[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 75.036265] audit: type=1800 audit(1550494138.082:25): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 75.055508] audit: type=1800 audit(1550494138.092:26): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 75.074842] audit: type=1800 audit(1550494138.102:27): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.12' (ECDSA) to the list of known hosts. 2019/02/18 12:49:10 fuzzer started 2019/02/18 12:49:15 dialing manager at 10.128.0.26:41979 2019/02/18 12:49:15 syscalls: 1 2019/02/18 12:49:15 code coverage: enabled 2019/02/18 12:49:15 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/18 12:49:15 extra coverage: extra coverage is not supported by the kernel 2019/02/18 12:49:15 setuid sandbox: enabled 2019/02/18 12:49:15 namespace sandbox: enabled 2019/02/18 12:49:15 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/18 12:49:15 fault injection: enabled 2019/02/18 12:49:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/18 12:49:15 net packet injection: enabled 2019/02/18 12:49:15 net device setup: enabled 12:51:22 executing program 0: syzkaller login: [ 219.982818] IPVS: ftp: loaded support on port[0] = 21 [ 220.114849] chnl_net:caif_netlink_parms(): no params data found [ 220.183870] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.190361] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.198517] device bridge_slave_0 entered promiscuous mode [ 220.207935] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.214436] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.222478] device bridge_slave_1 entered promiscuous mode [ 220.253097] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.263982] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.291898] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.300159] team0: Port device team_slave_0 added [ 220.307460] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.315761] team0: Port device team_slave_1 added [ 220.321868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 220.330581] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 220.486004] device hsr_slave_0 entered promiscuous mode [ 220.742247] device hsr_slave_1 entered promiscuous mode [ 220.992865] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 221.000319] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 221.025712] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.032237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.039287] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.045827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.117806] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 221.124731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.132908] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.143270] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.154488] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 221.171232] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.182344] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.188999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.196702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.211519] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 221.217688] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.232414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.239608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.247968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.257291] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.263750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.277352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.291483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 221.299293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.307803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.315896] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.322396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.330880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.346851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.358873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.371328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.378653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.387945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.396750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.405308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.414189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.424219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.435682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 221.442717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.450959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.464565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 221.472152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.480374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.493593] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 221.499652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.524879] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 221.543228] 8021q: adding VLAN 0 to HW filter on device batadv0 12:51:24 executing program 0: 12:51:24 executing program 0: 12:51:24 executing program 0: 12:51:24 executing program 0: 12:51:25 executing program 0: 12:51:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000001e80)='attr/current\x00') r1 = semget$private(0x0, 0x9, 0x10a) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000040)=""/5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000002200)={0x0, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xf3e7, 0x80, 0xc43, 0x7, 0x5}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) 12:51:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1d, 0x3, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x800) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) 12:51:25 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) 12:51:25 executing program 0: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') prctl$PR_CAPBSET_READ(0x17, 0x19) sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) 12:51:25 executing program 0: r0 = dup(0xffffffffffffffff) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000040)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000740)={@remote}, 0x6) r2 = semget(0x0, 0x1, 0x10d) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x1, 0x80000]) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @broadcast, 0x0, 0x4, [@loopback, @rand_addr=0x1, @local, @dev={0xac, 0x14, 0x14, 0x24}]}, 0x20) 12:51:25 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000380)='/dev/capi20\x00', 0x0, 0x0) unshare(0x10040001) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x4}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) 12:51:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x800000000805, 0x0) r1 = dup(r0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)="7f", 0x1}], 0x1) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000080)=""/216) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000180)={0x7, 0x0, 0x2, {0x3ff, 0x3ff, 0x9, 0x3}}) 12:51:25 executing program 0: r0 = socket(0x10, 0x2, 0xc) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000080)="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", 0x149) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000200cf", 0x1f) [ 222.830383] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.846298] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. 12:51:25 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x203, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x7b, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000340)=""/123}, &(0x7f00000001c0)=0x78) stat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="67443ded55f400000000001c350dcbb9282ce9fd0200000000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',gd=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000010001,max_read=0x0000000000000400,max_read=0x0000000000000000,max_read=0x0000000000000081,blksize=0x0000000000000000,\x00']) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000500)={0xb07, 0x1, 0x0, 0xfffffffffffffffb, r3}, &(0x7f00000004c0)=0x10) read$FUSE(r0, &(0x7f0000003000), 0xffffff73) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x2, {0x7, 0x8}}, 0x50) open(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 12:51:26 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000001140)='environ\x00') mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x2000006, 0x40010, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000100), 0x177c) 12:51:26 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x100080000000, 0x80) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r3}}, 0x18) r4 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0xfff, 0x8000) lsetxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64IPIN\x00', &(0x7f0000000180)='\a\x00', 0x2, 0x2) ioctl(r1, 0xffffffffffffffb7, &(0x7f0000000080)) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0x8, @mcast2, 0x8}, 0x1c) 12:51:26 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="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", 0xfb}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) rt_sigprocmask(0x1, &(0x7f0000000000)={0x1}, &(0x7f0000000180), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x2, 0x0) write$P9_RVERSION(r1, &(0x7f0000000240)={0x13, 0x65, 0xffff, 0x7, 0x6, '9P2000'}, 0x13) 12:51:26 executing program 0: r0 = socket$inet(0x2, 0x3, 0x20000000084) clone(0x4002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_yield() getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x2, 0x11, [], 0x67512377d493e3c, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @local}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@remote, @in6=@mcast1, 0x4e22, 0x5222, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x89, r1, r2}, {0xfffffffffffffffe, 0x800, 0x3, 0x7fffffff, 0x1, 0x7f, 0x2, 0xbf14}, {0x80000000, 0x10001, 0x642407e8, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4d2, 0x32}, 0x2, @in=@rand_addr=0x4, 0x3501, 0x1, 0x3, 0x7fff, 0xfffffffffffffff9, 0x81, 0x4}}, 0xe8) [ 223.232305] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.243359] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.326224] kernel msg: ebtables bug: please report to author: Nentries wrong [ 223.338111] kernel msg: ebtables bug: please report to author: Nentries wrong 12:51:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) prctl$PR_GET_KEEPCAPS(0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r1}, 0xc) 12:51:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind(r1, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80) bind(r1, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', r2}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x208200, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', r2}) 12:51:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8001, &(0x7f0000000080)="0000000000000000000000847adf5a1064bae197d5bd5aa10841be167e95a5024a0999c82232e6296beaa8ec4cd7ee093442191f401df02e4969dc24f90977b4206b59cdd45dad93a52262b1a23c56925d1ff65e9df9e5a9381d662ca4d1917226bb973f04005313ec3e6c3605000000e0f56c84048b439e0319fbf071384fe5") r1 = socket$inet6(0xa, 0x400000000006, 0x9) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000), 0x4) shutdown(r1, 0x0) 12:51:26 executing program 1: socketpair(0x9, 0xf, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept(r1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x9) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x8000) write$P9_RSETATTR(r4, &(0x7f00000002c0)={0x7, 0x1b, 0x1}, 0x7) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x8000}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000380)={r9, 0x9dc}, 0x8) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0xd3b7) sysfs$2(0x2, 0x0, &(0x7f00000003c0)=""/13) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000000400)={0xffff, 0x7fff, 0xb6a7, 0xad, 0x10, 0x5}) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000440), &(0x7f00000004c0)=0x60) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000000500)={0xfff, 0x7fff, 0x9}) ioctl$DRM_IOCTL_INFO_BUFS(r7, 0xc0106418, &(0x7f0000000540)={0x7fffffff, 0x9, 0x5, 0x1f, 0x2, 0xc4b8}) r10 = accept4$unix(r0, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e, 0x80800) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r7, 0xc0a85322, &(0x7f0000000640)) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000700)=0x80000001) write$FUSE_GETXATTR(r6, &(0x7f0000000740)={0x18, 0xfffffffffffffffe, 0x4, {0x7}}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000840)={0x6, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}]}) ioctl$LOOP_CLR_FD(r10, 0x4c01) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000880)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000008c0)={0x3, 0x1, 0x5, 0x6, 'syz1\x00', 0x5}) r11 = gettid() wait4(r11, &(0x7f0000000900), 0x2, &(0x7f0000000940)) lsetxattr$security_ima(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='security.ima\x00', &(0x7f0000000a80)=@sha1={0x1, "4ca9a0517053d459ad5cfd7d96d13b5d8227fcd6"}, 0x15, 0x2) r12 = add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000b40)={r12, 0x2, 0x800}, &(0x7f0000000b80)={'enc=', 'pkcs1', ' hash=', {'sha1_mb\x00'}}, &(0x7f0000000c00)="2a77b4ea3eb3ec5ef8fbb10236b4f493101316c30c46e0845adf478cda431eda36af8d57407dde5b3ea876125e48052c888d0cf4009d0cf4540148d055425a5f6e528a84", &(0x7f0000000c80)=""/158) 12:51:26 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0xfffffffffffffdd8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f0000000140)='attr/sockcreate\x00') sendmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xb58}}, 0x0) 12:51:26 executing program 0: unshare(0x20400) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x10e, 0x1, 0x1, "12a0c6db58dc7155bd32863f402beedd", "969687d2710aa8d827d581cb955d333e12b2ba1c5afa431e2dbe9ab268ab6f677d098f7fc9c5609e74937930300ffaf4092d9e301727dcb11a251e38fa27322d257c886cadb3791e8bbfbee16e0b26e407b82d93cc1df142363e2cf8748dedad8ea6f451bfed6e8f0f80be76fd266b374622c2c99e5c0fcb750f400dbf3ec20297eb36af1bc6503dc28b1ffbf9cc3e782d2ea7a265a32d43100a523c0ad5d384815d085f1beeb90643f24d0a52963a814c13d540b53a82c2b7f16eaaff2ed3c9081166ea4e5a7c3e1dea82bdd7dd3a7fc6866ee58b2260b19484a085fe17a03190edfaf8a62cd918406c5c53719c6c533a23879d3ddd3ce7ec"}, 0x10e, 0x1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @dev={[], 0x16}, @dev={[], 0xb}]}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x6, 0x15, 0x20, 0x727, 0x1, 0x2, 0x7}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x480000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x10, &(0x7f00000002c0)={&(0x7f0000000100)=""/53, 0x35, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r1, 0x4) utimensat(r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) [ 223.999477] QAT: Invalid ioctl [ 224.003178] QAT: Invalid ioctl [ 224.006957] QAT: Invalid ioctl [ 224.010472] QAT: Invalid ioctl [ 224.015976] QAT: Invalid ioctl [ 224.032537] QAT: Invalid ioctl [ 224.066924] IPVS: ftp: loaded support on port[0] = 21 12:51:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) eventfd(0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000ec0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r1}, &(0x7f0000000200)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50180, 0x2) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r2}, 0x8) [ 224.249868] chnl_net:caif_netlink_parms(): no params data found [ 224.308711] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.315286] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.323244] device bridge_slave_0 entered promiscuous mode [ 224.334601] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.341118] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.349327] device bridge_slave_1 entered promiscuous mode 12:51:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x3267, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4000000000000000, @multicast2}, 0xffffff19) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x4b2, 0x42) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x1, "f1"}, 0x2) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x5c, 0x4) [ 224.406946] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.418304] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.454341] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.462698] team0: Port device team_slave_0 added [ 224.468906] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.477200] team0: Port device team_slave_1 added [ 224.483396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.491707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 12:51:27 executing program 0: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x21000103b, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) creat(&(0x7f0000000200)='./file0\x00', 0x0) [ 224.656563] device hsr_slave_0 entered promiscuous mode [ 224.694195] device hsr_slave_1 entered promiscuous mode 12:51:27 executing program 0: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) r1 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x21000103b, 0x0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) creat(&(0x7f0000000200)='./file0\x00', 0x0) [ 224.853814] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 224.861208] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 224.929529] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.936069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.943140] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.949600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.039147] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 225.045495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.057829] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 225.070415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.082927] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.091169] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.103645] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 225.120668] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 225.127267] 8021q: adding VLAN 0 to HW filter on device team0 12:51:28 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'veth0_to_bond\x00', {0x2, 0x4e23, @broadcast}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001060000000000000000000000009b706ff47a521a129cc294d922ec4894", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c0002000800130000000000"], 0x3c}}, 0x0) [ 225.143250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.151460] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.157970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.216674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.225096] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.231506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.240951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.255256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 225.262337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.270036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.278752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.304595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 12:51:28 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x220002, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000040)) write$sndseq(r0, &(0x7f0000000140)=[{0x81, 0x3, 0x0, 0x0, @tick, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0xffffff1c) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)) write$P9_RXATTRCREATE(r0, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x400, 0xfffffffffffffb34, 0x4, 0xfd08, 0x1, 0x4, 0x10001, 0x5, 0xbae, 0x8000, 0xd}) [ 225.311469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.319763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.332233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 225.341110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.352931] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 225.358977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.379802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.388132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.419083] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 12:51:28 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ptrace$cont(0x29, r1, 0x9, 0x7f) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/105, 0x69}, {0x0}, {&(0x7f0000000600)=""/61, 0x3d}], 0x3, 0x0) [ 225.448945] 8021q: adding VLAN 0 to HW filter on device batadv0 12:51:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x0, 0x0) close(r0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x1f, 0x7, 0x2, "7b237c16f1622745b8b65e2c9f7d17e9", "567fb7a5b5cde339a4de"}, 0x1f, 0x1) 12:51:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0x207843, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300002, 0x0, 0x0, @ipv4={[], [], @multicast2}, @mcast2={0x3e}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x80, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) write$input_event(r1, &(0x7f0000000180)={{0x77359400}, 0x1, 0x3, 0x200}, 0x18) ppoll(&(0x7f0000000200)=[{r0, 0xffffffffffffffff}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x1, 0x0) write$vhci(r3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1001) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f00000000c0)={0x8, 0x5, 0x7f, 0x3, 0x8, 0x3}) 12:51:28 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000300)=@hci={0x1f, r1}, 0x2b) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9b5117f117e9a7f4"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x0, 0x9}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "263135faeea98bd3"}}, 0x48}}, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r3, 0x80, &(0x7f0000000400)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x4, @remote, 0x7ff}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x1ff}, @in6={0xa, 0x4e20, 0xfc, @local, 0x5}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}]}, &(0x7f0000000480)=0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffee6, &(0x7f0000000880)={&(0x7f00000001c0)={0x1, 0xa77, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "712434898683e4b1dc4a24f8a4195961cd51c774e37f236d70e6439a5e16261a0f4a5a02eaa9af95646d8b8d88263e9a1ac10922d0057816ca9d08f6290c04a1"}}, 0x80}}, 0x0) 12:51:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) close(r4) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) ioctl$int_out(r0, 0x80804524, &(0x7f0000000000)) [ 225.802164] protocol 88fb is buggy, dev hsr_slave_0 [ 225.807671] protocol 88fb is buggy, dev hsr_slave_1 12:51:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0xffffffffffdfffff, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x29, 0x36, '\x00'}], 0x18}, 0x0) 12:51:29 executing program 1: r0 = socket$inet(0x2b, 0xfffffffffffffffe, 0x58) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1004e23, @local}, 0x10) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="29d28efae8a2ac645b4b2ffe1d4854dace27007dac644fff77a56ebc1e39ff200585426349766f4012a1fdbf09ac87f633ebe34f98eca71d6cae34cff256ad9a13452948be4db5f46195534f7fb650a274b34a03d1d9d34772f2897989e48214aae6dcd953605f452ccfc80205a96f77691565496392d9af1ac8d37bde62dab980c25fad2e8c07038120454e3fc5b0920feb4f33da5d4e916bcfdf882be022a082c84febce8e8ccc7e1b76c3cd", 0xad, 0x800, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 12:51:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000300)="9508e74896266325b9b1e76b0d8b66f81d11497c58367a67df9551ed2ab2e54c5bcd105497a25286018440d41466df13d79dd8a5c0798ed9a20afc7203439f2b8f84634fa98e32c60372e742254903fa5ec1aed97d008901795b8f084b470aaa6d5120c55fcecda22ee0128652344c4303babf684c0557b556ca3c059f116e6a3261223cd6ccd5cda66337e5b23952d5790fc8d9bbc13a6ed4a976faaec8c43d76bd957ee35315169a745bb400792f52b3443aa94db6a7617d1fab41312554020f8513c8ed5775e79a60dc8151") r2 = accept(r0, &(0x7f0000000080)=@in, &(0x7f0000000100)=0x80) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000280)=0xc) bind$can_raw(r2, &(0x7f00000002c0)={0x1d, r3}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0xd8) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x2f) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 12:51:29 executing program 1: r0 = socket(0x10, 0x200000000000803, 0x0) write(r0, &(0x7f0000000000)="24000000190001f0008000361731ed640adfa90100b70006000000cc08000f00fed70000304a02bcf75f27ba46e3156a", 0xffffffffffffff6f) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) [ 226.254663] binder: BINDER_SET_CONTEXT_MGR already set [ 226.260082] binder: 10190:10193 ioctl 40046207 0 returned -16 [ 226.290505] binder_alloc: 10190: binder_alloc_buf, no vma [ 226.296459] binder: 10190:10193 transaction failed 29189/-3, size 10-0 line 3035 12:51:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x2}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000200db73c1f0d60a19571c3464100ff0ae4de8a3131cb5e21cbf0b20e9a4e75320f68b0d3c47eefdf583d30b87a90a372f0aed0788f264c3e5445ed86e6f54e45e484007e64d6f18d6b880579ccba3b9e01b3e3f7fc19a82f25771f44a78544a150e850397b8880c5d51c37d2f8e441d2838672840ee3c0759fdbc42acd087581cdb6436c15e5a413068509ad7e"], 0x14}}, 0x0) [ 226.306912] binder: undelivered transaction 2, process died. 12:51:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@bridge_newneigh={0x28, 0x1c, 0x21, 0x0, 0x0, {}, [@NDA_DST_MAC={0xc, 0x1, @remote}]}, 0x28}}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400200, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x3, 0x80000000}) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x20000, 0x0) 12:51:29 executing program 1: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = shmget$private(0x0, 0x4000, 0x1031, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getgroups(0x6, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xee00, 0x0, 0xee00, 0xee01]) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000300)={{0x7, r4, r5, r6, r7, 0x20, 0x8}, 0x4, 0x9, 0x2, 0x8, r2, r2, 0xff}) 12:51:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0xe, 0x0, &(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000000)) [ 226.618705] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 12:51:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r2, 0x8be2, 0x1f}, 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100080c1000000000000004fcff", 0x58}], 0x1) 12:51:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x5, 0x15}, {0x4, 0x2}]}, 0x14, 0x2) unshare(0x400) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x40003, 0xc04e27d3b503e3df}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000000c0)={0x100000000000000, 0x10005, 0x4, 0x3, 0x1b}) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x7, 0x101003) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x8, 0x4) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e20, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xa, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0xffffffffdffffffe) 12:51:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7ffd, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x9}) r1 = accept(0xffffffffffffff9c, &(0x7f00000001c0)=@rc, &(0x7f0000000240)=0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x910) openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) accept4$tipc(r1, &(0x7f0000000280)=@id, &(0x7f00000002c0)=0x10, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @timestamp, @mss={0x2, 0x2}, @mss={0x2, 0x5}], 0x4) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x4000) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000040)={0x47f, 0x5}) 12:51:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffff199}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:51:30 executing program 0: r0 = gettid() exit(0x0) ioprio_get$pid(0x2, r0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) getgroups(0x1, &(0x7f00000000c0)=[0xffffffffffffffff]) setgid(r2) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v1={0x2, "7e90339db4d3cf41589a9fd6"}, 0xd, 0x2) 12:51:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x40000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x23, "b597018493af0a81f105e8cd6f79c329921f44ff3c49f5d3fbb527aaf25052135bb9b9"}, &(0x7f00000000c0)=0x2b) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0xeda, 0x1, [0x7ff]}, 0xa) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007fbff002) 12:51:30 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x406003, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000500)=""/119, &(0x7f0000000440)=""/192, &(0x7f0000000580)=""/220, 0xf000}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x1}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005001, 0x0) 12:51:30 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000180)={"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"}) capget(&(0x7f0000000140)={0x20071026}, 0x0) 12:51:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0xfffffffffffffffc, 0x2, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) [ 227.675894] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 12:51:31 executing program 0: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x20141042, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 12:51:31 executing program 0: unshare(0x600) pipe2(&(0x7f0000000000), 0x84000) syz_open_dev$usbmon(&(0x7f0000000600)='/dev/usbmon#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}, 0x0) 12:51:31 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)=@raw={'\x05\x00\x00\x00\x02\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x03\x03\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xc8, 