backlog+0x756/0x10e0 [ 392.961603] ? ip6_rcv_finish+0x6d0/0x6d0 [ 392.965813] ? rps_trigger_softirq+0x2e0/0x2e0 [ 392.970421] net_rx_action+0x78b/0x1a60 [ 392.974463] ? net_tx_action+0xca0/0xca0 [ 392.978613] __do_softirq+0x53f/0x93a [ 392.982459] ? ksoftirqd_should_run+0x30/0x30 [ 392.987000] run_ksoftirqd+0x26/0x50 [ 392.990735] smpboot_thread_fn+0x4d0/0x9f0 [ 392.991113] IPVS: ftp: loaded support on port[0] = 21 [ 392.995007] kthread+0x4a1/0x4e0 [ 392.995029] ? cpu_report_death+0x190/0x190 [ 392.995063] ? schedule_tail+0x1b2/0x410 [ 393.013716] ? kthread_blkcg+0xf0/0xf0 [ 393.017632] ret_from_fork+0x35/0x40 [ 393.021376] [ 393.023008] Uninit was created at: [ 393.026565] kmsan_internal_poison_shadow+0x92/0x150 [ 393.032168] kmsan_kmalloc+0xa6/0x130 [ 393.035998] kmsan_slab_alloc+0xe/0x10 [ 393.039903] __kmalloc_node_track_caller+0xe9e/0xff0 [ 393.045113] __alloc_skb+0x309/0xa20 [ 393.048858] alloc_skb_with_frags+0x1c7/0xac0 [ 393.053427] sock_alloc_send_pskb+0xafd/0x10a0 [ 393.058038] sock_alloc_send_skb+0xca/0xe0 [ 393.062294] __ip6_append_data+0x42ed/0x5dc0 [ 393.066723] ip6_append_data+0x3c2/0x650 [ 393.070799] icmp6_send+0x2f5c/0x3c40 [ 393.074617] icmpv6_send+0xe5/0x110 [ 393.078258] ip6_link_failure+0x5c/0x2c0 [ 393.082336] ndisc_error_report+0x106/0x1a0 [ 393.086695] neigh_invalidate+0x359/0x8e0 [ 393.090869] neigh_timer_handler+0xdf2/0x1280 [ 393.095392] call_timer_fn+0x285/0x600 [ 393.099304] __run_timers+0xdb4/0x11d0 [ 393.103226] run_timer_softirq+0x2e/0x50 [ 393.107325] __do_softirq+0x53f/0x93a [ 393.111131] ================================================================== [ 393.118495] Disabling lock debugging due to kernel taint [ 393.123973] Kernel panic - not syncing: panic_on_warn set ... [ 393.129869] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G B 5.0.0-rc1+ #10 [ 393.137932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.147289] Call Trace: [ 393.149904] dump_stack+0x173/0x1d0 [ 393.153579] panic+0x3d1/0xb01 [ 393.156877] kmsan_report+0x293/0x2a0 [ 393.160713] __msan_warning+0x82/0xf0 [ 393.164553] gue6_err+0x475/0xc40 [ 393.168066] ? fou6_build_header+0x640/0x640 [ 393.172496] __udp6_lib_err+0x18d0/0x2590 [ 393.177334] udpv6_err+0x118/0x130 [ 393.180917] icmpv6_notify+0x462/0x9f0 [ 393.184850] ? udpv6_rcv+0x70/0x70 [ 393.188421] icmpv6_rcv+0x18ac/0x3fa0 [ 393.192307] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 393.197523] ? icmpv6_sk_exit+0x2c0/0x2c0 [ 393.201863] ip6_protocol_deliver_rcu+0xb5a/0x23a0 [ 393.206872] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 393.212144] ip6_input+0x2b6/0x350 [ 393.215726] ? ip6_input+0x350/0x350 [ 393.219464] ? ip6_protocol_deliver_rcu+0x23a0/0x23a0 [ 393.224699] ip6_rcv_finish+0x4e7/0x6d0 [ 393.228703] ipv6_rcv+0x34b/0x3f0 [ 393.232231] ? local_bh_enable+0x40/0x40 [ 393.236316] process_backlog+0x756/0x10e0 [ 393.240520] ? ip6_rcv_finish+0x6d0/0x6d0 [ 393.244694] ? rps_trigger_softirq+0x2e0/0x2e0 [ 393.249321] net_rx_action+0x78b/0x1a60 [ 393.253337] ? net_tx_action+0xca0/0xca0 [ 393.257417] __do_softirq+0x53f/0x93a [ 393.261256] ? ksoftirqd_should_run+0x30/0x30 [ 393.265771] run_ksoftirqd+0x26/0x50 [ 393.269528] smpboot_thread_fn+0x4d0/0x9f0 [ 393.273805] kthread+0x4a1/0x4e0 [ 393.277234] ? cpu_report_death+0x190/0x190 [ 393.281569] ? schedule_tail+0x1b2/0x410 [ 393.285657] ? kthread_blkcg+0xf0/0xf0 [ 393.289681] ret_from_fork+0x35/0x40 [ 393.294288] Kernel Offset: disabled [ 393.297917] Rebooting in 86400 seconds..