0x130}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000039d18)=@raw={'\x05\x00\x00\x00\x02\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x03\x03\x00', 0x9, 0x3, 0xfffffffa, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000025000), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @common=@inet=@LOG={0x0, 'LOG\x00', 0x0, {0x0, 0x0, "50345fc21378bc8f6da6263e3715f555f23e413a61787ecaea02755a391d"}}}], {{[], 0x0, 0x252, 0xd0}, {0x29f}}}}, 0x2c) 12:51:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) lsetxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.SMACK64EXEC\x00', &(0x7f0000000400)='bond_slave_0\x00', 0xd, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond_slave_0\x00', 0x10) syz_emit_ethernet(0x1c2, &(0x7f0000000440)={@broadcast, @broadcast, [{[], {0x8100, 0xb9, 0x3, 0x1}}], {@mpls_mc={0x8848, {[{0xff, 0x80000001, 0x5, 0x8001}, {0x400, 0x4, 0x6, 0x10000}], @ipv4={{0x28, 0x4, 0x5, 0xff, 0x1a8, 0x66, 0xc0, 0xffffffffffffff41, 0x77, 0x0, @local, @rand_addr=0x401, {[@ssrr={0x89, 0x1b, 0xfffffffffffffff9, [@loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x101, 0x0}, @loopback, @empty]}, @generic={0x94, 0x9, "30c2a4648eabd9"}, @ssrr={0x89, 0x13, 0x9, [@loopback, @loopback, @local, @broadcast]}, @timestamp={0x44, 0x1c, 0x7, 0x1, 0x18e, [{[@empty], 0x2}, {[@broadcast]}, {[@broadcast], 0x4}]}, @timestamp={0x44, 0x28, 0x0, 0x1, 0x7, [{[], 0x7fffffff}, {[@local], 0x6}, {[], 0x100000000000}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x7fff}, {[], 0xffffffffffffff7f}, {[@dev={0xac, 0x14, 0x14, 0x27}], 0x7}]}, @generic={0x0, 0x9, "fbd08a1b332303"}, @noop, @generic={0x94, 0x5, "2dbccd"}]}}, @tipc=@name_distributor={{0x108, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x4, 0x0, 0x1, 0x4, 0x4, 0x2, 0x4e21, 0x4e21, 0x9, 0x3, 0x0, 0x0, 0xb9}, [{0xb8, 0x9000, 0x101, 0x40, 0x3, 0xb397, 0x9, 0xae79}, {0x6, 0x0, 0xd3, 0x100000000, 0x3, 0xcb, 0x1, 0x8}, {0x2, 0x7fffffff, 0x4, 0x80000000, 0x7, 0x200, 0x7, 0x9}, {0x6, 0x1f, 0x2, 0x6, 0x800, 0x8, 0x0, 0x9}, {0x7fffffff, 0xfffffffffffffffe, 0x9, 0x1f, 0x80000000, 0x1, 0x7f, 0xffffffff}, {0x58ea770f, 0x0, 0x1, 0x1, 0x10001, 0x3f, 0x8, 0x1}, {0x96, 0x3f, 0x8, 0x5, 0x4, 0x0, 0x1f, 0x7ff}, {0xff, 0x3, 0x0, 0x55, 0x6428, 0x200000, 0xffffffff7fffffff, 0x1}]}}}}}}, &(0x7f00000002c0)={0x1, 0x1, [0xc8a, 0x130, 0xea7, 0x2fe]}) syz_emit_ethernet(0x140, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaa0200aaaaaaaaaaaabb86dd6050a09c00081100fe80000000000001aab353541bbba816fe8000000000000000000000000000aa4effff200008907892ee8eec353a16a92b4bd0ef4e5654b92e7f1f76498030aeb2d25d026b230364d84df6c9a67660efe575ace994f7fbae59e8300e"], 0x0) 12:51:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x440, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000002c0)={0x4, 0x1, 0x9, 0x100000001, 0x5}, 0xc) socket$inet6(0xa, 0x6, 0x80000001) r3 = getpid() openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440)='/dev/video35\x00', 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00') sendmsg$FOU_CMD_GET(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x11) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x22, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40001) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000640)) rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nullb0\x00', 0x88000, 0x0) recvfrom$unix(r0, &(0x7f0000000180)=""/144, 0x90, 0x40000000, &(0x7f0000000080)=@file={0xb6105befa7f0e744, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000480), 0x80000) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000040)={0x0, 0xfffffffffffffe68}) 12:51:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002a00)={&(0x7f00000001c0), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)=ANY=[@ANYBLOB="1c0000401800050500000000000000001c1414000000000000000000"], 0x1c}}, 0x0) 12:51:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x1, 0xf9, "7a93299e9060e7220e632cb41bec22fa7cdf7fe2531f5c9309d2ebb7ad926d26785d671b90e08075b12fd017a27ef7681e18e6db02889250840846e40d9f055b4886489d9caab0bda2e68359cffb724c09010f92125f31f8612187f62121037b3a05b42363acc96b7f0d28429742f8f679243d8eefe3914f6d355fbf58a7213d06ae5eead6847fb513f9ddd8c3fe1a65483d3961f50c0fcf002db75ad6f4d946b365148bcf07f05ad9691c63a7d2a48e9f607ec24301f506a1cf212fca681e2d88831f79b47a3a3f093e097681ae29194501bac6edca3e251e18fdac95572c36738fc43f73d7aa36de8944f6ba5b7cbde35f89de3a6336119f"}) lseek(r0, 0x0, 0x80080009) 12:51:31 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8c, 0xa001) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@remote, @loopback}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xfffffffffffff6d0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x5, 0x30}, 0xc) r2 = getgid() io_setup(0x9, &(0x7f0000000140)=0x0) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffc01, r0, &(0x7f0000000180)="959d51e2ada92f97ee925f7fb7a9a7ef75975f62d5b9f39b3c56e832ae5e2f04392b814a2cdf2cc54cdfd1efe1eb8689308f18580aa0753ba578a2b41b0827ade8cacba47ece150e906a4e76785cfcba31ee740009a0ae0b0bce850510292e191c8db0a79d2e3b5cc47aed496ba26fc7e117c9cdd73a0664a4f4359d5e141fdecd4451c19ac68af88b444e8a457daccd", 0x90, 0x0, 0x0, 0x1, r0}, &(0x7f0000000280)) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000002c0)=0x1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000300)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f0000000340), 0x0, {0xa, 0x4e23, 0x538e, @empty, 0x723}, r4}}, 0x38) fcntl$setsig(r0, 0xa, 0x12) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000440)) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000480)={0x3}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000580)={0x8a, &(0x7f00000004c0)=""/138}) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000005c0)={r1, 0x1}, 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000600)={0x0, 0x2, 0x0, 0xffffffffffffacc5}) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() fsetxattr$system_posix_acl(r0, &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x4}, [{0x2, 0x2, r5}, {0x2, 0x3, r6}], {0x4, 0x5}, [{0x8, 0x1, r2}], {0x10, 0x1}, {0x20, 0x4}}, 0x3c, 0x2) r7 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vfio/vfio\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000780)={r1, 0x1}, 0x8) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) rt_sigprocmask(0x2, &(0x7f00000007c0)={0x7}, &(0x7f0000000800), 0x8) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x20000000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000980)=0xffffffff, 0x4) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000009c0)={0x5, 0x3, @raw_data=[0xfff, 0x7, 0x5, 0x4, 0xfffffffffffffffb, 0xf41d, 0x0, 0x80, 0x0, 0xfffffffffffffe00, 0xc9ad, 0x2, 0x94e, 0x101, 0x6, 0x7f43]}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000a40)={r1, 0xfff, 0x30}, &(0x7f0000000a80)=0xc) 12:51:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c120085719070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000002d00)=[{&(0x7f0000002b00)="b1", 0x1}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="db66716c"], 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x2, 0x8) close(r2) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00\x00\x00\x00\x10\x00', 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x8, 0x1000, 0x101, 0x3}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x200000, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000026c0)={&(0x7f0000000100)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000240)="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", 0x5a8}], 0x1}, 0x8000) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) 12:51:32 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0xfffffffffffffe06) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) r1 = dup3(r0, r0, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x28, &(0x7f0000000100)}, 0x10) r2 = socket$kcm(0xa, 0x122000000003, 0x11) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x114, r3, 0x202, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x94}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffff75}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x114}}, 0x4) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)="035db86376863a68fe800000000000004208c349d7c40346d59be1310600d92c2ae7e012e28b857c8f2bca9d7f6e6a6a", 0x30}], 0x1}, 0x0) [ 229.183785] Dead loop on virtual device ip6_vti0, fix it urgently! [ 229.205785] Dead loop on virtual device ip6_vti0, fix it urgently! 12:51:32 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0xfffffffffffffe06) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) r1 = dup3(r0, r0, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x28, &(0x7f0000000100)}, 0x10) r2 = socket$kcm(0xa, 0x122000000003, 0x11) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x114, r3, 0x202, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x94}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @empty, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffff75}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x114}}, 0x4) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)="035db86376863a68fe800000000000004208c349d7c40346d59be1310600d92c2ae7e012e28b857c8f2bca9d7f6e6a6a", 0x30}], 0x1}, 0x0) [ 229.281850] IPVS: ftp: loaded support on port[0] = 21 [ 229.341083] Dead loop on virtual device ip6_vti0, fix it urgently! 12:51:32 executing program 0: unshare(0x8000400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc08c5102, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}) 12:51:32 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, &(0x7f0000000280)) mount(&(0x7f0000000300)=@nbd={'/dev/nbd'}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='\x00\x00\x00\x00qA\xce\xaf\x82_N(\x11\x00', 0xc20, &(0x7f0000000140)='sysfs\x00') r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) [ 229.497857] chnl_net:caif_netlink_parms(): no params data found [ 229.573528] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.580015] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.588068] device bridge_slave_0 entered promiscuous mode [ 229.610787] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.617496] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.625560] device bridge_slave_1 entered promiscuous mode [ 229.663021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.675460] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.710011] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.718348] team0: Port device team_slave_0 added 12:51:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)={0x20, 0x28, 0x5, 0x0, 0x0, {0x3}, [@typed={0xc, 0x4, @u64}]}, 0x20}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x200082) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='}ppp1md5sum\\!\x00', &(0x7f0000000140)='*\x00', &(0x7f0000000180)=':-\x00', &(0x7f00000001c0)='-)GPLsystem&vmnet1:selinuxwlan1[md5sumGPLnodev[ppp1eth1$\x00', &(0x7f0000000200)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='!$:\x00', &(0x7f00000002c0)='bdev:\x00', &(0x7f0000000340)='!/securityproc\xbd-em1\x00', &(0x7f0000000380)='&cgroupuser)\x00'], 0x1000) [ 229.724745] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.733169] team0: Port device team_slave_1 added [ 229.739236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.747591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 12:51:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x6, 0x3, 0x291209cf, 0x344, 0x15, 0x2, 0x7fffffff, 0x401, 0x1ff, 0xfff, 0x5de4, 0x1f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) keyctl$join(0x1, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x400455cb, 0x0) [ 229.816177] device hsr_slave_0 entered promiscuous mode [ 229.862609] device hsr_slave_1 entered promiscuous mode [ 229.892473] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 229.905411] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 229.919914] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 229.935945] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 12:51:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000619ff3)='/dev/snd/seq\x00', 0x0, 0x80001) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000004}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0xfffffffffffffff8, 0x2, 0x0, 0x6, 0x80}) epoll_pwait(r1, &(0x7f00004a2ff4)=[{}], 0x1, 0x0, 0x0, 0x0) [ 229.964265] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.970750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.977863] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.984411] bridge0: port 1(bridge_slave_0) entered forwarding state 12:51:33 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x4000000000000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x6, 0x21, &(0x7f0000000040), &(0x7f0000013000)=0x4) dup3(r1, r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000), 0x4) close(r0) [ 230.163419] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 230.169556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.196602] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 12:51:33 executing program 0: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000002040)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmsg(r0, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x1a, 0x0, 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x4001211c) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000780)={0x2c, 0x0, r1, 0x25}, 0x10, 0x0, 0x3ab}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0x2, 0x2) process_vm_writev(0x0, 0x0, 0xfffffffffffffff8, &(0x7f0000000cc0)=[{&(0x7f00000008c0)=""/223, 0xdf}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003340)=""/120, 0x78}, {&(0x7f0000000b40)=""/49, 0x31}], 0x4, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000002140)=""/186, 0xba}, {&(0x7f0000000f00)=""/124, 0x5f}, {&(0x7f0000000bc0)=""/226, 0xe2}, {&(0x7f0000001fc0)=""/69, 0x45}], 0x4, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 230.217543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.226469] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.237875] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.260798] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 230.286462] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 230.293129] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.323870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.333075] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.339520] bridge0: port 1(bridge_slave_0) entered forwarding state 12:51:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x800000000032, 0x2) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='gre0\x00', 0x10) sendto$inet(r1, &(0x7f0000000180), 0x231, 0x0, 0x0, 0x0) [ 230.384207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.392421] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.398853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.408097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.460188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.470020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.481265] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 230.508461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.517059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.525658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.534155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.559669] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 230.580768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.592564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 12:51:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20, &(0x7f0000000000)="220d93a30c4c4ca9d5af353ff644bc84ae1cca6ccbbab67656606f816d57b61af38e45fface8") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x4040, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000180)={0x0, 0x4, 0x3, &(0x7f0000000140)=0x1}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="e821d0023c123f3188a070") r2 = socket$inet(0x10, 0x2, 0x0) tee(r0, r0, 0x0, 0x8) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000001e0007041dfffd946f610500020000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 12:51:33 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x881, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)='|', 0x1}], 0x1) 12:51:33 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x7, 0xffffffff, 0x101, 0x101}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x6}, &(0x7f00000000c0)=0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x33c) bind$tipc(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) 12:51:34 executing program 1: unshare(0x20400) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x103080, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x84000, 0x0) tee(r0, r1, 0x3f, 0x0) [ 231.021704] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 231.030048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 12:51:34 executing program 0: r0 = socket$kcm(0xa, 0x8000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8982, &(0x7f00000000c0)={r0}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x401, 0x400) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000140)={@rand_addr=0xfb2, @multicast1, r3}, 0xc) write$capi20(r2, &(0x7f0000000040)={0x10, 0x4, 0x84, 0x80, 0x0, 0x4}, 0x10) 12:51:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x7f}) close(r0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffff0001, 0x200) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x28, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x24004800) 12:51:34 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x80000000, 0x8, 0x3}) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000010307031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000000000000000000", 0x4c}], 0x1}, 0x0) 12:51:34 executing program 0: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x2, 0xc, 0x4, 0x1500000, {}, {0x4, 0x8, 0x0, 0x10000, 0x2, 0x6, 'j\aee'}, 0xe141, 0x2, @offset=0xfff, 0x4}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffffffffffc0, 0x200) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xf94}, 0x1c) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x0, [], [0xc1]}) [ 231.370714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.387701] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.399565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.414241] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 12:51:34 executing program 1: r0 = socket(0x10, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000000, 0x0, @mcast1}, 0xfffffffffffffd0d) sendto$inet6(r0, &(0x7f0000000040)="f75e4bbb3e68665c0b280c2b1e86203352ce119bcfb76f3625323dbf465c04a507dff865c48c6c1442e8", 0x2a, 0xfffffffffffffffc, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0xfc00000000000000}}, 0x1c) 12:51:34 executing program 2: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040), &(0x7f0000000140)="ebc46ce37cb8b695adc61d9e3e5682bf67350cccbd78f81e6d4468cf74298962e4d36844ef7072de5baa4e9eaf96e52e89783d9fc20a63601ed39f7438377671b0cafb3b8207d7b183e29c54b16c8925a0cc8bbff2d3fb635da9d0a9c0adc3fdf40052f2a0d3ea7467a489c78104f6533a92d2fdce10018f", 0x78, 0xffffffffffffffff) 12:51:34 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ef", 0x1}], 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioprio_get$pid(0x1, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) getpriority(0x1, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x101000, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000100)=0x8001, 0x1) 12:51:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x80000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) 12:51:34 executing program 2: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040), &(0x7f0000000140)="ebc46ce37cb8b695adc61d9e3e5682bf67350cccbd78f81e6d4468cf74298962e4d36844ef7072de5baa4e9eaf96e52e89783d9fc20a63601ed39f7438377671b0cafb3b8207d7b183e29c54b16c8925a0cc8bbff2d3fb635da9d0a9c0adc3fdf40052f2a0d3ea7467a489c78104f6533a92d2fdce10018f", 0x78, 0xffffffffffffffff) 12:51:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r1 = getpgrp(0x0) capget(&(0x7f00000001c0)={0x20080522, r1}, &(0x7f0000000200)) 12:51:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0078ca1056008c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6da0500000000000000e7d9f9ef34314c96741769248111142a6bb52405d3bedd9443cf4dca2399a0ac96abc961ea74dff92fd7c424fb00b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97634b5bf66cefe23aaa8d8f5368911200006306b2672e06897dbf08d8fbfcf7ffffffe6b8"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x0, 0x0) add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:51:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0xce, 0x10000000800002c0]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 12:51:35 executing program 0: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000000c0)=0x81a, 0x4) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/231, 0xe7}, 0x100000000000}], 0x1, 0x0, 0x0) 12:51:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x2000400) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) 12:51:35 executing program 2: mount(0x0, &(0x7f00000001c0)='.', &(0x7f0000000000)='vfat\x00', 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f000000066138beca78db7a5b0000f9e000000000000000200100000000000068060000680600006806000068060000c50f5868060000065e50e96ed8ab39a042c6dc4fefdc66db5df383e0c431cf4cb3f718efe5152c41d28e5dfea5e07b4ac605000000000000006e0d6270a2501375c45c74e6089adb02f250643ae1f21d63a52bf5b7aec992e87f74f906a6cdba885cde4199e4afe1571b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800200100000000000000000000000000000000000000000000000030007372680000000000000000000000000000000000000000000000000000007f07069701000008102400000000000028004e465155455545000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028015001000000000000000000000000000000000000000000000000380074696d65000000000000000000000000000000000000000000000000000004000000fd060000b9370100e7bb000004000000010000002800727066696c746572000000000000000000000000000000000000000000000100000000000000280053594e50524f5859000000000000000000000000000000000000000000000100000000000000fe80000000000000000000000000001c00000000000000000000ffffac14142900000000ffffff00ffffffff00000000ffffffffff0000008a5383c4ffffff00726f736530000000000000000000000069703665727370616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006008a0404000000000000000000000000000000f00038010000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000d000000000000004800444e5054000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000200000000000000000000000027216a0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180160010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000004000000000000002800727066696c7465720000000000000000000000000000000000000000000008000000000000004800534e5054000000000000000000000000000000000000000000000000000000000003000000000000000000000000ff02000000000000000000000000000101320a00000000000000000000000000000000000000000100000000000000000000000000000000ff000000ff000000ffffffffff0000ff000000ffffffff00ffffffff000000ff626f6e645f736c6176655f31000000007465616d300000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600010000000000000000000000000000000000380160010000000000000000000000000000000000000000000000004800686268000000000000000000000000000000000000000000000000000000fffeffff04010500050001002000f8ff02008100d900030000000100415d0300f50a0700010004002800727066696c746572000000000000000000000000000000000000000000000000000000000000280044534350000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x798) 12:51:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f0a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x101000, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) recvfrom$packet(r2, &(0x7f00000000c0)=""/21, 0x15, 0x40, &(0x7f0000000180)={0x11, 0xff, r3, 0x1, 0xc8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x6}]}) 12:51:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x77eb744c, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x82) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x3e) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x36314d59}}) 12:51:35 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) readv(r0, &(0x7f0000000b40)=[{&(0x7f0000000240)=""/37, 0x25}], 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x1000000002, {0x4, @raw_data="7b89b2ee9eb67b0138a0efe93145387183fa0451f7e358e7c38ba97a8dd6669d2c48b3cfd6c57b38f961818f5c3edf70e3105e0f3846e1f72e91cd098c44873584457083d2d8e04f964d37f43685f09a0504f087995cc0a66bfc3888f9b4e1abad3f94c5a4901d0210cc8f0e0ccace768386234efc8641fe112510bc8cd8226b203bf6b0ebf938d532840dc91aed35a2f59dc865abee65e65054f267329d6feda3918f32857168266ee2be3db861308db42e5d48fe715d5423bcef884a471429b87348ed3a2f58c1"}}) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000000, 0x4800) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@local, @broadcast, @remote}, 0xc) 12:51:35 executing program 1: syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x8) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90}, 0x90) 12:51:35 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x101, 0x200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000080)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x101) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f00000000c0)=""/121) 12:51:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980914, 0xfdfd}) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gfs2\x00', 0x80000, &(0x7f0000000100)='/dev/video35\x00') close(r1) 12:51:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) init_module(&(0x7f0000000100)='selinuxsecuritysecuritysecurity\x00', 0x20, &(0x7f0000000140)='md5sum\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020a40b0009000200001d85680c1baba20400ff0100000000110affffba010000000009b356da5a80d18bf64c8546c8243929db2406950cd37ed01cc0", 0x4c}], 0x1}, 0x0) 12:51:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) unshare(0x20400) ioctl(r0, 0x2285, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x4a5c, 0x6c2, 0x1, 0x1, 0x0, 0x9, 0x9, 0x2, 0x2, 0x80000001, 0x1551, 0x8001, 0x9, 0xfffffffffffffffa, 0x4, 0x8}}) 12:51:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0, r1}}, 0x18) ioctl(r0, 0xfffff7ffffffffb1, &(0x7f0000000200)) 12:51:36 executing program 1: r0 = gettid() rt_sigqueueinfo(r0, 0x2e, &(0x7f0000000000)={0x40, 0xe6f, 0x800}) rt_sigprocmask(0x103, &(0x7f0000000180)={0x9}, &(0x7f0000000140), 0xffffffa6) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x4, @remote, 0x5}}, [0x40, 0x8519, 0x80000001, 0x0, 0xd4, 0x7, 0x7ff, 0x0, 0xad, 0x10000, 0x8, 0x9, 0x7, 0x8, 0xfffffffffffffffc]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r2, 0x9}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getpid() r3 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x200, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f00000001c0)={0x2, 0xb, 0x27, "2ab16e6bb344c4d0c66e4f15400b07ff3192fabd2631fffd7fc3f9765b21bba2ce86205d91a8d8cdb91cc0eb3242eac143f1304e9d6f977fedc353e6", 0x36, "dd7d3fc8cb41eb75f1704eb67d4bffda8ae6235ed52e42f99c2c51ac2e73011deb6011645bdbb82a13c6cf2106ccd6094b89052daa32cb64779298be", 0x8}) rt_sigprocmask(0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x8) 12:51:36 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000180)=0x1, 0x4) r2 = dup3(r0, r0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000080)={0x2, 0x1, @start}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x0, @broadcast, 0x4e22, 0x4, 'dh\x00', 0x2, 0x80, 0x20}, 0x2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) 12:51:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6_sctp(0xa, 0x8000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) poll(&(0x7f0000000000)=[{r1}, {r1}], 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7ff, 0x800) setsockopt$inet_tcp_int(r2, 0x6, 0x4c7f8b375584d002, &(0x7f00000000c0)=0x5, 0x4) 12:51:36 executing program 1: r0 = socket$inet(0x10, 0x3, 0xffffffffffffff00) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e28000000100043ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b287bf4042d1", 0x4c}], 0x1}, 0x0) [ 233.186498] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 233.211428] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 12:51:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2a, 0x5a, &(0x7f0000000100)="8d56f8be6d3e72a1ac63844e935ab90fced8df5142e818f6f22e874d3395f4b332765b8b92cc8f7e39a4", &(0x7f0000000180)=""/90, 0x800}, 0x28) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000000080)='/', 0x1) sendfile(r0, r0, &(0x7f0000000640), 0xfee) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x81010, r0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000000)) 12:51:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) r2 = open(&(0x7f0000000300)='./file0\x00', 0x2000, 0xc32c8b60d92c8bc9) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000380)) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x1c}, @loopback, r1}, 0xfffffffffffffe30) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000340)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0xffffffff}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000440)={0x164, 0x3ff, 0x8, 0x167100000, 0x100, 0x7, 0x1, 0x14b, r3}, &(0x7f0000000480)=0x20) modify_ldt$write(0x1, &(0x7f0000000140)={0x10001, 0x20001800, 0x5400, 0x40, 0x3, 0x3, 0x0, 0x8000, 0xffffffff}, 0x10) 12:51:36 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x8000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x1800000, 0x6, 0x2, 0x0, 0x0, [], [], [], 0x8, 0x9}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 12:51:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4000000000009, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20400200) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'netdevsim0\x00', {0x2, 0x4e22, @remote}}) 12:51:36 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x30314142}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0xe, @pix={0x7ff, 0x81, 0x3a716f77, 0x7, 0xbbc, 0x1, 0x9, 0x8, 0x1, 0x3, 0x2}}) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 12:51:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2, &(0x7f0000000f00)=""/24, 0x18}}], 0x1, 0x0, &(0x7f0000003380)={0x77359400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f00000006c0)='/dev/input/mouse#\x00', 0x401, 0x400000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000900)='/dev/rtc0\x00', 0x101000, 0x0) r3 = dup3(r1, r2, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xff) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f00000007c0)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x0) process_vm_writev(0x0, &(0x7f0000002080), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000280)={r5}) write$apparmor_exec(r4, &(0x7f00000002c0)={'stack ', '/dev/null\x00'}, 0x10) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 12:51:36 executing program 0: r0 = socket(0x10, 0x6, 0x2000000100000000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000680)='n\x00t/ip_mr_ca\xff\x01e\x8f') r3 = socket$inet6(0xa, 0x3, 0x3a) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000700)={0x0, 0x17, &(0x7f0000000800)="5240e437d0613ac30b25e562f868cf69da4ddab893fb18"}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000200)=0x6) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000d40), &(0x7f0000000840)=0x215) syz_emit_ethernet(0x65, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60d8652b000b2c00fe8000000000000040000000000000aafe8000000000000000000000000000aa2c000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000006c0)={0x0, 0x0, 0xffffffff, 0x68ca, 0x1}, 0xffffffffffffffa2) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000880)={@dev, @rand_addr, 0x0}, &(0x7f0000000000)=0xc) unshare(0x2000400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r6, 0x50, &(0x7f00000002c0)}, 0x10) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@empty, @empty, @mcast1, 0x200, 0x80000000081, 0x987, 0x400, 0x8, 0x1260312, r5}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000780)=""/81) sync_file_range(r4, 0x2, 0x1fef721d, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r7}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23}, 0x4, 0x3, 0x0, 0x1}}, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote, 0xf8}}}, &(0x7f0000000740)=0x84) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000000280), 0x1f4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) 12:51:36 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40400) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r2 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x88, 0x1, 0x4}) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x1) 12:51:36 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="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", 0x534, 0xc001, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000940)="3ce95c98b66a9cdea42aca63276ef1eca3f038047504ba09072b9792bbe041c012d015e0f9cdf7aa7a4d18766deff9a2735edc11437a10c0e9f265c48e7033f01161d5ca1babf5738b4c3df116d964712d2c577d1181a2a242ab4ada0b6cd45c1f36c27a7453575b33cdd7300a74dd585eab465795dccddd26", 0x79, 0x400c000, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x4, 0xfffffffffffffe8b) 12:51:37 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = socket$packet(0x11, 0x200000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @dev}, 0x10) 12:51:37 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x4000002) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x4) 12:51:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/100) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x8, 0x5}]}, 0xb, 0x3) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000001c0)={0x4, 0x6, [{0xfffffffffffffff8, 0x0, 0x7}, {0x7, 0x0, 0x80000001}, {0x9, 0x0, 0x1}, {0x5}]}) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x10000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x4b564d02, 0x3]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 12:51:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x3c]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000000d00)=""/4096, 0x13e0) 12:51:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x4, 0x5, 0x3d}) r1 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xfdffffffffffffe0, 0x1000012000) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) sched_getscheduler(r2) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x6000000000000}, 0x28, 0x2) [ 234.549721] input: syz1 as /devices/virtual/input/input7 [ 234.568148] input: syz1 as /devices/virtual/input/input8 12:51:37 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000280)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000000)='./file0/../file0/file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2) io_setup(0x101, &(0x7f0000000040)=0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3ff, 0x400000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0xf, 0x200, r1, &(0x7f0000000140)="6c38222e05f42e7ab0385a90c4604e5eb18c488b09c4c6ca5a20c9c8d5ed71405e39e789c5faf4008b6d75a30d6e438590b6ed938762376a4e3e84d5e16715008e93e3daf3230794136746fc659a6ca0d723bb0093c41b3605cb5ee69ba376beaa5233d62e74ed62caaba6308595c01079cf4662138de85641cf205086dcde04370ebd28220c406dfae4a302954921e86eec5371b075748b92174965b8fbf9f57e14fb5174a28ceec752512afacbb59fda17", 0xb2, 0x8, 0x0, 0x0, r2}]) unshare(0x20020000) 12:51:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='@']) pivot_root(&(0x7f0000000040)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x101000) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) read$FUSE(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 12:51:37 executing program 2: r0 = socket(0x15, 0x80005, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000400)={@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, {0x0}, 0x0}, 0xa0) 12:51:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x7, 0x40) r2 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x8, 0x448000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000300)={0x2, r2, 0x1}) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0xc2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x5}}, 0x0, 0xcc, 0x400, 0x9, 0x10}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000140)={r4, @in={{0x2, 0x4e23, @rand_addr=0x7}}, 0x0, 0x3, 0x7, 0x6, 0xff}, &(0x7f0000000200)=0x98) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x2000, 0x0) 12:51:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x2, 0x1, 0x2, 0x7, 0x0, 0x2, 0x80000, 0x4, 0x2, 0x10001, 0x9, 0x2, 0x80000000, 0x3, 0x400, 0xffffffffffff9254, 0x1, 0x1, 0x78, 0xfb9, 0xb2, 0x8, 0x401, 0xae0d, 0xffff, 0x3, 0x80000000, 0x100, 0x57, 0xfffffffffffffff8, 0x2d46, 0x2, 0x4, 0x9, 0x2, 0x4, 0x0, 0x5f, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x1, 0x2, 0x13d5, 0x0, 0x1735, 0x3, 0xb74}, 0x0, 0xe, r1, 0x3) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @remote, 0x0, 0x0, 'wlc\x00', 0x0, 0x0, 0x81}, 0x2c) 12:51:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x141082, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0x1f, 0xfffffffeffffffff, 0x7, 0x80000000, 0x6, 0x7ef0000000000000, 0x7, 0x1, 0x6, 0x8001}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000240)) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000040)) 12:51:38 executing program 2: r0 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="357426e67efb9a73eea8b48a04a5a6c60bb00f654f0cee28b08631c3d288a35d2cc174ad4b797e94319b9ba6b1ed6dc092b551333e689c472ba3cb46a631eadd5483dfdc350a21d566d72612fc0041e8c2c7bcfda625819b655c1a7dd6d3f128b68c37fd7a55d8d11cbf930e91ea075cb116e88c4a4255693972feef1a06f1fda9d3de9fe401685271a3e8aa6583fee07ce48dba029a9769caf6e7f73aca653c12604487edda7207290353e67d098c34c841a2d5", 0xb4, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='@vboxnet0\x00', 0x0) keyctl$negate(0xd, r0, 0x1, r1) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x11) getdents64(r2, &(0x7f0000000200)=""/127, 0x7f) name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="b2000000040094d183782c6e10cbbb22a4e94391a15668d43eec478dc9f1bf207672c738bb1f6436689ed0131b07feb12d6cd58508d84ac1db55ecbc514a0dbdd7d21a121658585423806e644d7077c68b363fcba614e701dcd9078d0b1c4e86d2399ff4df802f8a8575223f878b0759851d238bf0cc2345a1b18853a9d9253d7cd6a621a07151e9298d2ab119b089ab43c6744e1da0900d1d839b1e7f8dc3f344c8af8598fe94b3513c9f9949e2"], &(0x7f0000000180), 0x1000) lseek(r2, 0x8000000, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80800) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) getdents(r2, &(0x7f00000002c0)=""/23, 0x1) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f00000001c0)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000280)=[0x3, 0x2], 0x2) 12:51:38 executing program 1: write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32]]], 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = getpgrp(0x0) tgkill(r0, r1, 0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000004c0)={0x4f5b317cbae2b9fc, @reserved}) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={'crct10dif\x00'}}) 12:51:38 executing program 2: unshare(0x4800000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x22000, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000001c0)={0xc0000000, 0x7, "0aaaaa8bf59c5f276882334ce57b31b2d8aacaaf5c18bd40fca6f569bcd5c7cb", 0x2, 0xba, 0x4, 0x8, 0x3, 0x8001, 0x80, 0x3f, [0x183d, 0x8, 0x80000000000000]}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)={r1, 0x5e48}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x403, 0x0) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) 12:51:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x1b) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)="1359965451400036617160d455908e2cc0ef7a67c85dac7e1ea9c186710fa992226099c7fd4843db1657c781611aad567eeb3fca6404ebf54009b3d0db9ea3b38eaa70975013e35dab6d54458172b9b75fd6fc5006dd") 12:51:38 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8000005, 0x3}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x200000000080bd7, 0x20400) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x2000}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x3c, "6212858f166f854572cde44dd805eebdf45251478414fef733e2cd1a2ef9586cd54ec6f865b58ff72681186eb2b3f4015e36951f3cbd192c85efee59"}, &(0x7f0000000000)=0x44) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={r2, 0x2, "29b9"}, &(0x7f0000000140)=0xa) 12:51:38 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x9, 0x3, 0xffffffffffffffff}) [ 235.718382] vhci_hcd: default hub control req: 0900 v0000 i0003 l0 12:51:38 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x41, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000180)={{0x5, 0x5, 0xc10, 0x7fffffff, '\x00', 0x6}, 0x0, 0x10000040, 0xa3, r1, 0x8, 0x7, 'syz0\x00', &(0x7f0000000100)=['eth0nodev\x00', '-#w\\eth0\x00', '\x00', 'security\\(posix_acl_accessselinuxkeyring\\)vboxnet0\x00', 'vboxnet0lomd5sumbdev(vmnet1/\x00', '\x00', '\xfesecurity\x00', '-\x00'], 0x71, [], [0x6, 0x3, 0x4, 0x4]}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x9f, &(0x7f0000000040), &(0x7f00000000c0)=0xff2f) 12:51:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='@']) pivot_root(&(0x7f0000000040)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x101000) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) read$FUSE(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 12:51:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e22, 0x1a, @ipv4={[], [], @broadcast}, 0x6}, r2}}, 0x38) sendto$unix(r1, &(0x7f00000001c0)="3b6d7d1398fa8be8dc2f7ec5630f634d73507c9ccad94ff54dda33d1591cf36e58bfa0bce151e0910112fab5e40009f102d749c1118bc19c439b2c258d862881aef9e56b720ec5b9e95ef83af0cc14b6355714ccb0cdff6bccdb24e3bf22869ba16965c8d1859fb4075dea83cd74031ac54fb552d40498e13e667cf17fae74e465cd120b7b4e9b9e", 0x88, 0x40000, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x8, 0x4) 12:51:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in=@initdev}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:51:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x305000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x82d, 0x0) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2, 0x80000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") close(r2) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000180)) 12:51:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000300)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{0x0, 0x10001}, {0x80}, 0x0, 0x800000002}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x100000001}, {0x80}, 0x0, 0x2, 0xbf}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000001c0)=""/208) 12:51:39 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0xcc41, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xf) sendfile(r0, r0, &(0x7f0000b58000)=0x200000, 0xffff) 12:51:39 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000300)=@hci={0x1f, r1}, 0x2b) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9b5117f117e9a7f4"}}, 0x48}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1, 0x10, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e46ac5c64ed09616"}}, 0x48}}, 0x0) 12:51:39 executing program 2: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6800000000000000, 0x90800) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x5) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0xfffffffffffeffff, 0x3, 0x9, 0x1008, 0x2, 0x0, 0x2}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000040)={0x0, 0x7, 0x0, 0xffffffffffffff74, 0x2}) 12:51:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}}, &(0x7f0000000200)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x402200, 0x0) write$UHID_INPUT(r1, &(0x7f00000004c0)={0x8, "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", 0x1000}, 0x1006) fsetxattr$security_ima(r0, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@md5={0x1, "474daa0f25e7e160cbb07c199f24f0d6"}, 0x11, 0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000100)={[{0x3a, 0x4, 0x0, 0x10000, 0x80, 0x7, 0x4, 0x9, 0x9, 0x200, 0x7fff, 0xfffffffffffffffc, 0x4}, {0x37, 0x6, 0x7, 0x2, 0xffff, 0x5, 0x6, 0x7fffffff, 0x100000000, 0x2, 0x1, 0x9, 0xc1}, {0x0, 0x0, 0x2, 0x0, 0x9, 0x8, 0xd7, 0x26, 0x4, 0x9, 0x4, 0x80000000000, 0x3}], 0x800}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20841381}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008050) 12:51:39 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x3, 0x20, [0x6, 0x8, 0x3, 0x7f, 0x3, 0x0, 0x5, 0x5]}) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000100), 0x4) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x1d}, 0x7}, {0xa, 0x4e21, 0xd5b, @local, 0x1000}, r1, 0x800}}, 0x48) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000440)={'broute\x00', 0x0, 0x3, 0x87, [], 0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/135}, &(0x7f00000004c0)=0x78) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x6, 0x100000000}, 'port0\x00', 0x90, 0x60040, 0x0, 0x6f4, 0xb5, 0x1, 0x8, 0x0, 0x6, 0x1fe}) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f00000005c0)) setxattr$trusted_overlay_redirect(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.redirect\x00', &(0x7f0000000680)='./file0\x00', 0x8, 0x3) setsockopt$inet_mreq(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000006c0)={@loopback, @local}, 0x8) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000700)) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000740)) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000780)={0x8000, 0x4, 0x1, 0xfffffffffffffff8, 0x1, 0x1}) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000007c0)={0x1, 0x1, [0xfffffffffffffff9, 0x10000, 0x10, 0x0, 0x1, 0x14c59aa3, 0x2]}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video36\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000840)={'nat\x00', 0xfa, "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"}, &(0x7f0000000980)=0x11e) write$FUSE_OPEN(r0, &(0x7f00000009c0)={0x20, 0x0, 0x6}, 0x20) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000a00)={'icmp6\x00'}, &(0x7f0000000a40)=0x1e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x2, 0xaf1f, 0x2, 0xffff, 0x3, 0x1ff, 0x4, 0x8, 0x202, 0x0, 0x3, 0x3, 0x0, 0x7, 0x400]}, &(0x7f0000000b80)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000bc0)=@sack_info={r2, 0xffff, 0x770}, &(0x7f0000000c00)=0xc) r3 = add_key$keyring(&(0x7f0000000c40)='keyring\x00', &(0x7f0000000c80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x6, r3, &(0x7f0000000cc0)=""/211, 0xd3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000dc0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) [ 236.647123] QAT: Invalid ioctl 12:51:39 executing program 2: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) r1 = getuid() mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060004,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r1, @ANYBLOB=',permit_directi\x00\x00\x00\x00j_role=usOrcgroup),euid<', @ANYRESDEC=r1, @ANYBLOB=',audit,\x00']) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0x40) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x11, "e346d128a5f868c5ae7ac23f19a32c1fd7"}, &(0x7f00000002c0)=0x19) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)={r3, 0xfffffffffffff000, 0x1, [0x9]}, 0xa) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$cont(0x18, r4, 0x800, 0x6) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', 0xfffffffffffffffe, 0x0, 0x3) [ 236.682950] QAT: Invalid ioctl 12:51:39 executing program 1: r0 = socket(0x11, 0x80000000000805, 0x0) write(r0, &(0x7f0000000440)="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", 0xfc) 12:51:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x6) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100)=0x9, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 12:51:40 executing program 1: r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffdffb)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip6_tables_matches\x00') sendfile(r0, r1, 0x0, 0x401) fcntl$setsig(r1, 0xa, 0x18) execveat(r0, &(0x7f0000ff7000)='./file0\x00', 0x0, &(0x7f000034bff8)=[&(0x7f0000ff7000)='\x00\x00\x00\x00\x00\x00\x00\x06\b\x04\x00 \x00\xff\xfc\feed;y\x93e\x00_\x1bv'], 0x1000) 12:51:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) dup2(r0, r0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000040)=""/192, 0xc0}, &(0x7f0000000180), 0x8}, 0x20) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000100)=""/69) 12:51:40 executing program 0: ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000001c0)="afd5ac2066a0", 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, '\xf5\xf4\x03L\xf6D\r\xd1\vZ\xe2\x85\xaa\xec\x7fp\x96\xdc\x88\xbe-\x13\x00'}) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xfffffffffffffffc, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0xdf, 0x0, @scatter={0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/77, 0x4d}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/102, 0x66}]}, &(0x7f0000000280)="ad40657ed56c768fa0fd63906411a0b26058b4b84c9ce7a27b4a4e55e734b117555c0165a7de59958222da49fbe3201a607cca3540053f7ae293974b91b6b1f7f66e0a6a67ca5b9696cdaefa5f980eab241288e327b94ac2a9f99203a11bcdb6098c40669af93d656c02e981c335b5f80a818f42a0093c9d89dc959c941c5c8a14dfab0b269fe5fd816580cc89f78cbd51460a85040de3495229790e41416939a7b185ce784e815100d104b6ba431607f3f21c564230985dc366d4ca7f742ccd8afe69af9d4173d5c9e17abe391015297d749125f000b39e332e721e19c584", 0x0, 0x0, 0x0, 0x0, 0x0}) 12:51:40 executing program 1: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) unlink(&(0x7f00000000c0)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f0000000080)='net/bnep\x00') symlinkat(&(0x7f0000000100)='./bus\x00', r1, &(0x7f0000000140)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r5, 0x7fff}}, 0x10) [ 237.219066] IPVS: ftp: loaded support on port[0] = 21 12:51:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x2ed440000, 0x0, 0xffffffff}) r1 = socket$inet6(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900150002000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 12:51:40 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) setrlimit(0x4, &(0x7f0000000000)={0x0, 0x80000000000005}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/audio\x00', 0x102, 0x0) recvfrom$unix(r1, &(0x7f0000000600)=""/171, 0xab, 0x20, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000780)={0x4, &(0x7f0000000740)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000880)={r4, &(0x7f0000000940)=""/178}) socket$tipc(0x1e, 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000900)={0x7, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}]}) sendmmsg(r3, &(0x7f0000000580)=[{{&(0x7f00000000c0)=@caif=@rfm={0x25, 0x1, "d0ef180efd817d06d9e6167f9407f116"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="e8422b3571a7e77367041530d953a0b14931e51345cfd29463ffeede26f1ead968c006df61e85b15a69434844c987df3bdd435bf4cfd", 0x36}, {&(0x7f0000000180)="ed7d7b2c1e7442b4ce06a491991056e287c07a2b79f3", 0x16}, {&(0x7f00000001c0)="31e918e12bb149c94b86c7ab9e3ab1", 0xf}, {&(0x7f0000000200)="4d014eac9243ecfd3355a43bc1bf591ff5534fc4d1a09a6437e0fa447db288bdda0f2e428adbb45c03bfb2cf1e608d6efd11e7b3d59de41fd228e0d4c74b63b83ce9bf65f58f18d3ce841921a58540dd467ea4e835b93044deec5a5305e81c38a7", 0x61}], 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x5}], 0x1, 0x90) 12:51:40 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x200000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x2, 0xffffffffffff7fff, 0x3, 0x2}) fcntl$setown(r0, 0x8, r1) unshare(0x10000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) fremovexattr(r0, 0x0) [ 237.555074] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.579920] chnl_net:caif_netlink_parms(): no params data found [ 237.613408] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. 12:51:40 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x109000, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000040)={0xe, 0x8, 0xe5de, 0x0, 0x9, "dda5ffda7e2e1db69a"}, 0x15) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) semctl$SETVAL(r0, 0xffffffffffffffc, 0x10, 0x0) [ 237.691095] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.697652] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.705675] device bridge_slave_0 entered promiscuous mode [ 237.729461] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.736059] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.744084] device bridge_slave_1 entered promiscuous mode [ 237.878015] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.889429] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.932904] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 237.941930] team0: Port device team_slave_0 added [ 237.953489] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 237.962003] team0: Port device team_slave_1 added [ 237.992664] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 238.007596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 238.196179] device hsr_slave_0 entered promiscuous mode [ 238.402293] device hsr_slave_1 entered promiscuous mode [ 238.662955] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 238.670445] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 238.706270] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 238.776873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.790601] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.802921] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 238.810794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.818958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.835234] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 238.841349] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.857107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.865917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.875129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.883075] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.889476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.902867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.913601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 238.920813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.929481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.937633] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.944124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.957730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 238.970043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.984444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.992344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.001023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.010021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.018892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.029615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.041908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 239.053081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 239.061471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.070221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.078489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.086618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.101393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 239.108888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.117242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.134202] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 239.140294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.165906] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 239.182667] 8021q: adding VLAN 0 to HW filter on device batadv0 12:51:42 executing program 3: r0 = memfd_create(&(0x7f0000000080)='\\\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="23b5dd04b1af2107d49659bf"], 0x7) execveat(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) 12:51:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x1a) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ce5f4500", @ANYRES16=r1, @ANYBLOB="000029bd7000fedbdf25160000003c000900080001000400000008000100160000000800010005000000080002000700000008000100050000000800020020000000080002000200000034000200080001004f5c000008000100040000000800010001010000080001008f2f000008000100060000000800020001000000fc0005002c00020008000400010000000800030079000000080001000200000008000400ffffffff08000300018000004c00020008000300080000000800020006000000080003000000000008000400f7ffffff080004000700000008000300ac0d0000080003000400000008000300ffff0000080004000900000034000200080002000200000008000300010000000800020021d100000800040001000000080002000100008008000400050000000800010065746800080001006962000008000100696200000c00020008000200090000000c00020008000200010000001c000200080001000f00000008000100190000000800010011000000100004000c00070008000300040000001400090008000200ffffff7f0800020002000000180005000c000200080003000500000008000100696200001000060008000100d223000004000200"], 0x1cc}, 0x1, 0x0, 0x0, 0x10}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)="39000000100009e369001b00810800000700fd9816000000450001070000001419001a0004000a000f000200000809c99183a8a50002000000", 0x39}], 0x1) 12:51:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x1, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x2}, 0x18) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40800, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000040)) 12:51:42 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x3f, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x12) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x7) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KDDISABIO(r0, 0x4b37) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x19}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x2f, "8edb98792652b6d88dd2d480e4239ecacce4836e87d6a2170be4161bc063834e6c0eed8adcf724adbc56fcf918b3d0"}, &(0x7f0000000200)=0x37) [ 239.380893] sctp: [Deprecated]: syz-executor.2 (pid 10688) Use of int in max_burst socket option deprecated. [ 239.380893] Use struct sctp_assoc_value instead 12:51:42 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r0, 0x3) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x40, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000540)=""/237) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x9}, 0x8) sendmmsg(r1, &(0x7f0000003d40), 0x40000000000008b, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000003c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="680000001810fe9fdca40b76b5d8214ebc1c160e7f37601d24b34eaa8a04d0607952bfcb19e9c9e9ae27800789c811c930ef5a5c5cb7be9f4b5c842c4ea4c1d420ae29b18ae6eee80e6571b9b22e1cf41716f5132365970c5049523c89288acad3e8ae4adaf1261cbe2fdd1d"], &(0x7f0000000480)=0x70) close(r1) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @dev}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', r4}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) accept4$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) [ 239.443687] sctp: [Deprecated]: syz-executor.2 (pid 10688) Use of int in max_burst socket option deprecated. [ 239.443687] Use struct sctp_assoc_value instead 12:51:42 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0x0, 0x11f000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000044000)) ioctl$KVM_RUN(r0, 0xae80, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0x15, 0x1, 0xfffffffffffffffe, 0x7ff, 0x1, 0x80}) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{r1, r2+30000000}}, 0x0) 12:51:42 executing program 1: setrlimit(0x7, &(0x7f0000000000)={0x4, 0x7}) r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000100)={0x6b, 0x81, 0x6, 0xffffffffffffffff}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) pipe(0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) 12:51:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) rmdir(&(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x311001, 0x0) write$ppp(r1, &(0x7f00000000c0)="01fa094c41fd63c9c406077598b63fa728409d3fa02e605bfec8cd9254ea8af699e423e1703400610fc409cb", 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x20020000, 0x0) [ 239.648543] Unknown ioctl -2146941692 [ 239.686973] Unknown ioctl -2146941692 12:51:42 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x63d, 0x123000) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x7ff, 0x5e4, 0x9, 0x400, 0x5, 0x3, 0x3e, 0x2, 0x3d0, 0x40, 0x98, 0x2, 0x5c6880bf, 0x38, 0x2, 0x1, 0x1f, 0x2}, [{0x0, 0x0, 0x0, 0x6b09, 0x5, 0x7, 0x100000001, 0x4a52}, {0x7, 0xfffffffffffffffc, 0x0, 0x9, 0x492a, 0x3, 0xfffffffffffffffa, 0x58}], "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", [[], [], [], [], [], []]}, 0x16b0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x43, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 12:51:42 executing program 0: syz_emit_ethernet(0x198781, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00081df800008864000f08000604005756df23d50800ac1414001a0000000000ac1414bb"], 0x0) r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) sendto$rxrpc(r0, &(0x7f0000000040)="292b4fbc9b47a6cb329c894d71633b621e00c0197a674cefc12e47161f3c9e76d9671edfad1fbb54fcca6590f2abbaff4cbc5e1feaec84d194625aa314492fb21e247b8b289de6284e43fa97a1e2aa2316976df062f481cc7a0891d9a2679bb1815a9d0c146ed01e17e1ea61789c717415b1efe73086ff7dd3077e4147feadea00fa1756b2c16a62504fb7bdccdf4bc65fc3f4126710ed959710b79440e53ab8ecf0702a09087517cafd0b9b72535ffac69de07d49a479f83af0f760634898e4791cbe8c77", 0xc5, 0x40040, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x6, 0x4a103) write$FUSE_BMAP(r1, &(0x7f00000001c0)={0x18, 0x0, 0x2, {0x66c000000000}}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d8, r2, 0xc00, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @rand_addr="ddb0c1ae7033acb4a44158225a2fd609"}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @local, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x52}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff6a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb52}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffff95}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4702}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b6f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x1d8}}, 0x20000014) 12:51:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x7f7fffff) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@rand_addr="96c27bc5889b24870ddd7e6a9cbe40e3"}}, 0xe8) 12:51:42 executing program 3: r0 = socket$inet(0x2, 0x1, 0xfffffffffffffffd) r1 = dup(r0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)='F', 0x1}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x20, 0x22, 0x20, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x14, 0xfffffffffffffff9, 0x9, 0x0, 0x0, 0x7, 0x6}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) dup3(r2, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r3, r4, 0x0, 0x8000040) 12:51:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000180)={@initdev}, &(0x7f00000001c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'nlmon0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40000, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @broadcast}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000240)) socket$inet6(0xa, 0x7, 0x7) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0xa00}, 0xffe2, &(0x7f00000004c0)={&(0x7f0000000840)=@getspdinfo={0x0, 0x25, 0x800, 0x70bd2d, 0x25dfdbfd, 0x9, [@tmpl={0x0, 0x5, [{{@in6=@empty, 0x4d3, 0x3b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x3507, 0x3, 0x0, 0x0, 0x1, 0x3, 0x9}, {{@in=@empty, 0x4d5, 0x3b}, 0x2, @in=@remote, 0x3502, 0x0, 0x0, 0x2, 0x6, 0x3}, {{@in6=@empty, 0x4d5, 0x33}, 0xa, @in=@multicast2, 0x3507, 0x3, 0x2, 0x1800000000000, 0x3, 0x3}, {{@in=@multicast2, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x3502, 0x3, 0x3, 0x6cc3, 0x7, 0x5, 0x5}]}, @srcaddr={0x0, 0xd, @in6=@empty}, @sec_ctx={0x0, 0x8, {0x0, 0x8, 0x0, 0x3, 0x0, "c31d83d68017da623dbffb88d2ceee13f95890d677d2619d6cca93b47f5e434c7c860f5f9a97da4e910f001656020631d521191a7c5d39d3ff7c8e5f1a46e472c460109e6c4796e4653aa2442bfe04fc2ad4ca8978901fc122a6a9f2ec1f112fae8001007ce41a2475d01b2bd737879640fba7ab829f8f3bf6d95d1b7063cb49cb3a619851a3844e1168dac5ec0ae7ae2169ce2f192ec33efe49e749ad"}}, @offload={0x0, 0x1c, {r1, 0x1}}, @algo_comp={0x0, 0x3, {{'lzs\x00'}, 0x0, "8d30f36d4f6075911473b662072b926c2977a39b23f9259d5b19d4a8bdbfe3ca7d7fa66b87fde43a729e2e15b5defc40b1a1c226178a34ef7eee319af897dbef4d3b1c72104f2f0e29184affaefc1b9ddf54ea653eaed040d34286f5022d14f1b87a99c406720deafb55e53d2b765b38b27c2854ba8c86070210e1c18b857fdde3fedd"}}, @algo_comp={0x0, 0x3, {{'lzjh\x00'}, 0x0, "85c45591cb0ae4d1c89ff1f64375616b253772e10cb1b9b6aeb669055c048ac07d45c02d08c4273f6632e0811869705c2e20bd1411a881957a10c9893e9500ccd028"}}, @tmpl={0x0, 0x5, [{{@in6=@loopback, 0x4d6, 0x32}, 0xa, @in=@rand_addr=0x8, 0x3500, 0x3, 0x0, 0x1, 0x2, 0xc7ec, 0xccc}, {{@in6=@local, 0x4d5, 0x6f}, 0xa, @in=@multicast2, 0x3502, 0x1, 0x0, 0x80, 0x7fffffff, 0x8, 0x3}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in=@local, 0x3502, 0x14ba21c47603780d, 0x3, 0x2800000, 0x5, 0x8, 0xde}]}, @offload={0x0, 0x1c, {r2, 0x1}}]}, 0x319}, 0x1, 0x0, 0x0, 0x44001}, 0x4) 12:51:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x200000, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'L-', 0x8000}, 0x28, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000003c0)={0x0, {0x73cc261a, 0x80000000}}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000480)=0xfffbffffffffffff, 0x319) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) getsockopt$inet6_udp_int(r1, 0x11, 0x3, &(0x7f0000000340), &(0x7f0000000200)=0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000400)={0x0, {0x101, 0x7fff}}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x2, 0x0, "8b63e98a6e9a990ccccaa0722f7b17adbfb251c09e5993d319d88199f6923e646c1d3eaad49bc3c0a86bd1683c51ec36b5d2dab5a220e04e0b20637e2b5a8dd3403bbe1ccf681d083e2307d3f5597b00"}, 0xffffffffffffffe3) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x81, 0x0, "521362f37dcd64c12799efb9dbad200b6cf433289feda8725ba79dbc0300000000000000d7b9d07abd34e091090000d3670d3f3e8b67a370399de3c38f23825d021cc14f2ea21c5dd607e8a85d8c9cfd"}, 0xffffff30) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 12:51:43 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000540)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x0, 0xe}) 12:51:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket(0x40000000002, 0x3, 0x7) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x216802ed, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x3) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmmsg$unix(r1, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000006c0)=[@cred={0x20}], 0x20}], 0x1, 0x0) 12:51:43 executing program 2: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, [0x0, 0x0, 0x50a000]}]}}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) getgid() socket$inet_tcp(0x2, 0x1, 0x0) sysfs$3(0x3) [ 240.375524] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 12:51:43 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006240)={@remote, @loopback, 0x0}, &(0x7f0000006280)=0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000062c0)={r1, 0x1, 0x6, @random="1ae23e785fe8"}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) unshare(0x20400) ioctl(r2, 0x800000000000937e, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x58a1, 0x4) r4 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x82010, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x48, 0x0, &(0x7f0000000140)=[@enter_looper, @decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x2}, @release={0x40046306, 0x2}, @increfs_done={0x40106308, r4, 0x4}, @acquire_done={0x40106309, r5, 0x2}, @exit_looper], 0x51, 0x0, &(0x7f00000001c0)="26d9c13d5bcd38228cd57444c2e176e07d1fc550059e2d7ec59e2146e64ccc8c5adbe6d38ecd48902b8dcef236c8fdbc0005601e300116245e0b2f5692d60805989b66107e562fdc8a1b48b5b3043cbbba"}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000380)={@local, 0x5b, r3}) 12:51:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x0, 0x0, 0x40, 0x100000001}}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000900)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000940)={0x0, 0x1}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000009c0)={r4, @in6={{0xa, 0x4e22, 0x80, @loopback, 0x9}}, 0x1, 0x19}, &(0x7f0000000a80)=0x90) r5 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f00000003c0)=0xc) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x2, r2}, {0x2, 0x6, r5}, {0x2, 0x7, r6}], {0x4, 0x5}, [{0x8, 0x1, r7}, {0x8, 0x3, r8}, {0x8, 0x7, r9}], {0x10, 0x2}, {0x20, 0x4}}, 0x5c, 0x2) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vsock\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r10, 0xc0045516, &(0x7f0000000880)=0x81) r11 = open(&(0x7f0000000700)='./file0\x00', 0x20000, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000740)={0x0, 0xfffffffffffffff7, 0x0, 0xffffffff}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f00000007c0)={r12, 0x7, 0x2, 0x2, 0xe10, 0x16681596}, &(0x7f0000000800)=0x14) 12:51:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = semget(0x3, 0x1, 0x8) r3 = getgid() setgid(r3) semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000000)=""/106) creat(&(0x7f0000000080)='./file0\x00', 0x0) recvmmsg(r1, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}], 0x1}}], 0x1, 0x0, 0x0) 12:51:43 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x501800, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xf, "be668eb41efb8853cc2c4611eb54ba"}, &(0x7f0000000080)=0x17) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x6}, &(0x7f0000000140)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x4, [0x0, 0x20000100, 0x20000130, 0x20000200], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00']}, 0x7c) 12:51:43 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2e0000002c00815fe45ae087185082cf0124b0eba06ec4000141000000000017000040030000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 240.722571] kernel msg: ebtables bug: please report to author: entries_size too small [ 240.758882] kernel msg: ebtables bug: please report to author: entries_size too small 12:51:43 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/14, 0xe) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}], 0xa, "8a2243cdcfec911b3c1864b3220edabd55c886d8c40aa5dd845c17e6329cb8b08dc9a80da2d66fd49b07fa0579b20955eb635635ed100d1073c5e38c295acc1309cf95aac00bc2aa88dc62ef5113b29e5877e6a12bce9f87c6d2fde53382424473fa92c06e400642a144bcdf0fbee4358ce5bf83c8816e1db27bf0d91660ee"}, 0x2e3) ioctl$int_in(r0, 0x800001c0045009, &(0x7f0000000080)=0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)) 12:51:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x2842) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/175, 0xaf) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x19, 0x0, 0x0) 12:51:43 executing program 2: unshare(0x24020400) r0 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x3}}, 0xfffffffffffffd9a) fdatasync(0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x6}, 0x1) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000100)) 12:51:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="56e7a9", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030b03030303030000097b0f346725e6b73757365725ff014c1657cd3a2d99c747ebb69643de5ca1f59f91ab6bba6764317927b7cde5c8511f296d3be26bc4ea035d7162f2e14e66d334eb0c3c20ba66c65900af9f12d1a78a0e2f082184e69654ed291befccc309e3af12615de699b26fc811dc3b1dbac64", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000840)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000340)={{0x8, 0x3, 0x20, 0x800, 'syz1\x00', 0x283e}, 0x1, [0x9, 0x40, 0x7c, 0x3c52, 0x2, 0x321, 0x7, 0xc0e9, 0x7ff, 0x8, 0x8, 0x7fff, 0xffffffffffffffff, 0x0, 0xffffffff, 0x7, 0x49f2, 0x24ae1486, 0xfffffffffffffffa, 0x8000, 0x9, 0x9, 0xffffffffffffff81, 0xef7, 0x9, 0x6, 0x6, 0x2, 0x4d, 0x6, 0x40, 0x400, 0x8, 0x1, 0xfffffffffffffff7, 0x7f, 0x3, 0x8, 0x5, 0x0, 0x7, 0x4, 0x7, 0x800, 0x9, 0x1, 0x1, 0x4, 0x8, 0x100000000, 0x3f, 0x8, 0xc987, 0x101, 0x78c, 0x100000000, 0x9, 0x3ff, 0x8, 0x8, 0xfffffffffffffffd, 0x7, 0x4c1b, 0x0, 0x8, 0xe8, 0x0, 0x4, 0x6493, 0x4, 0xe6, 0x101, 0x3ff, 0x7fff, 0x2, 0x513f, 0x8, 0x9, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffff68, 0x12fb, 0x5, 0x0, 0x9, 0xb788, 0x9, 0xfffffffffffffffb, 0x24e, 0x56, 0x2, 0xffff, 0x0, 0x7fffffff, 0x8, 0x9ae2, 0x5, 0x40, 0x79, 0x5, 0xffffffff7fffffff, 0x9, 0x6, 0x68d, 0x0, 0x822, 0x1ff, 0x9, 0x66a, 0xffffffff7fffffff, 0x5, 0x1ff, 0x200, 0x8000, 0x8, 0x3c, 0xfffffffffffffffd, 0x800, 0x38, 0x10000, 0x9, 0x8, 0x9, 0x401, 0x401, 0x88], {r3, r4+30000000}}) read$FUSE(r0, &(0x7f00000040c0), 0xffffffc8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xa800, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280), 0x8) 12:51:44 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x1, 0x0, 0x0, 0x0, 0xf44f, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x8}) r2 = syz_open_pts(r1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r3, 0x1, 0x2, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x82) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) clock_gettime(0xfffffffffffffffe, &(0x7f0000005300)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f0000000340)=""/139, 0x8b, 0x1}, 0xffffffff}, {{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/38, 0x26}], 0x2, &(0x7f0000000500)=""/198, 0xc6, 0x2}, 0x1ff}, {{&(0x7f0000000600)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000700)=""/15, 0xf}], 0x3, 0x0, 0x0, 0x7cab}, 0xffffffffffffff64}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x9}, 0x40}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/248, 0xf8}, {&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/255, 0xff}, {&(0x7f0000000ec0)=""/57, 0x39}, {&(0x7f0000000f00)=""/130, 0x82}], 0x8, &(0x7f0000001040)=""/20, 0x14}, 0x800}, {{&(0x7f0000001080)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)=""/43, 0x2b}, {&(0x7f0000001140)=""/24, 0x18}], 0x2, &(0x7f00000011c0)=""/150, 0x96, 0xfffffffffffffe00}, 0x200}, {{&(0x7f0000003340)=@xdp, 0x80, &(0x7f0000003500)=[{&(0x7f0000001280)=""/55, 0x37}, {&(0x7f00000033c0)=""/151, 0x97}, {&(0x7f0000003480)=""/88, 0x58}], 0x3, &(0x7f0000003540)=""/190, 0xbe, 0x100}, 0x1ff}, {{&(0x7f0000003600)=@nfc, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/175, 0xaf}, {&(0x7f0000003740)=""/114, 0x72}, {&(0x7f00000037c0)=""/7, 0x7}], 0x3, &(0x7f0000003840)=""/105, 0x69}, 0x10001}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003940)=""/32, 0x20}, {&(0x7f0000003980)=""/216, 0xd8}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/45, 0x2d}, {&(0x7f0000004b00)=""/189, 0xbd}, {&(0x7f0000004bc0)=""/130, 0x82}], 0x6, 0x0, 0x0, 0x2000}, 0x7ff}, {{&(0x7f0000004d00)=@can, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/8, 0x8}, {&(0x7f0000004dc0)=""/228, 0xe4}], 0x2, 0x0, 0x0, 0x7}, 0xffffffffffffe4f0}], 0xa, 0x100, &(0x7f00000051c0)={r4, r5+30000000}) connect(r3, &(0x7f00000012c0)=@nl=@unspec, 0x80) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000005200)='/dev/zero\x00', 0x404040, 0x0) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f00000052c0)) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000075c0)={{{@in6=@dev, @in6=@loopback}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000076c0)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000007700), &(0x7f0000007740)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000003a80)=[@in={0x2, 0x4e24, @rand_addr=0x81}], 0x10) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000007780)) lstat(&(0x7f0000007900)='./file0\x00', &(0x7f0000007940)) read(r2, &(0x7f0000000280)=""/1, 0x1) 12:51:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)='keyringlo\x00\xf9\xe32\x10\xd4w\xf0\xfb\xca\x82\xbf\xc2K\x1c\x95\xaaPv\xben\x8b\xd7\xaf\fn\xdd\xf0\x18\'\"\xfe\xff+\x9a\x00\xce\xf0\xfbi\x84\xe5``\xde\xb0\x90\x81]\x9e\xf9\xfb\xc9\xfe\xbc\xd2e}\x98\x06_c\x0f\x14\xbc\xe0\xd3.,\x81\xa5\xbf4\xf6\x03D\xd5\xd1tU\xfd\x1b\x7f&`+t\xc3F<\x13\xbf\xbd\xc2c\xe8\xe6\xc0\xe4\xfd\xb0\xb3S\xd9n\x05\xf4\xaf\xda\xa5\xe9\xa21\x1e\v\x047\xb3\xd7yO\xd3>\xcc\x81\x1fm\xb8\x06\xdaT\xef+:\xc6l\xdbA\xbd\xb6B-8\x9e\xf5;\x01l\xb1\'\xcb\xae|ggX\xe1\x99u$\xeaoW\xfe\x8e1X\xa0\xb8\x939\xf5Mm\x86\xb3\xf1\xd5\xebN\x93.J\"\xb6\xda\r\x1d>\xaf\xf99\xd91 \x19\xfc\x98\x82\xc3{d\xcc?\xf3\xe0\x01(\x1cv#\xc8\x91\x16\xa7\xdd\x8a\xefj!\x10\xb5\xc8\"q}\x7f\x9d\x03\x01a(\xean\x95\xa6ok\xb4\x17X;\xf0\xddT\xd1\xcd\x01[0\xf2\x96\xd8\xf6\xe5\xeeC\x8b&|\xf4\x03\x9a\x90_j\x83\t\x92v\x96\xe6\xdc\xfb\xa6\x1b\x16\x10u\x85\xa2\xa1\x88\xba\x10\xeaWk\xd6\x99\xbc\x90x\xd3\xed\xec\xcf\xbd\xbf\xc5_C\xdd\x899\x9e\xd3XD\xe7{\xf9[\xa7\x9f\x17\xbb\x93\xbf\x85\xe1l\xf6*\x13\xb5,%\xc2R\xb7\xe4QO\x01\x1c\x9d\xa6\xb2\xcb\x7f\x19\b\xfeX\xceer\x16\xb2\xa5\x19\x0e\nrp\x99\xab\r\x83\xcc\xdd\xdb\xaag\x92\xf2\xbe\xbf\x9a\x8bqk=\xd8\x8d\x15\x90\xc1\xd4\xfc\xc1\xe8\x18\xdc\x822F\xd6\xd5\x9eD\x9f\xcf\xf4\x97\x0f\xf8\x88\xefc\xc1\'}v\xc8Y\xf6\xeb\xa0\x8c\x01=+\xba\ry\x18t\x03\xbf\xe4]\"\xa2\xb8\xdc\xb5\xffg\x9et\x81V\xc5{2e%os\x97\xf6\xc1\x8c\x91\"\xdb[\xdf\xb6pv\xee\x1a\x04\xdc\xcf\xd3&\x99\xaa\xd4q\x99\xbd\xe5\x05', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 12:51:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x1000000, 0x6013, r0, 0x0) r1 = socket$packet(0x11, 0x6, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180), 0x68) 12:51:44 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa283005b580a000900020009000000000015000404ff7e", 0x24}], 0x1}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x4, 0x5, 0x101, 0x7, [{0x74, 0x7e3, 0x4, 0x0, 0x0, 0x2000}, {0x7, 0xff, 0x6, 0x0, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x0, 0x80}, {0x6, 0xfffffffffffffffd, 0x7f, 0x0, 0x0, 0x181}, {0xfff, 0x5, 0x8, 0x0, 0x0, 0x8}, {0x7fffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x1af4f841adeda489}, {0x9, 0x1, 0x913d}]}) 12:51:44 executing program 1: r0 = socket(0x15, 0x7, 0x6) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) [ 241.585735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:51:44 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/14, 0xe) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}], 0xa, "8a2243cdcfec911b3c1864b3220edabd55c886d8c40aa5dd845c17e6329cb8b08dc9a80da2d66fd49b07fa0579b20955eb635635ed100d1073c5e38c295acc1309cf95aac00bc2aa88dc62ef5113b29e5877e6a12bce9f87c6d2fde53382424473fa92c06e400642a144bcdf0fbee4358ce5bf83c8816e1db27bf0d91660ee"}, 0x2e3) ioctl$int_in(r0, 0x800001c0045009, &(0x7f0000000080)=0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)) [ 241.637800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.717823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.719080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:51:44 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) clone(0x2102001fbb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8000, 0x200200) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x60, &(0x7f0000000080)={0x0, @local, 0x0, 0x0, 'fo\x00', 0x0, 0x0, 0x100003f00}, 0x2c) 12:51:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x15555555555551c2, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x24) connect$rxrpc(r3, &(0x7f0000000300)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @mcast1, 0x4a98b268}}, 0x24) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00001f"], 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 241.956769] binder_alloc: binder_alloc_mmap_handler: 10829 20001000-20004000 already mapped failed -16 12:51:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x552f, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) eventfd(0x101) sendfile(r0, r1, 0x0, 0x7) 12:51:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001b7"]) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0xffffffffffffffff) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc080aebe, &(0x7f0000000040)={0x0, 0xffff8000, [0xfffffffffffffffd, 0x9]}) 12:51:45 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x400, 0x0, 0x0, 0x8000}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xac7b}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x44) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x100000000, r1, 0x1, 0x5}) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x0, 0x3631564e, 0x0, @stepwise={0x7ff}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x1a, &(0x7f0000000200)='procmime_type\x8euser]system\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r0, 0x0, 0xd, &(0x7f00000001c0)='/dev/video36\x00', r5}, 0x30) 12:51:45 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x6) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000480)=0xffffffffffffffff, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', r1}) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x2f, &(0x7f0000000100)={@rand_addr=0x6, @broadcast, @remote}, 0xc) ppoll(&(0x7f0000000140)=[{r0, 0x20}, {r0, 0x1}, {r0, 0x100}, {r0, 0x80}], 0x4, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180)={0x5}, 0x8) syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x48, 0x20000) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) 12:51:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) rt_sigaction(0x1a, &(0x7f00000000c0)={&(0x7f0000000000)="f3416fadc4e125ec8243000000c423757a89168640bfe9c422bdaa3af34739d3c4e1f1fee2c421c57c71c166460f2e73a23e66470f634795", {0x3}, 0x0, &(0x7f0000000080)="0f3808c4f0091a45d816c401c5fd3c27c48101d990060000002e2ed28e5a0000000f021066410f3a093b000f6aa00f000000c4a2cd9c5300"}, &(0x7f00000001c0)={&(0x7f0000000100)="c4a37917d75a460fc4730079670fc3459ac481b1626b42450f93ca8f2878c35cff06003b23c463254855007366f044804807042e410f578536f70000", {}, 0x0, &(0x7f0000000140)="660f73d520456dc4037978ce252e42ffd34e99d7f2470f9c9cfb74000000436a0ec4a2b2f51fc4a27d13db"}, 0x8, &(0x7f0000000200)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 12:51:45 executing program 0: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x300, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4801) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000000000010, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000100)='@\x00', 0x2) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000080)={0x20007}) 12:51:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x5}}, 0x20) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/dsp\x00', 0x2, 0x0) read(r1, &(0x7f0000000480)=""/166, 0xa6) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000100)=0x500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x2000000000000002, {0xd77, 0x0, "964966499cb27009b7168f392771172eb953aa2d8339aaae5c99571221c6fbcdbb40ca88028472ead56e659908781999971a6103a4607361a947a184e38a1b93bcb6477bc65c3434493b7713364c022e3958d798b646103eb565663218a975c7e8546ba11c225ebaedd41a8a81ab370a434d27c6e4774965479be0cbf6745f8bf1d8a89488e79f77b538400152f08a723ab0284adb3e3f75ef42bc40f711b2a51fa35bdce16cfdbadb1a640c0e36d30df239c2869ad4a939b55d4537075c8c2ccdf28cda92e52193da5e789d184b301f5e9c3dd7a14a477d26236149163776bd3c333e4175968fb7636d635fe97c7046694d1bea979367014069d402e082e701", 0x65, 0x2, 0x3, 0x40, 0x10000, 0x100000003, 0x1c2, 0xe9}}}, 0xffffffe2) 12:51:45 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x4000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x1, 0x4, 0x4, 0xb4}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 12:51:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000100)={{0xffff}}) gettid() timer_create(0x0, 0x0, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x34, 0x0, @thr={&(0x7f0000000040)="40d89cfcded6fee7639fb77d47c4db1f11182ae761fb285166f1e6a8b8b27a2a527412790e3902cf5ea54a06876eb36af1b98cd1410da66d6085dee0a4fe12654689bf11cdcceb4803c23fe04f", &(0x7f0000000180)="402456720c124024f6732eeaa4f6a0b52c14170fc1cb43a3e76c22c43eb298d33c6340bf07aa230d2d245abfa985d05bde1538eeab2fba9f2ea2206065294623ac43c98b7f5099211da9fc7d83d6113b7d225c96ff19d77e52a25ab7e3e82014aad6b09248fd72397ecbcc0e0b1e8ff2ddb5cf52139cd56ccde3836f90eb54cb90b716b437b002e340d0a21d09a5b66b809ea5032e1afa83566bc1907f3fc6e632807733290bd901146373567814f4606ac0107546a48b8c79fbccb0811c5a394dbdf23a3f5c2740f172459827faab690119a41a61eb95dd888aec80013b9cfdea72214323ba61"}}, &(0x7f0000000280)=0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000002c0)={0x10f, 0x4f424752, 0x3, @discrete={0x6}}) timer_settime(r2, 0x1, 0x0, 0x0) tkill(0x0, 0x0) 12:51:46 executing program 2: keyctl$restrict_keyring(0x4, 0x0, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)='\x00') r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x101080) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/158) 12:51:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @local, 0x3}}, 0x6, 0x8}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x9}, &(0x7f00000001c0)=0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x9d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 12:51:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00009ecff8), 0x2, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7ff, &(0x7f00001f6000/0x2000)=nil, 0x2) 12:51:46 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x7) 12:51:46 executing program 3: r0 = socket(0x1e, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3a080, 0x4000) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0xc0, 0x4}, 0x100000000}}, 0x18) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0400000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) 12:51:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x4, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'rose0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xdde, 0x1, "173101", 0x10000, [0x8, 0x0, 0x1, 0x7fff, 0x7ff]}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0xffffffff7fffffff}], 0x1c) 12:51:46 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x103b0e93b836670f, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000200)={{}, {r1, r2+30000000}}, 0x0) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0x8e, &(0x7f0000000080)="b21e93e38e991e193eb885ddcaed8d86f3da4f48e296f8810ad247cb39a72b669a61aa592a5891cad5", 0x29) 12:51:46 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x200000000004, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x300, 0x0, [], &(0x7f0000000300)={0x7ffffffffffffffd, 0x0, [], @p_u8=0x0}}) 12:51:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001140)=""/4096, &(0x7f0000000080)=0x1000) [ 243.642484] IPVS: length: 4096 != 8 12:51:46 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000100)='eth0\x00') mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7f, 0x4, 0x7, 0x4, 0x19, 0x656c, 0x2, 0x10001, 0x101, 0x96c, 0x3, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) close(r1) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x3ff, 0x7, 0x8000}, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000140)={0xa3b, 0x8063, 0x9, 0x6, [], [], [], 0xfffffffffffffffc, 0x6, 0x6b8, 0x3, "1843664380f8e51a1b980e76f82c8e36"}) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000380)=0x9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f00009ff000/0x600000)=nil, 0x600000}, &(0x7f00000002c0)=0x10) 12:51:46 executing program 0: unshare(0x400) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x7, 0x3) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @random="5decc41f73b8"}, 0x10) 12:51:46 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80184947, &(0x7f0000000000)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4, 0x201) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) 12:51:47 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@hopopts={0x0, 0x0, [], [@jumbo={0xc2, 0x4, 0x19}]}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) clone(0x80010000, &(0x7f00000001c0)="20ea07f10ba8e21c1937d004", 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'y\xff\x03\x00k\x00', 0x1}) 12:51:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x4001) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @pix={0x0, 0x0, 0x33424752}}) 12:51:47 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8001, 0x20040) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000004, 0x4) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@local, 0x5, r1}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xa) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x54) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x88040, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e21, @loopback}], 0x10) r3 = getpid() getpriority(0x2, r3) ptrace$getregs(0xc, r3, 0xfffffffffffffffb, &(0x7f0000000280)=""/177) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x15}, r1}, 0x14) r4 = semget$private(0x0, 0x2, 0x8) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000380)=""/4096) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000001380)={[{0x3, 0x3ff, 0x401, 0x6, 0x9, 0x1, 0x2, 0xfffffffeffffffff, 0x1, 0x2, 0x8, 0xa85f, 0xfff}, {0x2, 0x30, 0x1, 0x0, 0xffffffff, 0x0, 0x8, 0x8, 0x8, 0x4, 0x1ff, 0x8, 0x9}, {0x1, 0x8, 0x6, 0x9, 0x1, 0x8, 0x194d, 0x1f, 0x2, 0x3, 0xffff, 0x7}], 0xa4}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001400)={0x0, 0x0, 0x2, 0x0, [], [{0x2, 0xffff, 0x8001, 0x7, 0x2, 0xfffffffffffff5f0}, {0x1, 0x142e, 0x6, 0x1, 0x7}], [[], []]}) getsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000001540), &(0x7f0000001580)=0x4) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) semop(r4, &(0x7f00000015c0)=[{0x3, 0xf293, 0x1000}, {0x0, 0x3ff, 0x800}], 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) bind$xdp(r2, &(0x7f0000001600)={0x2c, 0x4, r1, 0xe, r2}, 0x10) ptrace$pokeuser(0x6, r3, 0x4, 0xf641) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000001640)) semget$private(0x0, 0x1, 0x120) semget(0x2, 0x0, 0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000016c0)={0x8, &(0x7f0000001680)=[{0x0, 0x2, 0x3, 0x100000000}, {0x0, 0x9, 0xfffffffffffffffd, 0x800000000}, {0xffffffffffffff6b, 0xfffffffffffffffb, 0x6}, {0x40000000000000, 0x6, 0x3, 0x1}, {0x0, 0x0, 0x5, 0x5}, {0x8, 0xfffffffffffff000, 0x3b40, 0x1}, {0xfffffffffffffffa, 0x5, 0x10001, 0x9}, {0x8c, 0x10000, 0x100, 0x2}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001700)={0x0, 0x1000, 0x1ff}, &(0x7f0000001740)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001780)={r5, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000001840)=0x84) set_mempolicy(0x1, &(0x7f0000001880)=0x3281, 0x1) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000018c0)) 12:51:47 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, [0x3]}, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x83a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={0x0, r0, r0}, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) 12:51:47 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x4000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffffc}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80, 0x40000) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/tcp6\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000000)=""/62, 0x3e}], 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 12:51:47 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x9}, 0x8) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mbind(&(0x7f0000b24000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x17c6, 0x200003) [ 244.954907] IPVS: ftp: loaded support on port[0] = 21 [ 245.188174] chnl_net:caif_netlink_parms(): no params data found [ 245.256809] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.263433] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.271520] device bridge_slave_0 entered promiscuous mode [ 245.280233] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.286849] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.294985] device bridge_slave_1 entered promiscuous mode [ 245.324914] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 245.336168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 245.364536] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 245.372983] team0: Port device team_slave_0 added [ 245.379756] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 245.388091] team0: Port device team_slave_1 added [ 245.394297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.402583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.467623] device hsr_slave_0 entered promiscuous mode [ 245.504356] device hsr_slave_1 entered promiscuous mode [ 245.544535] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 245.552025] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 245.590295] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.596836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.603948] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.610431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.753771] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 245.759903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.789828] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 245.813136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.824412] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.833320] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.846505] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 245.863070] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 245.869166] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.886341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.894727] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.901169] bridge0: port 1(bridge_slave_0) entered forwarding state 12:51:49 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x80809000}, 0xc) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1b9) bpf$OBJ_GET_MAP(0x7, 0xfffffffffffffffe, 0xfffffffffffffc8d) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) write$P9_RLERRORu(r0, &(0x7f0000000400)={0xe, 0x7, 0x2, {{0x1, '#'}}}, 0xe) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) ioprio_set$uid(0x3, r2, 0x8) 12:51:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x2}, 0x28, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x1f, 0x80005, 0x4, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) ioctl(r3, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0xd) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e21, 0x3ff, @mcast1, 0x6e}}, 0x8, 0x7fffffff}, &(0x7f00000003c0)=0x90) 12:51:49 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xffffffff, 0x14b400) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000180)={0x5, 0x6, 0x5}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) mount(&(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000200)=@loop={'/dev/loop'}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='udf\x00', 0x104000, &(0x7f00000002c0)='\x00') 12:51:49 executing program 3: add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280), 0x77d0, 0xfffffffffffffffc) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x200204, 0x0) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) [ 245.978637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.986953] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.993596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.002951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.011888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 12:51:49 executing program 3: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002980)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000000)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9b5117f117e9a7f4"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x1, 0xffffff7f, 0x0, {0x77359400}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "000efb945e295dc7"}}, 0x200001c8}}, 0x0) [ 246.048390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.058188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.069453] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 246.113065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.121358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.129968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.151982] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 246.173376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.203235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 12:51:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80182, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x268]}) 12:51:49 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x4) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000140)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 12:51:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4000000005) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000080)) 12:51:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$sg(0x0, 0xffffffffffff76b1, 0xd) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='memory.low\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x28) write$P9_RSETATTR(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000003c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x45, 0x3dc) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000440)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x20, 0x880) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) socket$inet_smc(0x2b, 0x1, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000280)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="5300000044a6aeabec2e020017000000014078404d0816001384f19efa00c809e59387bd4a3dd8000000000000b8188e23061291cdaf72dd9a000892c682730e590849d92a873dd3531ef0cb726d5fb94f641f68227f6a568618e8276fd8449e5b43f005810ab04da789327187cd780c552863a2657a4151a0e6869ba3e0cc0c44a7d52cdd5dfc6756d31c351b56c6dc48a9a5f905d17b616e975be049beabde8adc83a342f78dc8ceb2589565f8ef9a691a31428ab9fd9a2e02ac1d165aee146de667b4f79ba9d408ba9e3ca1a46a6af465887b5c82871d96224f1135231c27ade633602b8737c1d2a0"], 0xea) 12:51:49 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x7fffffff, 0x7f, 0x20, @local, 'netdevsim0\x00'}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) 12:51:49 executing program 1: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20400) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8200, 0x0) 12:51:49 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x0, "990508faffffffff0600994900162f0091d337ca00000000000000000200"}) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x2, 0x2000) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000180)=0x40000000) 12:51:50 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x26d) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8000000002000001, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0) sendmsg$tipc(r2, &(0x7f0000000600)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="6e0aa3a6e3eaea119babc4e1930675f366ca664791daf808df8f753e8148ef74565918215a52ed", 0x27}, {&(0x7f00000001c0)="d244", 0x2}, {&(0x7f0000000200)="8c2d1d1ad0293666fe139a4ec6931ca69018e9e61dc5fdb9cf495d453cc791deff3a7ea275328e7378b06a172eb1455f761a777e3e7c876cb6f1919a7cfc11b6a792438a40ba2e8c81425bb11ac8e1449d08fc9716ce4f42921d6258eec2d22c5052a9f7259b9c067b0a18f4ea4661214217ff25478afdad55aa8b947f", 0x7d}, {&(0x7f0000000280)="815b11b3cb4b55f67dd36f29dd7ae344a0ba2e5c3e832df78dedf6d456498bf6c191e3ed25029c55e7a8015be0285023144b0063cc9498b0343da3b0d694d66173cffc763c7b03dc19267c9fdeca1005e336c825866078e94841da1a8499cadc26c26cb61a92b273b1ed42f19f3b831efcd59491b58bb4679f42b6b824169564cbe2e5994d838e6a1fd14a0dd4bbbb7f06264a7fc2331f80b48db6cca39c6fa1c26b9ed4d4a20c9d65e5475736bb253a9be3543a8747db04d173b443fa485c0b3dc72ec93c9b694b8c2aa919f54e6592326014199c5933bf169012180ce601cbb012b7acd0078d82", 0xe8}, {&(0x7f0000000380)="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", 0xfc}], 0x5, &(0x7f0000000500)="d9ab288d92e399f8d572cdc15ccb20bd3916537d3cffaea577ee898e68dbf147387b359fd4dd32cfc87d2d6516e7f4035eaef0338bf5979576bb949f997f59b529c967e9fb9eef260d1bfde153458df3a3ce64a788a0540a4bee39443e1d479ff30e8c34916068b9d7455e3752861f60e0b965a84f0be95cc1f00bfe1e80ae167dedd0b80a2fba09dac0687e486ed320d63495b1594643dcf8d931a34440ad2a2febb97016b7eea2e6e1bb45e7a7d15e9cb275a9b27c085f922f5dd1fe3a8ebff495102887f55272d4720a4522b6694a4d334a4fa0597b8329d76a323e0b7b", 0xdf, 0x90}, 0x10) tkill(r1, 0x1000000000016) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000640)={0x0, 0x6, 0xffffffffffffc834, 0x2, 0x2}, &(0x7f0000000680)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000006c0)={r3, 0x6}, 0x8) [ 246.944475] hrtimer: interrupt took 33310 ns 12:51:50 executing program 3: unshare(0x20000002000440) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af22, &(0x7f0000000140)={0x0, r3}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x0, 0xf}) 12:51:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@mcast2, 0x59, r3}) 12:51:50 executing program 2: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4800002, 0x4831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) mlock(&(0x7f0000005000/0x2000)=nil, 0x2000) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/114) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffff, 0x20000) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x3, 0x8}) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 12:51:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000001080)={{}, 'syz0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x100) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000), 0x315) 12:51:50 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000180)={0x200, 0x1}) 12:51:50 executing program 4: unshare(0x8000000) r0 = socket(0xf, 0x80004, 0x7ff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') close(r0) sendfile(r0, r1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) read$alg(r1, &(0x7f0000000340)=""/4096, 0x1000) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)=0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000080)={0x1ef, "dd6c7c302f11e880d0980b9136bf2506bfa389668ee617fbe3e142ac90a907d6", 0x3, 0x8, 0x2, 0xff00e0, 0x10, 0x2}) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x4000)=nil) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r5, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) prctl$PR_SET_PTRACER(0x59616d61, r4) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00fb81000730ce06ab72082ba6d8caf4f8f7df066ed75037e0982a0512b4077c525c0101000000000000b9dfcd834d5f83d5a5c0c88bf0a15a2e5f5a378c3f6ae8ad42d61a8ee7ecf64a745d560000000044d7572c508ae0b0214dad88b90082c1dfc2d40ccb5b70ca185683fc8c434e137b9469f40c5d9b531ff0e8a462c0a44698eb2fd397a32aa86fb087d6da02"], 0x81, 0x2) 12:51:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)=0x8001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000200001000600fffffffffffffff2000000000001ac141500000000000000000000000000007e3d29e67f53b5310000000000292b5f67cb8303de9c018f71022a693dbe654a7742861aec4fa1c2a8e500000000000000a88f963929e26e175174ac491c15d628fc12bb0ba456b4b3a28c936c1ed295793464fc3f64a1ebd61d4864e924d92f500b63ddcf1cf201f9b39220f8df11f7565b9e5b0452d394ed92d246364de5c555fc7d08e69af4ad000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x4c}, 0x8}, 0x0) [ 247.463155] input: syz0 as /devices/virtual/input/input9 12:51:50 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f000001c000)) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000000080)=0x80) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 12:51:50 executing program 2: r0 = memfd_create(&(0x7f0000000180)='%mime\xebg\x15o\x91\x8a\xba#_type\x00\xeb\xd5\x00W,\xd4\xbfBp.\xdb,y\xc5\x7f\x100&\x133\x1d[\x04\xd7.\xe1\xf9\xa1|-\xb4\xc3\xe5\xfcB\x05h\x00\xb0\xd9\xd3:\xfd\x1c\xb5\xa5\x12\x02\xe0B\x1a\xca[\\\xa4HP\bt\xbd0\xf6H*v\xe8%\xd3\x994[\xef\xc0D\x00\x00\x00e\xc6\xae8dJ\xcc\xd5PM\xe3\xaa\x1dx\x93\x01a\xa1\xb8\x9eX\x9eU\x04]\x0e\x9e\xcc\xbc\xd9x\xc3\xdd\xdfGtL\x94\xb1dB\xc2\x8b\xda\xcd\x98uiR\x16\xf2)$\xd4Q((\xaa\xda\xfdta\xb3G`\x85\xe5\xd3\aix\xc5\x9avJ3\xb5\xac\xc3J^\xf9\xe2\xeb\x1f]{\r\x92\xa3~\xbazB\xad\x8a\x96\x1c`\x0f\xc9\xef\x81\xacP\xc4g\xfe\xa0\x1e\xf9\xf0mg0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x47) fcntl$addseals(r0, 0x409, 0x8) getsockname(r1, &(0x7f0000002840)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000028c0)=0x80) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000002900)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r3}, 0x14) 12:51:50 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0xc02c5625, 0x0) 12:51:50 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000013000)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x800) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{r2, r3+30000000}, {0x0, 0x989680}}, &(0x7f00000000c0)) 12:51:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x7, 0x7, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x80, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:51:53 executing program 1: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xa000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x10, 0x0, &(0x7f0000000000)=0xb3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 12:51:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup3(r2, r2, 0x54db74baf31adf4b) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="28020000", @ANYRES16=r4, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x44844}, 0x4000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x156, 0x7fff}, 0xcdc}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12:51:53 executing program 5: timer_create(0x5, &(0x7f0000000100)={0x0, 0x32, 0x0, @thr={&(0x7f0000000000)="9ca74adbcf85b9bf7bc767386c9be142f044980e2010805c7c393b691172afe1317cd00f88f83ea846b065c841383d7d5f57a149105b8c417492323678a3d4657656b4dacf6f8bc5a8d096ac9728f44515f404d11b3306cc6bef779b713a1b3d4adec77f221645e884872c3f672c1a1b72ce0ffb3c2cfd20d873419ca10805bd9719cc6e421b220d38e9d26d847bded46a9f2b7c53aba0cf05e70f77bbaa93f402cc28113ed201afcceb368642c4", &(0x7f00000000c0)="0567dc8c5ceb6d35"}}, &(0x7f0000000140)=0x0) timer_delete(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x8000, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000001c0)={0x4, 0x2, 0x24, "503be12f172017cc190cc55214426bf7e9fb8a0309015c4b94dc5094762b8108f96980f836db8592a4648f7cbb4072deedcfee435d68ab1fe6fbb374", 0x9, "3cc39da969ddd75d650bac294073dcc3c56fa40d37a87b9730526a7a728c79bb642843ab1cf6171c8113a162477eb7bad40b51546f0fc596621a7366", 0x28}) r2 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x5, 0x2, @tid=r2}, &(0x7f00000002c0)) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000300)=""/178) setxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@v1={0x2, "179dfb5d5d44d4b7cdb01d2465afb8a024c35034"}, 0x15, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6fd8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x800) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000600), &(0x7f0000000640)=0x4) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0xcefb0d6abab4ac5f}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x6c, r3, 0x801, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2e0c10cb8942b64}, 0x10) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f00000007c0)="a4ca4e3e9348606c73efc1445444c619aaf032f12d193c0ba363a32ef4f06be0c2f633186980d3d42a90bc23351ce204514fd273b04a79f0497ada7d7e5be37b672bbc8593920e9d4a801a66cf421da035bde302e1a09c3ef7846a9757518176fa45e45fc5f91d5d438d08e48914d80225ac450910110b34438d53bac2ffb49696595b79b0c25fb3413dca371a3940c8c24945d412035f04d691ddea23251f57f4fa4f466b50bd7dfd227899c29a5519dda1ed57a8e11038d230f31eaf9804402c70f9", 0xc3) syz_extract_tcp_res(&(0x7f00000008c0), 0x401, 0x200) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000900)=""/179) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x7) mlockall(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x84, 0x8, {"470d15e3457ce680a340729fa1c785e425ec7dccd5e8160f45c0ca0c03c494b79bde3b6c61482c4b527a70e4d41117f4b7123eba86cefa365cfa00d3cd15fb29613a299d407bd2d441a1eccd4ce75f6e6550f409c2306b4e1dbbd4a379bdeafca228b44519a95cd03622"}}, {0x0, "b73a3955e2ae6b0f1f31941faa9418651ee1ae774a8954534aea8bba961060ea159d8b39df6f36114cc4df4cdcf24b2110bff534cb70b4b2693f14ab5f762e34d9d7368416c2e71e4190d2b593cb101cf27a81fa9c14b61b2c0d5d1a8aec240a23eec0a0bb6c9081848294a0b9e02f5f8ff18b9ac90ec23b8b0e11090c"}}, &(0x7f0000000b00)=""/86, 0x103, 0x56}, 0x20) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000bc0)={0xe, 0x1ff, 0xe7eb}) fallocate(r1, 0x3, 0xbe, 0xffff) fsetxattr$security_evm(r1, &(0x7f0000000c00)='security.evm\x00', &(0x7f0000000c40)=@ng={0x4, 0x2, "baba1bfe7304ee5bd0084d9ab3a0606e22"}, 0x13, 0x3) geteuid() getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000c80)={0x0, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x5}}, 0x7d6c, 0x3}, &(0x7f0000000d40)=0x90) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000d80)={r4, 0x9a09}, &(0x7f0000000dc0)=0x8) ptrace$setsig(0x4203, r2, 0x400, &(0x7f0000000e00)={0x16, 0x9, 0x841}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000e80)={[0x909, 0x2, 0xfffffffffffffffc, 0x7fff, 0x3edf, 0xb5, 0x2, 0x8, 0xfe3, 0x2, 0x9, 0x0, 0x7, 0x868, 0x3ff, 0x7f], 0xf000}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000f40)=""/4096) r5 = syz_open_dev$cec(&(0x7f0000001f40)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001f80)={r4, 0x10000}, &(0x7f0000001fc0)=0x8) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000002000)) 12:51:53 executing program 3: rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000000)='.\x00') 12:51:53 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfbe1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000000c0)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xc0}}, 0x0) 12:51:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat\x00') preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) 12:51:53 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000003c0)={0x4, 0xffffffffffff07f2, 0x6}) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(r2, &(0x7f0000000380)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)='ib\x00', 0xfffffffffffffed9, 0x3) eventfd(0x2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, 0x0, 0x4000000) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syncfs(r3) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000200)={0xf, 0x1f, 0x1, 0x2}, 0xf) r4 = shmget(0x2, 0x4000, 0x54000840, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffa000/0x1000)=nil, 0x3000) accept$inet(0xffffffffffffff9c, &(0x7f00000002c0)={0x2, 0x0, @local}, &(0x7f0000000340)=0x3) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x19, 0x2) 12:51:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000003c0)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 12:51:53 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 12:51:53 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 12:51:53 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000ebff0fdf333f220005001a00050000000005000654c6c6598d2ba7c64a847b9cc2ee7f31ad445e74251400eb55d28df8"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x260, 0x0) 12:51:53 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) fcntl$getflags(0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe2(0x0, 0x4800) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x9a) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000003c0), 0xa) 12:51:53 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x39) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f0000000180)=0x4) getgid() semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) munmap(&(0x7f0000551000/0x2000)=nil, 0x2000) chdir(&(0x7f0000000480)='./file0\x00') r0 = getpgrp(0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sched_setscheduler(r0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) write$eventfd(r1, &(0x7f0000000080), 0xfffffe5e) [ 250.644075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.650921] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.659630] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.666491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.673317] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.680096] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.686933] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.693768] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.700548] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.707381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.714243] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 12:51:53 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r1, &(0x7f0000000140)=""/78, 0x27) getdents64(r1, &(0x7f00000001c0)=""/136, 0x88) [ 250.856962] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 250.917841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.924832] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.931739] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.938566] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.945527] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.952395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.959184] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.966087] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.973409] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.979883] IPVS: ftp: loaded support on port[0] = 21 [ 250.980200] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 250.992216] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 12:51:54 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) socket$inet6(0xa, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x9a) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000003c0), 0xa) [ 251.109603] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 251.178285] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.185342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.192331] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.199149] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.206107] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.212982] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.219792] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.226871] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.233708] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.240501] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.247375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 251.369453] chnl_net:caif_netlink_parms(): no params data found [ 251.391800] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 251.444940] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.451476] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.451789] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.459627] device bridge_slave_0 entered promiscuous mode [ 251.464883] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.476998] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.483884] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.490679] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.491427] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.497527] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.503941] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.510584] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.518398] device bridge_slave_1 entered promiscuous mode [ 251.523677] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.536786] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.543643] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.550423] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.551896] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 251.571671] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 251.611943] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 251.615340] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 251.629186] team0: Port device team_slave_0 added [ 251.639322] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 251.647879] team0: Port device team_slave_1 added [ 251.666078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 251.682421] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 251.753974] device hsr_slave_0 entered promiscuous mode [ 251.782687] device hsr_slave_1 entered promiscuous mode [ 251.832475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 251.839586] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 251.857297] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.863734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.870492] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.876977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.922111] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 251.928216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.943528] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 251.958119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.967687] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.975133] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.983534] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 251.997752] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 252.003919] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.015256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.023242] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.029615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.053177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.061045] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.067517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.077343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.086243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.099042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.117594] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.127999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.138772] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 252.148616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.156750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.167345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.179047] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 252.193588] 8021q: adding VLAN 0 to HW filter on device batadv0 12:51:55 executing program 5: mknod$loop(0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:51:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@flags={0x3, 0x1d4d74ac0b0b2342}], 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x4000}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:51:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00\x10\x93\xa8;H\xf4]\f') preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x3) 12:51:55 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) fcntl$getflags(0xffffffffffffffff, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000100), 0x4800) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x9a) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000003c0), 0xa) 12:51:55 executing program 3: select(0x40, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)) 12:51:55 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) geteuid() socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x9a) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000003c0), 0xa) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/250, 0xfa}], 0x1) [ 252.349083] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.356428] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.363736] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.370590] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.377448] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.384302] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.391172] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.398015] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.404869] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.411715] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.418603] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 12:51:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 12:51:55 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x840100000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185647, &(0x7f00000002c0)={0x0, 0x800000000021, 0x44f0f00000000000, [], &(0x7f0000000340)={0xfffffffffffffffd, 0x8, [], @p_u32=0x0}}) 12:51:55 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x3) 12:51:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) [ 252.717703] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 252.843077] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.850096] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.857093] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.863991] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.870815] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.877669] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.884546] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 12:51:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 12:51:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x656602, 0x0) [ 252.891409] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.898643] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.905479] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.912331] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.992593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:51:56 executing program 5: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) [ 253.049535] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 12:51:56 executing program 1: 12:51:56 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x840100000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0245628, &(0x7f0000000300)={0x0, 0x8, 0x0, [], 0x0}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f0000000100)={0x990000, 0x2, 0x3, [], &(0x7f00000000c0)={0x990a7e, 0x4, [], @p_u16=&(0x7f0000000000)=0x6}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0xa, @raw_data="5dd472b41e8139bc3fb2030520d78ab422f48301bc20f962c4b84fbe3ec14090a76af9d4f08181d64aa30bc85ca85a5f260a36686bead2c97b5750143a844a13c40030b619a00f122529d6ba5408b770d0250c8cc244c34d81c09024645ee622d14522e312b2aa2ea05cd8b26e7d63e445532c9b81d32cc4b1b9bd096e8ba13bae3e27ebf1d9a37d5208074ee14a0a74c323defc391f3e649eabea9fea5de289a7e123414d0b39139c9d8f97fc7384e2e10156241befc60fb75bdf0e33fe87c4df4b4457243eaae6"}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x7, 0x79, &(0x7f00000004c0)="0a4e46e6eea1aecfb4f8090c86d7fe5725f6e5382c864fa76dc49f2c079f0566c9bece55e25f39a77591bf203cbaf15cac27f562617e833e1edbdcbf99c8135636b03f0d8bc8feece85fd6d3c1ae8eeb8f2b82655e4974bba28b1d81d8db04b9bb23bff0420509000000000000007366a1e0742a8b777b67a4", 0xf6, 0x4, 0x6, 0x6, 0x80000000, 0x2, 0x40000003, 'syz1\x00'}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000002c0)={0x0, 0x800000000021, 0x44f0f00000000000, [], &(0x7f0000000340)={0xfffffffffffffffd, 0x8, [], @p_u32=0x0}}) 12:51:56 executing program 2: 12:51:56 executing program 0: 12:51:56 executing program 4: 12:51:56 executing program 3: mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./control\x00', 0x0) name_to_handle_at(r0, &(0x7f0000000640)='./control\x00', &(0x7f0000000680)={0xc, 0x0, "c66c86d1"}, 0x0, 0x400) 12:51:56 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') dup2(r0, r2) 12:51:56 executing program 1: 12:51:56 executing program 0: 12:51:56 executing program 2: 12:51:56 executing program 4: 12:51:56 executing program 0: 12:51:56 executing program 1: 12:51:56 executing program 2: 12:51:56 executing program 5: 12:51:57 executing program 4: 12:51:57 executing program 0: 12:51:57 executing program 3: 12:51:57 executing program 2: 12:51:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x801000008912, &(0x7f0000000000)="0af51f023c123f3188a070") syz_genetlink_get_family_id$tipc(&(0x7f00000014c0)='TIPC\x00') 12:51:57 executing program 1: 12:51:57 executing program 0: 12:51:57 executing program 4: 12:51:57 executing program 2: 12:51:57 executing program 3: 12:51:57 executing program 5: 12:51:57 executing program 1: 12:51:57 executing program 4: 12:51:57 executing program 0: 12:51:57 executing program 2: 12:51:57 executing program 3: 12:51:57 executing program 1: 12:51:57 executing program 5: 12:51:57 executing program 2: 12:51:57 executing program 0: 12:51:57 executing program 4: 12:51:57 executing program 3: 12:51:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cb"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:51:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x35, 0x0, 0x0, 0x92510900}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xffbe, &(0x7f0000000140)=""/153}, 0x48) 12:51:58 executing program 0: 12:51:58 executing program 2: 12:51:58 executing program 4: 12:51:58 executing program 3: 12:51:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) getpgrp(0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) lstat(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000380)={0x0, 'syzkaller1\x00'}, 0x18) gettid() fsync(0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) 12:51:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x3, 0x4) socketpair$unix(0x1, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0xa) r2 = syz_open_procfs(0x0, &(0x7f0000000a80)='net\x00') sendfile(r1, r2, 0x0, 0x100000001) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000440)=""/246) unshare(0x500) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, &(0x7f0000000040)=0x3c2) open$dir(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x100) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x1}, 0x0) r5 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000001640)='./file0\x00', 0x6c402, 0x3) sendfile(r5, r6, 0x0, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r9, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x41, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r10, 0x402c5342, &(0x7f0000000440)={0x0, 0x0, 0x8, {}, 0x80, 0xff}) ioctl$INOTIFY_IOC_SETNEXTWD(r8, 0x40044900, 0x9) r11 = socket(0xa, 0x3, 0x8) getsockopt$IPT_SO_GET_INFO(r11, 0x0, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x54) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000000)={'bridge0\x004\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') setsockopt$ALG_SET_AEAD_AUTHSIZE(r11, 0x117, 0x5, 0x0, 0x0) 12:51:58 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x3fd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffb0}]}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3, 0x3d3, &(0x7f000000cf3d)=""/195}, 0x48) 12:51:58 executing program 4: syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x2, 0x3) 12:51:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xab, 0x0) ioctl(r0, 0xffdfffffbfffbfaf, 0x0) 12:51:58 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) [ 255.560938] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.573005] bridge0: port 1(bridge_slave_0) entered disabled state 12:51:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000001440)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffcfc, 0x20000005, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) r3 = accept4(r1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r3) 12:51:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 12:51:58 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0xfffffffffffffffe, 0x4) bind(r0, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) shutdown(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r0, &(0x7f0000000180), 0x400000000000370, 0x0, &(0x7f0000000100)={0x77359400}) 12:51:58 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffc98, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) pipe2(0x0, 0x0) listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) [ 255.798619] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:51:58 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uhid\x00', 0x5, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x9a) rt_sigreturn() [ 255.986652] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 256.034079] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.041017] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.047965] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.054811] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.061748] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.068570] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.075506] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 12:51:59 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x10e6) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x1, {0x7, 0x1c, 0x0, 0x100200}}, 0x50) [ 256.082363] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.089166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.096744] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 256.103624] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 12:51:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) r1 = dup2(r0, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x9) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 256.208017] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz1 [ 257.506276] device bridge_slave_1 left promiscuous mode [ 257.512338] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.552811] device bridge_slave_0 left promiscuous mode [ 257.558536] bridge0: port 1(bridge_slave_0) entered disabled state 12:52:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x15, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@typed={0x34, 0x0, @binary="582f45cff97465821b0965512fe4fa59a835ee66e0000002fd3953ffee03d79dc442c6bbe736863d55a7374efe"}]}, 0x48}}, 0x0) 12:52:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}) 12:52:00 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:52:00 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000eff0)=[{&(0x7f0000010000)="240000001900030007ff0907000083be8020000000040205031d85680300a3a2d188737e", 0x24}], 0x1}, 0x0) 12:52:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000340)="660f71e50064ff0941c387652e64450f1bd53131e2c997584266420fe2e33e0f1110c442019dcc8ed31919") connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x19) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, 0x0, 0x0) 12:52:00 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x840100000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000002c0)={0x0, 0x800000000021, 0x44f0f00000000000, [], &(0x7f0000000340)={0xfffffffffffffffd, 0x8, [0x40f0f000], @p_u32=0x0}}) 12:52:01 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x8000000002) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f00004fd000), 0x4) close(r0) 12:52:01 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket$inet(0x2, 0x0, 0x6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x14, &(0x7f0000000180)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}}, 0x108) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x9a) accept4(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000540)=0x2de, 0x7fd) readv(r0, &(0x7f0000000940)=[{&(0x7f0000000540)}, {&(0x7f0000000580)=""/117, 0x75}, {&(0x7f00000008c0)=""/97, 0x61}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/235, 0xeb}], 0x5) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000440)={0x1f}) 12:52:01 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000100)={{0x0, @broadcast, 0x0, 0x0, 'lc\x00'}, {@loopback}}, 0x44) [ 258.091233] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.098561] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.105441] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.112271] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.119081] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.125955] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.132798] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 12:52:01 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 258.139629] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.146488] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.153305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 258.160116] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 12:52:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 12:52:01 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r0, r1) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 12:52:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000000000000007000000000000009d000000000000005a1fe9323a25704cdd88ed6f1a74f7d1f1297d65e093bb59312e4bd7cc1cd3310fb5507eefc52812dca86f022e43848c2fde3e61e8370d2e4e17c73a4d8b4f5f7d6cecfe048b94a9649b79a07536e2c27436810dee5e07b714178e3f1d4a14f9a27916bee4f3fd9107946957dfe2f4101e2ad81e7b4a402c4628792fa78544ed43"], 0x0, 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48) 12:52:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="b427a4b588ef9a12c9d53900030000003e629d9cf9888004f973b10a9045c2e7cbe2971a144bf50000000048a7e40002000000000000002143"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 258.423281] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz1 [ 258.515220] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 258.522224] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 258.529021] hid-generic 0000:0000:0000.0009: item fetching failed at offset 885715339 [ 258.537334] hid-generic: probe of 0000:0000:0000.0009 failed with error -22 12:52:01 executing program 3: syz_open_dev$usbmon(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f00000027c0)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x3, 0x2, 0x80000001, 0x1}, &(0x7f0000000380)=0x10) select(0x40, &(0x7f0000000180)={0x7, 0x5297, 0x7, 0x0, 0x7, 0x3ff, 0x1241, 0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x7530}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x204800, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) eventfd(0x4800000000) 12:52:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet(0x2, 0x2000000000000003, 0x1) write$P9_RREAD(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x801) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) r5 = getpid() ioprio_set$pid(0x3, r5, 0x8) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) listen(r4, 0x1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0x2710}}, 0x0) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0xfef1, 0x0) splice(r1, 0x0, r3, 0x0, 0x810005, 0x0) fcntl$setflags(r0, 0x2, 0x1) r6 = fcntl$dupfd(r0, 0x406, r0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000100), 0x0) 12:52:01 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010"], 0x5}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:52:01 executing program 5: mknod$loop(0x0, 0x6001, 0xffffffffffffffff) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x38e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffeaa, 0x1000000000000003, 0x0, 0xfffffffffffffede) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x0, 0x140, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000000), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0xffffffff, @mac=@random="a2ab4cfa8c97", {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x1, 0x0, 0x7, 0x23800, 0x7, 0x0, 'tunl0\x00', 'syzkaller0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[], 0xd}, @rand_addr=0x80000000, @local, 0x4}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast2, 0xc}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, @empty, {[0x0, 0x0, 0x0, 0xff]}, @mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1, 0x0, 0x4, 0x10000, 0x0, 0x1000, 'erspan0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0x38}, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x100}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) unlink(0x0) rt_sigaction(0xe, &(0x7f00000001c0)={0x0, {}, 0x40000000, &(0x7f00000000c0)="0fc30ac4c2fd204136c4c1fc50c12641d86200c4e1d9d4577e99c4215ddf544643c4010973df08c482f9341cc9f20ff08b00000000"}, 0x0, 0x8, &(0x7f00000002c0)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000600)=""/103) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffa000/0x4000)=nil) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000780)='/dev/full\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x2, 0x2, 0x3cb, 0x8b44}, {0x7, 0x0, 0x1f, 0x6}, {0x9, 0x10000, 0x40, 0x2}, {0x7fffffff, 0x6, 0x8000, 0x2}]}, 0x10) 12:52:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r1, &(0x7f0000000540)=""/78, 0xfec6) 12:52:01 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 12:52:02 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000140)=0xfffffffffffffffe, 0x4) bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) shutdown(r1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r1, &(0x7f0000000180), 0x400000000000370, 0x0, &(0x7f0000000100)={0x77359400}) 12:52:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000300)=0x80000001, 0xfe32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x0, 0x9d4e}, 0x2c) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002900)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="17000000ed7ac54ffffeccd97cd8aa3f442e1def2fa143e3d150a9"], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@initdev, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) getuid() sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2400410}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x78, 0xe, 0xb, 0x304, 0x70bd25, 0x25dfdbfc, {0xf, 0x0, 0x7}, [@nested={0x64, 0x5, [@generic="e0cdd7f2330737aae197e3b6ed1328b8ddf29ebde41d5e4c3c72c57e867553de574caad94a70b3791e705f6fa343314c442b308e4cb8836b78a8b6a1ed34e39a7324670080c3e42f91b5f46424677fbaac49828e52564e0f091865cdcfc171"]}]}, 0x78}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000003c0)={0x4, [0x6, 0x7f, 0xd1, 0x3]}, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000380)) socket$l2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000010b7705f00000000000000003f0000000000000000008000"]) close(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) accept4(r0, &(0x7f0000000680)=@generic, &(0x7f0000000700)=0x80, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000280)={'HL\x00'}, &(0x7f0000000340)=0x1e) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 12:52:02 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) [ 259.124057] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:52:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd) 12:52:02 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) 12:52:02 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) symlink(0x0, 0x0) getgroups(0x0, 0x0) r1 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fchownat(r0, &(0x7f00000002c0)='\x00', 0x0, r1, 0x1000) 12:52:03 executing program 3: 12:52:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 12:52:03 executing program 5: r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100), 0x1c) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x0, 0x7f}, @sack_perm], 0x20000000000000d0) dup2(r1, r0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 12:52:03 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x840100000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000002c0)={0x4f9980000000000, 0x800000000021, 0x44f0f00000000000, [], &(0x7f0000000340)={0xfffffffffffffffd, 0x8, [], @p_u32=0x0}}) 12:52:03 executing program 2: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00005eaff8)) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 12:52:03 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@remote, 0x22}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="2f00000004000000000034e702cd7bcb00000000000002000000000000"], 0x1d) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)={0x3}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000540)={@multicast2, @remote}, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000200)={{0x0, 0x8, 0x1b73, 0x4, 0x8000, 0x7}, 0x3, 0x200, 0x81}) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f0000000580)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x10000000143042, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000002c0), 0x4) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) personality(0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000000440), 0x8000ffdffffe) 12:52:03 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000000c0)=0x6547, 0x68) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x2, 0x300) recvmmsg(r2, &(0x7f0000006500), 0x0, 0x0, 0x0) 12:52:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:52:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setitimer(0x2, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) getitimer(0x100000000002, &(0x7f00000000c0)) [ 260.273679] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 260.332124] protocol 88fb is buggy, dev hsr_slave_0 [ 260.338325] protocol 88fb is buggy, dev hsr_slave_1 12:52:03 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x9a) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) [ 260.404955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.411918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:52:03 executing program 1: [ 260.518920] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.525996] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.533915] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.540733] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.547710] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.554554] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.561419] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 12:52:03 executing program 5: [ 260.568312] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.575160] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.582039] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.588841] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 260.610462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 12:52:03 executing program 5: 12:52:03 executing program 3: [ 260.698126] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz1 12:52:03 executing program 1: 12:52:03 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@remote, 0x22}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="2f00000004000000000034e702cd7bcb00000000000002000000000000"], 0x1d) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)={0x3}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000540)={@multicast2, @remote}, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000200)={{0x0, 0x8, 0x1b73, 0x4, 0x8000, 0x7}, 0x3, 0x200, 0x81}) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f0000000580)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x10000000143042, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000002c0), 0x4) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) personality(0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000000440), 0x8000ffdffffe) [ 260.805825] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.812873] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.819709] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.826627] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.833489] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.840303] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.847165] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.854019] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.860816] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.867670] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.874528] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 260.893323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:52:04 executing program 5: [ 260.952287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 12:52:04 executing program 3: 12:52:04 executing program 1: 12:52:04 executing program 0: [ 261.297519] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz1 12:52:04 executing program 5: 12:52:04 executing program 4: 12:52:04 executing program 3: 12:52:04 executing program 0: 12:52:04 executing program 1: 12:52:04 executing program 2: 12:52:04 executing program 3: 12:52:04 executing program 0: 12:52:04 executing program 5: 12:52:04 executing program 4: 12:52:04 executing program 1: 12:52:05 executing program 3: 12:52:05 executing program 0: 12:52:05 executing program 2: 12:52:05 executing program 5: 12:52:05 executing program 4: 12:52:05 executing program 3: 12:52:05 executing program 1: 12:52:05 executing program 2: 12:52:05 executing program 0: 12:52:05 executing program 4: 12:52:05 executing program 5: 12:52:05 executing program 3: 12:52:05 executing program 0: 12:52:05 executing program 1: 12:52:05 executing program 2: 12:52:05 executing program 4: 12:52:05 executing program 3: 12:52:05 executing program 0: 12:52:05 executing program 5: 12:52:05 executing program 1: 12:52:05 executing program 2: 12:52:05 executing program 0: 12:52:05 executing program 4: 12:52:06 executing program 5: 12:52:06 executing program 3: 12:52:06 executing program 0: 12:52:06 executing program 1: 12:52:06 executing program 4: 12:52:06 executing program 3: setfsgid(0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f0000010000)="5500000020007fafb72d00b2a4a2809302000000030343ee6b26236925000a0000000000130000008848a3c728f1c46b7b31afdc1338d5440000000000000000000000088daa7227c43ab8220000bf0c00157400d4", 0x55}], 0x1}, 0x0) 12:52:06 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002740), 0x67c) read$FUSE(r0, &(0x7f0000000740), 0x1000) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='s']) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001740)={0xb0, 0x0, 0x4, [{{}, {0x0, 0x0, 0x8, 0x0, 'rootmode'}}]}, 0xb0) 12:52:06 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}, @IFLA_NET_NS_PID={0x8}]}, 0x38}}, 0x0) 12:52:06 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@remote, 0x22}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="2f00000004000000000034e702cd7bcb00000000000002000000000000000002000000000000"], 0x26) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x80) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x10000000143042, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000002c0), 0x4) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) personality(0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000000440), 0x8000ffdffffe) [ 263.317550] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 263.325169] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. 12:52:06 executing program 1: creat(0x0, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff}) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) [ 263.440725] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 263.448447] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. 12:52:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet(0x2, 0x3, 0xff) sendmsg(r1, &(0x7f00000014c0)={&(0x7f0000716000)=@in, 0x80, &(0x7f0000685000)=[{&(0x7f0000001480)="b58872000000e78f77c58e2438dc000000000000", 0x14}], 0x1}, 0x0) 12:52:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") clone(0x828016102011ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0x10, 0x3, 0x9) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007fbdb72d1cb2a4a28093", 0x10}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) read(r2, &(0x7f0000000100)=""/4, 0x3) 12:52:06 executing program 3: msgsnd(0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x220040, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\x84\xe0\xda\x82a\xbe\x18O\x17\x1b\\\x143\x06v\x9b=>\xc1\xd9\x06\x00\x05\xf7\xae\xce\xbeA,j5\xac\xf5\xf0&\xc5$\x951QC\x87\x9f\xe0};\xac\xb7k>0\xce\xcd~\xd766*\fo=Cg&[\x8b\xe2\xbd\xe9\x16\xc6\x1e\x97e]\xb0\xed\xe7I\x18\x96RS\x10\x8cyr\xb7\xcf', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15) 12:52:06 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000003c0)={0x4, 0xffffffffffff07f2, 0x6}) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(r2, &(0x7f0000000380)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)='ib\x00', 0xfffffffffffffed9, 0x3) eventfd(0x2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, 0x0, 0x4000000) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlockall() r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syncfs(r3) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000200)={0xf, 0x1f, 0x1, 0x2}, 0xf) accept$inet(0xffffffffffffff9c, &(0x7f00000002c0)={0x2, 0x0, @local}, &(0x7f0000000340)=0x3) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000100)='trusted.overlay.redirect\x00', 0x19, 0x2) 12:52:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet(0x2, 0x3, 0xff) sendmsg(r1, &(0x7f00000014c0)={&(0x7f0000716000)=@in, 0x80, &(0x7f0000685000)=[{&(0x7f0000001480)="b58872000000e78f77c58e2438dc000000000000", 0x14}], 0x1}, 0x0) 12:52:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000000c0)=0x6547, 0x68) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 12:52:07 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x17, 0x0, 0x0, 0x92510900}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xffbe, &(0x7f0000000140)=""/153}, 0x48) 12:52:07 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getegid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x8810) 12:52:07 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x2e) tkill(r0, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) exit_group(0x3) 12:52:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syslog(0x2, &(0x7f0000000000)=""/123, 0x7b) creat(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x0, 0x0) 12:52:07 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0xfffffffffffffffe, 'nr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00', 0x4}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)=""/65) ioctl(r0, 0x8936, &(0x7f0000000000)) 12:52:07 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x200, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x0) [ 264.357022] mmap: syz-executor.4 (11718) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 12:52:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 12:52:07 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x9a) readv(0xffffffffffffffff, 0x0, 0x0) 12:52:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x8000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_opts(r3, 0x29, 0x2, 0x0, 0x331) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 12:52:07 executing program 0: 12:52:07 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0xfffffffffffffffe, 'nr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00', 0x4}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)=""/65) ioctl(r0, 0x8936, &(0x7f0000000000)) 12:52:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) add_key(&(0x7f00000000c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 12:52:07 executing program 1: socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0xffffffffffffff70, &(0x7f00000002c0)}}], 0x388, 0x0) dup2(r0, r1) 12:52:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="24a880dd661aab789218cc999830", 0x0}, 0x28) 12:52:10 executing program 2: 12:52:10 executing program 5: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x0, @dev, 0x0, 0x3, 'wlc\x00'}, {@remote, 0x0, 0x2000, 0x860, 0x3, 0x28d}}, 0x44) socket$inet6_sctp(0xa, 0x10000000005, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, &(0x7f0000000040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresuid(0x0, r2, 0x0) r3 = inotify_init1(0x80000) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) 12:52:10 executing program 4: 12:52:10 executing program 1: 12:52:10 executing program 0: 12:52:10 executing program 3: [ 267.506523] IPVS: set_ctl: invalid protocol: 0 172.20.20.0:0 12:52:10 executing program 4: 12:52:10 executing program 0: 12:52:10 executing program 1: 12:52:10 executing program 3: [ 267.590701] ptrace attach of "/root/syz-executor.5"[11133] was attempted by "/root/syz-executor.5"[11776] 12:52:10 executing program 2: 12:52:10 executing program 5: 12:52:10 executing program 4: 12:52:10 executing program 1: 12:52:10 executing program 0: 12:52:11 executing program 3: 12:52:11 executing program 4: 12:52:11 executing program 2: 12:52:11 executing program 5: 12:52:11 executing program 1: 12:52:11 executing program 0: 12:52:11 executing program 4: 12:52:11 executing program 2: 12:52:11 executing program 3: 12:52:11 executing program 1: 12:52:11 executing program 0: 12:52:11 executing program 5: 12:52:11 executing program 4: 12:52:11 executing program 3: 12:52:11 executing program 1: 12:52:11 executing program 2: 12:52:11 executing program 0: 12:52:11 executing program 5: 12:52:11 executing program 4: 12:52:11 executing program 2: 12:52:11 executing program 1: 12:52:12 executing program 3: 12:52:12 executing program 5: 12:52:12 executing program 1: 12:52:12 executing program 0: 12:52:12 executing program 2: 12:52:12 executing program 3: 12:52:12 executing program 4: 12:52:12 executing program 5: 12:52:12 executing program 1: 12:52:12 executing program 0: 12:52:12 executing program 3: 12:52:12 executing program 2: 12:52:12 executing program 4: 12:52:12 executing program 5: 12:52:12 executing program 1: 12:52:12 executing program 3: 12:52:12 executing program 2: 12:52:12 executing program 1: 12:52:12 executing program 0: 12:52:12 executing program 5: 12:52:12 executing program 4: 12:52:13 executing program 2: 12:52:13 executing program 5: 12:52:13 executing program 0: 12:52:13 executing program 1: 12:52:13 executing program 3: 12:52:13 executing program 4: 12:52:13 executing program 1: 12:52:13 executing program 5: 12:52:13 executing program 2: 12:52:13 executing program 3: 12:52:13 executing program 0: 12:52:13 executing program 1: 12:52:13 executing program 4: 12:52:13 executing program 5: 12:52:13 executing program 0: 12:52:13 executing program 2: 12:52:13 executing program 3: 12:52:13 executing program 1: 12:52:13 executing program 4: 12:52:14 executing program 0: 12:52:14 executing program 2: 12:52:14 executing program 5: 12:52:14 executing program 3: 12:52:14 executing program 4: 12:52:14 executing program 2: 12:52:14 executing program 5: 12:52:14 executing program 1: 12:52:14 executing program 0: 12:52:14 executing program 3: 12:52:14 executing program 5: 12:52:14 executing program 4: 12:52:14 executing program 0: 12:52:14 executing program 2: 12:52:14 executing program 1: 12:52:14 executing program 3: 12:52:14 executing program 5: 12:52:14 executing program 4: 12:52:14 executing program 0: 12:52:14 executing program 3: 12:52:15 executing program 2: 12:52:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x0, 0x0) 12:52:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) fcntl$setstatus(r2, 0x4, 0x42803) 12:52:15 executing program 5: capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) 12:52:15 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) close(r0) 12:52:15 executing program 0: 12:52:15 executing program 2: 12:52:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x0, @multicast1, 0x0, 0x0, 'none\x00'}, {@broadcast}}, 0x44) 12:52:15 executing program 5: msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") msgrcv(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1, 0x1, 0xa4a3ad41a879dde0) 12:52:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 12:52:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) accept(r0, &(0x7f0000000180)=@nfc, 0x0) [ 272.486705] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 12:52:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305030008000100010423dcffdf00", 0x1f) close(r0) 12:52:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000280)=""/202) 12:52:15 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 12:52:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') sendfile(r0, r1, &(0x7f0000000040)=0xf, 0x80000003) [ 272.738483] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.805070] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 12:52:15 executing program 2: pipe(0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x2000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) 12:52:15 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) lgetxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)=@known='user.syz\x00', 0x0, 0xffffffffffffff6f) 12:52:16 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x100000000000015d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 12:52:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r0, r1, 0x0, 0x800000080000002) 12:52:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x84001, 0x0) 12:52:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/94, 0x5e}], 0x1, 0x0) 12:52:16 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x0, 0x4, 0x8, 0x14, 0x8, 0x2, 0x4, 0xe33e, 0x5, 0x6, 0x3}) r2 = dup2(r0, r1) getsockopt$sock_timeval(r2, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)={'syz0', "f4ae1faefb5b9fbf025f8066e07b340dbd01a50bea19eae160ad5e5bdc464c69f75771ab3c19fc273d4bf51624703bacf1d441793661affab7c2f38059c75cc7747423c6d8346c49"}, 0x4c) 12:52:16 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000100)={0x10}, 0x10) 12:52:16 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) close(r0) write$nbd(0xffffffffffffffff, 0x0, 0xfffffffffffffe44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0xff40, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000), 0x4) 12:52:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1f, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) dup2(r1, r0) 12:52:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x2, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x800000000024) 12:52:16 executing program 3: r0 = socket$inet(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) write$FUSE_GETXATTR(r1, &(0x7f0000000200)={0x18, 0x0, 0x6, {0x2}}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) 12:52:16 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000001800810a564b70c32e3254180a060ac0fe0cd302e8bd6efb120009000e0048fe02000000060005c0fe00", 0x2e}], 0x1}, 0x0) 12:52:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = open(&(0x7f0000000040)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r1, r2, 0x0, 0x8000fffffffe) 12:52:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r0, r1, 0x0, 0x800000080000002) 12:52:16 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/11, 0x329) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") socket$inet6(0xa, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 12:52:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/250) 12:52:16 executing program 2: timer_create(0xfffffffffffffffd, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000240)) 12:52:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x39, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:52:17 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x100000443) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000680)={0x6d, 0x0, [], {0x0, @reserved}}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r2, 0x0, 0x0, 0x0}, 0x30) fcntl$lock(r2, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000a40)=[0x0, &(0x7f0000000900)='\x00', 0x0, 0x0, &(0x7f0000000a00)='/dev/binder#\x00']) 12:52:17 executing program 2: syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:52:17 executing program 0: io_setup(0x9, &(0x7f00000000c0)) [ 274.234937] input: syz0 as /devices/virtual/input/input11 12:52:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) close(r0) write$nbd(0xffffffffffffffff, 0x0, 0xfffffffffffffe44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000), 0x4) [ 274.299888] input: syz0 as /devices/virtual/input/input12 12:52:17 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x100000000000015d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 12:52:17 executing program 4: syz_genetlink_get_family_id$nbd(0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @loopback}, &(0x7f0000000080)=0xc) openat$rfkill(0xffffffffffffff9c, 0x0, 0x4080, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x80000) pipe(&(0x7f0000000600)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$UHID_CREATE2(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_genetlink_get_family_id$tipc2(0x0) 12:52:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 12:52:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') 12:52:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x66a, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x8, 0x0, 0x401, 0x0, 0x0, 0xffffffffffffff81, 0x4, 0x0, 0x0, 0x1, 0x8, 0x3, 0x0, 0x0, 0x100, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x7, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r0}, 0x2f0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}, 0x0, 0x3, 0x1, 0x1}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)="5acb6f70de4aac6891f5dc48b2af721536d4ac1da132a881", 0x18}], 0x1}, 0x40000) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) 12:52:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 12:52:17 executing program 1: syz_genetlink_get_family_id$nbd(0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080)) fcntl$dupfd(r1, 0x0, r1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x4080, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x100, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$UHID_CREATE2(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 12:52:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) [ 275.073477] input: syz0 as /devices/virtual/input/input13 [ 275.168540] input: syz0 as /devices/virtual/input/input14 12:52:18 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) write$UHID_CREATE(r0, &(0x7f0000000680)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0}, 0x120) 12:52:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f00000041c0)) 12:52:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_CREATE(r0, 0x5501) 12:52:18 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x100000000000015d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 12:52:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0xd803}) r3 = socket$nl_route(0x10, 0x3, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000540)=""/117, 0x75}], 0x1) dup3(r3, r2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x1}, 0x24}}, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r1, 0x16) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 12:52:18 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) syz_execute_func(&(0x7f00000004c0)="3666440f50f564ff09c3e2c9975842f0815d7d0000000056b80f4c938a00fd00420fe2e3e2e31110c442019dccd3196f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180), 0xfe0c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, 0x0, 0x0) [ 275.491137] UHID_CREATE from different security context by process 195 (syz-executor.3), this is not allowed. [ 275.533154] input: syz1 as /devices/virtual/input/input15 12:52:18 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0xc009, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000001ac0)=""/11, 0x58) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, 0x0) [ 275.603794] input: syz1 as /devices/virtual/input/input16 12:52:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)="3900000010000900000000ae7aa77cf400f2f63f0800000045009db9120c007b0500030041012b4c06ce2d74b22ff3dd49e25468849ef72da1", 0x39}], 0x1) 12:52:18 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@nat={'nat\x00', 0x19, 0x1, 0x130, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x200002c0], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000f5ff000000000000000000cf000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000900000007000000000069726c616e30000000000000000000006c6f00000000000000000000000000007665746831000000000000000000000069726c616e30000000000000000000bafe4d4ef276d1da0000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x1a8) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000000000), 0x311, 0x0) 12:52:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000ebff0fdf0000000005000654c6c6598d2ba7c61400eb55d28df8fe2bc72c8ce6ae96b306000a000000"], 0x31}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 12:52:18 executing program 5: 12:52:19 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = getpid() kcmp(r1, r2, 0x0, r0, r0) 12:52:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 275.967947] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:52:19 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) stat(0x0, 0x0) close(r0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) fstat(0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000002c0), 0x4) [ 276.096787] input: syz0 as /devices/virtual/input/input17 12:52:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad6200000000000000e6", 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x800, 0x0) r3 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000380)=0x1e) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000480)={0x50, {{0xa, 0x4e20, 0xff, @empty, 0x3}}, {{0xa, 0x4e21, 0x7, @local, 0x4}}}, 0x108) dup(0xffffffffffffffff) fstatfs(r2, &(0x7f00000002c0)=""/125) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000000)=0xffffffffffffff80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) perf_event_open$cgroup(&(0x7f0000000080)={0x7, 0x70, 0x355, 0x20, 0x6, 0x80000000, 0x0, 0x1c, 0x0, 0x1, 0x6, 0x1f, 0x9, 0x7ff, 0x9, 0x7, 0x8000, 0x2, 0xff, 0x1, 0x3ff, 0x1, 0x2, 0x3, 0x10000, 0x7, 0x89, 0x10000, 0xfffffffffffffffa, 0x7fff, 0x5, 0x1, 0x8, 0x101, 0x1000, 0x0, 0x9, 0x9, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000040), 0xb}, 0x80, 0x7, 0x4, 0x2, 0x401, 0x9, 0x4}, r2, 0x0, r1, 0x1) 12:52:19 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2b}) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) 12:52:19 executing program 1: [ 276.205971] input: syz0 as /devices/virtual/input/input18 12:52:19 executing program 0: 12:52:19 executing program 5: 12:52:19 executing program 3: 12:52:19 executing program 0: 12:52:19 executing program 1: 12:52:19 executing program 4: 12:52:19 executing program 5: 12:52:19 executing program 3: 12:52:19 executing program 1: 12:52:20 executing program 2: 12:52:20 executing program 0: 12:52:20 executing program 3: 12:52:20 executing program 4: 12:52:20 executing program 5: 12:52:20 executing program 1: 12:52:20 executing program 0: 12:52:20 executing program 3: 12:52:20 executing program 5: 12:52:20 executing program 4: 12:52:20 executing program 0: 12:52:20 executing program 1: 12:52:20 executing program 2: 12:52:20 executing program 4: 12:52:20 executing program 5: 12:52:20 executing program 0: 12:52:20 executing program 3: 12:52:21 executing program 1: 12:52:21 executing program 4: 12:52:21 executing program 0: 12:52:21 executing program 2: 12:52:21 executing program 5: 12:52:21 executing program 3: 12:52:21 executing program 1: 12:52:21 executing program 4: 12:52:21 executing program 3: 12:52:21 executing program 5: 12:52:21 executing program 0: 12:52:21 executing program 1: 12:52:21 executing program 2: 12:52:21 executing program 4: 12:52:21 executing program 3: 12:52:21 executing program 5: 12:52:21 executing program 0: 12:52:21 executing program 3: 12:52:21 executing program 4: 12:52:21 executing program 1: 12:52:21 executing program 2: 12:52:22 executing program 5: 12:52:22 executing program 4: 12:52:22 executing program 3: 12:52:22 executing program 0: 12:52:22 executing program 2: 12:52:22 executing program 1: 12:52:22 executing program 5: 12:52:22 executing program 4: 12:52:22 executing program 3: 12:52:22 executing program 0: 12:52:22 executing program 2: 12:52:22 executing program 4: 12:52:22 executing program 5: 12:52:22 executing program 0: 12:52:22 executing program 1: 12:52:22 executing program 2: 12:52:22 executing program 3: 12:52:22 executing program 4: 12:52:22 executing program 5: 12:52:22 executing program 0: 12:52:23 executing program 1: 12:52:23 executing program 2: 12:52:23 executing program 3: 12:52:23 executing program 4: 12:52:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xff, 0x0, 0x3ff}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x80ffffff}) 12:52:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x40000002], [0xc2]}) 12:52:23 executing program 3: syz_genetlink_get_family_id$nbd(0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x4080, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x100, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20082, 0x0) dup3(r0, r1, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$UHID_CREATE2(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000300)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12:52:23 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xfffffffffffffc98, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@remote}, 0x20) 12:52:23 executing program 1: 12:52:23 executing program 4: 12:52:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xfe) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r4 = dup2(r1, r3) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x42, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), &(0x7f0000000180)=0x8) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000240)='bridge_slave_0\x00') setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0), 0x4) timerfd_gettime(0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ftruncate(r5, 0x80003) sendfile(r2, r5, &(0x7f00000000c0), 0x8000fffffffe) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0) 12:52:23 executing program 5: capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 12:52:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad6200000000000000e6", 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x800, 0x0) r3 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000380)=0x1e) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x8000fffffffe) perf_event_open$cgroup(&(0x7f0000000080)={0x7, 0x70, 0x355, 0x20, 0x6, 0x80000000, 0x0, 0x1c, 0x0, 0x1, 0x6, 0x1f, 0x9, 0x7ff, 0x9, 0x7, 0x8000, 0x2, 0xff, 0x1, 0x3ff, 0x1, 0x2, 0x3, 0x10000, 0x7, 0x89, 0x10000, 0xfffffffffffffffa, 0x7fff, 0x5, 0x1, 0x8, 0x101, 0x1000, 0x0, 0x9, 0x9, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000040), 0xb}, 0x80, 0x7, 0x4, 0x2, 0x401, 0x9, 0x4}, r2, 0x0, r1, 0x1) 12:52:23 executing program 0: r0 = socket(0x1, 0x1, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 12:52:23 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x10) r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0x1020b) exit(0x0) sendfile(r1, r2, 0x0, 0x1) r5 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000440)={0x0, 0x0, 0x80000000}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000004c0)={0x0, r6}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000400)) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x2, 0x0) ioctl$FICLONE(r7, 0x40049409, 0xffffffffffffffff) open$dir(&(0x7f0000000480)='./file0\x00', 0x10000, 0x4) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) 12:52:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') 12:52:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 280.766265] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 280.792020] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:52:23 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x14, 0x15}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000000000000000000200"], 0x10}, 0xfc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 12:52:24 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) dup(0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syncfs(0xffffffffffffffff) dup3(r0, r1, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000000), &(0x7f0000000080)=0x4) 12:52:24 executing program 5: pipe(&(0x7f0000002700)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 12:52:24 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) 12:52:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xfe) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r4 = dup2(r1, r3) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x42, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), &(0x7f0000000180)=0x8) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000240)='bridge_slave_0\x00') setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0), 0x4) timerfd_gettime(0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ftruncate(r5, 0x80003) sendfile(r2, r5, &(0x7f00000000c0), 0x8000fffffffe) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0) 12:52:24 executing program 5: get_robust_list(0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0xffffffffffffff19) 12:52:24 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, 0x0, &(0x7f0000000040)) 12:52:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) 12:52:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write(0xffffffffffffffff, &(0x7f00004abf1b)="ae", 0x1) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='1'], 0x1) 12:52:25 executing program 5: get_robust_list(0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0xffffffffffffff19) 12:52:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x8}, 0x2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 12:52:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) 12:52:25 executing program 2: io_setup(0x1000000107, &(0x7f0000000080)) 12:52:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x18) 12:52:25 executing program 5: get_robust_list(0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0xffffffffffffff19) 12:52:25 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000680)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000200)=""/131, 0x83}, 0x11c) write$UHID_INPUT(r0, &(0x7f00000017c0)={0x8, "7978fd82e4b9975320c367357bfb8bae7e5fb4034386e49e57c5ef7e4df9d71c81420f2a299ba151270997558402f9e5a36c04684bd3120d6d430ffa5d4357db8c46d45bfc6128ab4dc81b6a0769961cbfd15aa7cce32f373999a9e7598c1fa33418efb762376e9ddcc9f0917e4569c5b7cab701af2815c50814d7c1eeaed9808c3ddf43fc97654d204a305ea759c031244b59417c669d126083ec6593cceabda727ae68bb7b08876194fc56e05b867fd28e028ef6475badc89547ccc05ed95259c222392ae9436176dcc143709e677140ca2b565be8ae27e5b7d5c1804bfbbf248b3489db2ff28e09f08154e290173e3b17eeb2d0ab3599b8e84ec1f281d9a81aa558f93cce123316b2d790b9e825d3f1e3dcdab529555c0234b2ea2d3292ff4fd020519100645920142df5099d84dd7b8d0c6b336febc624e91a189376d1af2fbc54f2051a6261b9e4f25f50c21b0711149caab5e6d4464b157476af128800cd5c4441f6afbc7f013928a59c56c54e76d4f4239a54ced46f9bfa3c127e912bbf5732c0787911c8e4cab3e477d0bf64a57dc7e0788acd087331cd34035a1e0d198f6a3231047267efdfd1a2eb80237aa11528681e609ff689f0d6b65f3c7783835a59cb07fb4a07ad61c304f63116a154e2fa0ffd514350ee85fabfdf0fce79895792362af51a57f00844b41d96e08b1028ea202a243cb065e6bc0ff88bb654734d1918f34b596a51c6e92191bd402f909e7edbb4c7f55d7c3aa6f75a50a53cfeb1554baedbf9dc621bfeddeba39c78042e970c91363262a031ea473b820e2e022835e087ebc2f414915c9e71d225045019df95667dc8f14ace645b5b3533947f0e9780634d39f40ab34bf0713bc0065f826087c8da4d1445f0b7759f7472479186ff1ebe3ba6f6de07f17e3f0c643498c4c07d938b867f0cf3c51027ceac4cab7ad8c441a0351bd18e9bd49d9a76ddde74363616603bab0098c72b2e0a23589390cc8b9f8cfe7cbf7a8255fbc8012e4d3b5b08f41dc1531b8522b2b3d0b1a3de3425f6a6629f649a1fe4a119a040f3c4e3990e9dc7087bdadd6dd880075387b2be90a69b33ab9d45623d9c6b7e0b88e276dc0f604ff821009893aa806a109af2b2d8a9c5f8286c3a3d7d1796c2c2e6062a08b0335c03de9437dd7e29e663c00338b8723b83c53c532185ccd853c04a45f1db058cbc857add62524f204b7a3fa9a9131b6378b0dea4215e1d44800924785ce94caab9a93c28bc9d7822033a10d780d4f2882c346e2873e6c1132451eed49df2338daa02cadff91f85f510bb94f1edb6c698f5ec4063fe5316d242d6bd6147248eaa15e7813045054be7259a443922b52de6d2e03de4283e6482f4599a2c88b466e06e616d18b9b794d48cf3c18680fbd38106e5a51ecf699a8273345720a6149e80746b13966853e8fb37ad5a822f15cb120f2ef75aac7f5858a381f59ddb27af063b2a358e1b189cd8e2018fe33b41e30bab56a683c49d8adb970c657cecc2d5fb094917f234fd5d26643b4c3d996132a54eb4f3e7d9ecfa14097273e8ed59e29677342a220f317d588ea734975e09cf50e527d641c684e40c617b0add2885c7e359d52d184a19b96ee9bc08d6cda89728a3960c582699881bbe7b3f3f6e8d6528ba8ed49f13bb224321525417097e791e509e165b3c9891571a140caed0821c4360e7370ec759ae4b06d756cbf8c888dbe40af1347b367687a72cfac69aaa7e0834e7252e9c9eded8f53bea202ba672a2866440750938f6a139c18c8546fd8f5e0885f299e3df91692ec0dfd1f96a553fb68f3ca1323df18272148bceb9662b2c4eba2f9021d8ae637bfc14866967c63b04b7eab010711465da104fcb3e443500ccfe722ca676505a8d3aeb99a2e368389a6ee436d6d516fd6757002fd7a7fef9adc98ed154b16c01689124327993f4164215798c60ab9cfc631789aa746e691f4807286fd571044e1dfb6ebdb5d14bc00bc50f6a9662af7b30cfc332de7edbf42b822a4435a5c36f7e7f7f78f7e0c8e9eef6e2f624df9375046b9845f20e0b35a4cb7b79ae8bb8dcd159beb5c1ece695f43e8c586de59d2e552b4fb3b4457241842133aed1f4587ac1b8037b9a8c32aa3ca21098145db2022ae30f88125e331da450433a948e2d075ccdb3793c0d96844b48e9f1edfab2d43feb2127f687156b2737c082a67d24171cb74eae84e64cfe0c8b9e57ce865aa2bd15289c3ad047349d72cfa467a545a1599c96cfc612c63be6721c419540f8c38fe45b91ad4163dca3ad044c89bed14eaac1d92f44a2ba0d28a4233b50ad0a10825e2e0059289a304177a395a5fd847efef2fac5ec57791575ef8bec0c5f4d9b5a82785a7f8bcc540922b74467f38814b77c0d5c93112429a81f6904302fb9cde1f1686dd1da77401d1819f127a237221c3803f64ec25ff05d7a0c42fd92981957dc37e63a89cf406a2157d672265387eb5d011c5b4c6d16d790795a48590f17f601f77208ffb4ed391141235337a0d3547efa19078b7d83bbbbac80d226e5481c687c83fc5950f66c8257b14a9b45b9ab95b719f07e63f976196b3cb81d04cc44177de95802ee80e532ba3bf6ac5e4fdea8355442ad73ce98dee7d9dc5e467e63e522ddcd5671cec1d90c002127a927836eb555fc03801a6cdf4f36897b4044623690929670cf08c757354513ff11850c97e498671f639fe82b28b406b9625e8f4dbd390922584613e81b31625cb9dad6461b1b3ee8c367c2ee588e197ef1ef6bb7ace504910ad1f236f0beb69c31225e0624e101c6f1ba5597a5799dc39e9b39a5e37764b8e1a8f885eae1b402e1b514c599edb88549da057a8cee3822a28457af8fe09a3640989802d4afff0bc88d977579ef52d1e9a3e41b076603e7aca53fecc3ed2812c1224e37345b0c8a02b7a1db1e3e70e2ee4535f8dbc496e8ca9ae4fa486c5e62bfe71aa9c73d301197c684489318758bac2b23f6cacf98a8af8833ee3047b376ca181fdc187c680a66a34c165f5eea63dbbc17aacaf9fad3fbe913a496acdc116ea7512c61f5b4ae925dfbb1e41479e26edb9466af03cc6ea2ce9a35341f68af530112b8cf8f594c5bbcfb251d844bcf5e3fb9302ab1725b2049be32d7c85ca1c46714c63ae24cebcc9bb145e7f088be9e33761672416bc0adb4808d067d099bf73231f92c4b7621429d8d346bd0cfdece57978372f641019e3c378d20197884da53fdbdbff4e2c1365901650b22f1be60e8b8010704deb9d9aa7fffe34bc9ca1106bbfd0c2f083a09c8dd43e312af88031e9d5b7a32eea5a45a93d9c159c73f2259678dcf4debe970b6f7e616a4b8cc799778940310973f288dc87cba9b182a78e53d65191e06397c03072d0738d330f986d3cc5ceba24e52820cc99a5bb83b5a473f6e5b1595408ca67fcabe862a400be4c0bd681a13b87ad674799a3c166863540d4fa1a5b02abd8076d08977ccdc7eecdffa91aceea0cbbea11d02ebdabc9e1f18c5304bd81c82a3b87487d4cbdcbb304763fdc45d8c2f2fd141d87d6057c7658aac5c85407c46b94b64256e9d6d3bdf5d59ad3305d980d1ea4a6d74f22725e140b3b5d452fadc758253a85e013ceb9c41564bd872d3b1a210ad4a10b3fc90531fa8bfbda10fdb37b0a3e0e412ba84679e6177aaf3a7d5426ec1ba48cb9130fba4873d2e34cf5bb9202dc679df111a28d4f47b086f8d6dc76587c6b1daf86411994d43031c60cdbf03426b0d6d01cd5c0145cc1c06b2debcf0cb1a304a945347bd08286876a505f45e2b070a3ea78090401a32f1fd60da71a0c8361de9ea28268e88fa992baa7ffe1e07910fc7c393874ad81e3a4e5fb3f06ea7183ded97f49ec8f776fab7544318d4007ced4fb579b5cae2bf2a1fd30595484e2064e63a840d5da959b172f0ea2be0b6555160cf335ccc3aaf28f3e24be1ee7f838e1df16e4d972ce9067f60957bf708ceb8445167de116a64273073449ba75a1b0400c5a300637c3897c43e6e62e7f89dd2cf522f076a91e92b7e4ec35bc4b621e98009ecb661cbaceecb35446377d991892699e9c87f167d7e30d30c934640463ffeb96517e593e85dc9a6e66f2c71a9b8703be01d13a05222bcf50a4cbee68d35d77e08895a0d74d4570f7bbcffd3decab84eb2f0a2383a160e1aff99cd1f84ce496001e81d0f681ddb6e16d257b76cefe96282a0bb929991d85338477bd9a3aa3a40a9d1ec64f72473cb63ba1e76dfeb6ee61dc86a25e3194809d74fe16e5c3428a9fdb82325f8546bac7a856007d44ba4f11f45cac6c36d6aedc75fa47bf36cb9c42440ab6de06053b163c1b178f6506a9cdd4d4729d9d8a74b1e3798faf3a975e27180a442b53d44b316fc102e2ee7e1bcf6ea6461419624f36d40a3bf75fe2a96b7b9b3c6162aa8c4080fc0ea25be57bbe84a100efeb2c84c072fade44e84b14c7b297b34ead0790c488ee6ee9f477bea56a76d316c5a307a48f71c77815db4018e00c5d35ef332972dbaf09fcaa0f05ce6a6ead2b7677c2d52e97eba1baa5ce84a5677e0666fe569d320c7949963e06389d5dc9918d8ab49357c591e6946e74e731bedfe95b5f2a6133c89e6e610ab079caa16b881fdd75287538639a62a7fc12edbd0928e59be4efe357ae8789adca93a3dd35617f5b5461d1a4d9724be36cc18adcec55fee17e9ece667368bbb304d4b6f19c9a72ec007a2d169cab5e4e75f3aa645be24902cea63f23814e7425eee973b63646dd4114a495f4a3092152166c95493bd12b4860f1e4ef6f911d6ce5df383f363ef0a0df3a6f78f447843afc5098077f9157e125dc7fe377c9d92d5192b8d93e05c1b43bda8efe901f3a00d1eeaba23a6c930989fdd30f0ba4a50afe308f891affedd42f6f3f17111894ba9dd12477197c0839dc190c9c31044424345b1c96cf45e9643f2fc19600dd3981d457b6e68c4f6e17e92b862ee03d7d982c86b87bc402151abfcf2d222171cbd8fb390f6b88b8dd90c520f862764045e7832b1d1140ba89c73bee8cb55ffb7c2fbdd91584d3c73f363cc1875d2b9860e20b86cd33f67573742503167bf0ae0c5fbd91e38d310ee1bf924c2c04749b523ca0527a5cc29d76c9a033a4461944910ec5ca6bb615bb9d8818bcfa9661f7c360740ab941a562a7ca14e6ec3cae966ca9af29e9ff1d3c443bb70b557708694e3df8d1350aa50d2bcc9309560f82b2512754699d0cf491da0ce5ab9b81e17e8d55c04094e1b653cee2406e080f066b974e7679dbcbfa8d9a7a24a05b4db96d0e00692272256704989cfa4f03eae1194f58ebf6e2cfe57c4d7a38b80e20800554e8273ece9a0d51e275cc78ad5d970608cda10c9305a1b3353e9d8b7e371edb70c1a76597bc870f30a065f3b8d41430e6047c38828b17a7a8e0546deaf60ef62972684b26ef165141f3c994872943b006e5c94d45ad2d41d49de558cbb4ea51b8ccd978435f1550ec56e817848f9ee7334e4f8e1f8385a8296bb9839b52dd92f25b926997a1178506e1e9ea61c418addb2031fee7a5a794542668d34d5f955a49618e662b7699902854a5d421e22256a7c421a34590fcee0fea72c23cd74e06d84000c81fc343d1e2fea18b903e8b02d0a3b25589d0c2d19c3fd4355d77a013c87d1dbeb9120afb2e69a484295f854d980a60f129f1c6cee5ce797a328bb4ba46a0fba4c010c5b7308944b7b69e3fba0626d6d2e108f6905b7c739f77a8f23c11070e3095ae059f87649ddc928f4fb3961e92cbecb1389f490cb9728ff9d8585", 0x1000}, 0x1006) 12:52:25 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @loopback}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x2061) 12:52:25 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) inotify_add_watch(r0, &(0x7f0000000380)='./file0\x00', 0x20000000) 12:52:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="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", 0x401}], 0x1) [ 282.470911] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.477828] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.484844] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.491677] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.498491] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.505396] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.512214] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.518997] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.525809] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.532626] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.539411] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.546246] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.553069] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.559855] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.566680] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.573489] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.580269] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.587112] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.593935] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.600716] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.607782] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.614618] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.621414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.628261] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.629492] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.635107] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.635218] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.641930] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.648601] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.657478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.662105] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.668756] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.675447] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.682155] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.688799] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.695480] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.702167] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.708819] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.715521] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.722235] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.728875] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.735580] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.742255] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.748915] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.755619] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.762316] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.768956] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.776165] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.782867] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.789491] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.796192] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.802894] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.809555] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.816341] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.823031] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.829679] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.836392] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.843100] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.849752] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.856455] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.863142] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.869804] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.876492] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.883185] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.889840] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.896536] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.903239] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.909899] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.916602] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.923290] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.929938] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.936646] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.943346] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.949987] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.956698] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.963436] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.970081] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.976765] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.983447] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 282.990123] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 282.996800] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.003503] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.010186] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.016881] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.023557] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.030221] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.036915] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.043707] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.050365] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.057049] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.063731] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.070400] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.077091] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.083788] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.090433] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.097132] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.103810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.110465] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.117170] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.123860] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.130509] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.137207] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.143881] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.150531] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.157221] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.163908] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.170591] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.177269] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.183971] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.190600] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.197317] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.204014] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.210658] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.217357] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.224037] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.230694] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.237480] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.244200] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.250844] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.257534] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.264222] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.270867] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.277595] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.284292] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.290921] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.297747] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.304441] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.311123] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.317801] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.324514] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.331149] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.337847] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.344537] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.351188] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.357894] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.364595] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.371268] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.377954] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.384631] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.391293] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.397991] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.404685] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.411350] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.418039] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.424727] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.431416] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.438096] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.444793] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.451464] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.458173] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.464857] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.471519] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.478217] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.484952] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.491618] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.498276] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.504931] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.511622] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.518290] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.524989] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.531631] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.538329] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.544964] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.551659] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.558350] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.565017] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.571692] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.578361] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.585030] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.591752] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.598430] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.605148] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.612336] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.618929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.625618] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.632314] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.638959] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.645654] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.652341] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.658987] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.665716] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.672406] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.679066] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.685773] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.692461] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.699119] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.705810] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.712495] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.719143] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.725828] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.732525] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.739181] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.745896] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.752584] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.759240] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.765933] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.772631] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.779732] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.786414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.793114] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.799756] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.806478] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.813150] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.819816] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.826491] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.833188] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.839843] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.846539] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.853263] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.859905] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.866596] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.873292] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.879947] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.886647] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.893345] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.899994] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.906690] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.913394] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.920065] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.926763] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.933468] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.940138] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.946859] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.953553] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.960208] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.966896] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.973585] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.980234] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 283.986919] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 283.993643] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.000294] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.006999] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.014164] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.020824] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.027522] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.034233] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.040877] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.047581] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.067726] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 12:52:27 executing program 5: get_robust_list(0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0xffffffffffffff19) 12:52:27 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)) [ 284.074626] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.081457] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.088316] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.095161] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.101998] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.108790] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.115637] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.122458] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.129274] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.136125] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.143007] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.149834] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.156714] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.163544] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.170352] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.177265] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.184181] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.191013] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.197882] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.204750] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.211531] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.218400] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 284.225246] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 12:52:27 executing program 4: 12:52:27 executing program 5: get_robust_list(0x0, 0x0, &(0x7f00000002c0)) 12:52:27 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x3) r2 = dup2(r1, r0) vmsplice(r2, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0) 12:52:27 executing program 4: clone(0xfffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sched_setaffinity(0x0, 0xffffff24, &(0x7f0000000500)=0x208000009) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x618, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) io_setup(0x1, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, 0xffffffffffffffff, 0x0) 12:52:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xff, 0x7, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000240)={0x3, 0x0, 0x77fffe, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) 12:52:27 executing program 5: get_robust_list(0x0, 0x0, &(0x7f00000002c0)) [ 285.007385] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 285.012591] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz1 12:52:28 executing program 0: 12:52:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @initdev, 0x0, 0x4000000000000276}, 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2b) fcntl$setstatus(r1, 0x4, 0x42803) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffe26, 0x0, 0xfffffffffffffffe}, 0x18) 12:52:28 executing program 1: 12:52:28 executing program 5: get_robust_list(0x0, 0x0, &(0x7f00000002c0)) 12:52:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x0, 0x0) fstatfs(r0, &(0x7f00000002c0)=""/125) 12:52:28 executing program 5: get_robust_list(0x0, &(0x7f0000000280)=0x0, 0x0) 12:52:28 executing program 2: 12:52:28 executing program 0: 12:52:28 executing program 3: 12:52:28 executing program 5: get_robust_list(0x0, &(0x7f0000000280)=0x0, 0x0) 12:52:28 executing program 4: 12:52:28 executing program 2: 12:52:28 executing program 3: 12:52:28 executing program 0: 12:52:28 executing program 1: 12:52:28 executing program 5: get_robust_list(0x0, &(0x7f0000000280)=0x0, 0x0) 12:52:28 executing program 3: 12:52:28 executing program 0: 12:52:28 executing program 2: 12:52:28 executing program 1: 12:52:29 executing program 4: 12:52:29 executing program 3: 12:52:29 executing program 1: 12:52:29 executing program 5: 12:52:29 executing program 2: 12:52:29 executing program 0: 12:52:29 executing program 4: 12:52:29 executing program 1: 12:52:29 executing program 5: 12:52:29 executing program 3: 12:52:29 executing program 0: 12:52:29 executing program 2: 12:52:29 executing program 4: 12:52:29 executing program 3: 12:52:29 executing program 5: 12:52:29 executing program 1: 12:52:29 executing program 0: 12:52:29 executing program 2: 12:52:29 executing program 4: 12:52:29 executing program 3: 12:52:29 executing program 1: 12:52:29 executing program 5: 12:52:30 executing program 0: 12:52:30 executing program 4: 12:52:30 executing program 2: 12:52:30 executing program 3: 12:52:30 executing program 5: 12:52:30 executing program 4: 12:52:30 executing program 1: 12:52:30 executing program 0: 12:52:30 executing program 3: 12:52:30 executing program 2: 12:52:30 executing program 5: 12:52:30 executing program 4: 12:52:30 executing program 0: 12:52:30 executing program 3: 12:52:30 executing program 1: 12:52:30 executing program 5: 12:52:30 executing program 2: 12:52:30 executing program 4: 12:52:30 executing program 2: 12:52:30 executing program 5: 12:52:30 executing program 3: 12:52:30 executing program 0: 12:52:31 executing program 1: 12:52:31 executing program 4: 12:52:31 executing program 3: 12:52:31 executing program 0: 12:52:31 executing program 2: 12:52:31 executing program 1: 12:52:31 executing program 5: 12:52:31 executing program 4: 12:52:31 executing program 0: 12:52:31 executing program 2: 12:52:31 executing program 1: 12:52:31 executing program 3: 12:52:31 executing program 5: 12:52:31 executing program 4: 12:52:31 executing program 0: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) syz_execute_func(&(0x7f0000000080)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = getpid() mknod(&(0x7f0000000000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, 0x0) ptrace(0x11, r0) 12:52:31 executing program 2: mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) 12:52:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000440)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") getsockopt$inet_mreqn(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$BLKRRPART(r1, 0x125f, 0x0) 12:52:31 executing program 3: syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd31926f22e663adb") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000440)='./file0\x00', 0x841, 0x0) clone(0x3102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) 12:52:31 executing program 5: 12:52:31 executing program 2: 12:52:32 executing program 4: syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4000000080000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ppoll(&(0x7f0000000000)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 12:52:32 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, 0x0}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001580)}], 0x1}, 0x0) 12:52:32 executing program 2: r0 = socket(0x8, 0x5, 0x1f) shutdown(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0xf, &(0x7f0000000240), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x1000, 0xfffffffffffffffe, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000400)=""/19) r6 = socket$inet(0x2, 0x3, 0x2) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x43130, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000500)=0x1ff, 0x4) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000440)=0xfbe, 0x4) getsockname(r8, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000000100)=0x4, 0xfffffffffffffdf5) setsockopt$inet_int(r6, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) dup2(r4, r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x1ac) pwritev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 12:52:32 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0xc0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000bc0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 12:52:32 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x14b}, 0x30) 12:52:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 12:52:32 executing program 4: 12:52:32 executing program 5: 12:52:32 executing program 4: 12:52:32 executing program 3: 12:52:32 executing program 0: 12:52:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0a70fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) 12:52:32 executing program 1: 12:52:32 executing program 5: 12:52:32 executing program 0: 12:52:32 executing program 4: 12:52:33 executing program 5: 12:52:33 executing program 3: 12:52:33 executing program 1: 12:52:33 executing program 2: 12:52:33 executing program 4: 12:52:33 executing program 0: 12:52:33 executing program 5: 12:52:33 executing program 3: 12:52:33 executing program 1: 12:52:33 executing program 4: 12:52:33 executing program 5: 12:52:33 executing program 2: 12:52:33 executing program 3: 12:52:33 executing program 0: 12:52:33 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r2, &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) 12:52:33 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(0x0, 0x0) geteuid() stat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)) lstat(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{}, {0x1, 0x3}, [{0x2, 0x7}, {0x2, 0x5}, {0x2, 0x3}], {}, [{}, {0x8, 0x420b6577c50d374, r2}], {0x10, 0x4}, {0x20, 0x2}}, 0x4c, 0x3) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) fcntl$setstatus(r3, 0x4, 0x0) sendto$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 12:52:33 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000140)=0xbfffffffffffffd) 12:52:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000007d000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, 0x0, &(0x7f0000000100)) 12:52:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = open(&(0x7f0000000040)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r1, r3, 0x0, 0x8000fffffffe) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080), 0x4) 12:52:33 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="5500000018007f1dfd0000b2a4a280930a80000000a84308910000000e0008000a000c00060000001940a30700000000000000001338d52f4400009bfb83de448daa7227c43ac9220000010cec4fab91d400000000", 0x55}], 0x1}, 0x0) 12:52:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETAF(r0, 0x8925, &(0x7f0000000140)) [ 291.004272] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.0'. 12:52:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x40405514, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 12:52:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000640)={0x1, 0x0, @pic={0x0, 0x7}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:52:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, [{}, {0x0, 0xf}]}}) 12:52:34 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0x20004040) 12:52:34 executing program 2: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x20000054) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f00000003c0)) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f00000002c0), 0x4) 12:52:34 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000002c0)={0x3, @sliced}) 12:52:34 executing program 1: r0 = dup(0xffffffffffffff9c) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x9) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xffffffffffffffc0, 0x40000) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f00000001c0)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005f80)=[{0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() openat$vfio(0xffffffffffffff9c, 0x0, 0x100fff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) eventfd(0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000002c0)=""/246) r5 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {0x0}], 0x2) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r4, r5, 0x0, 0x102002700) 12:52:34 executing program 5: r0 = memfd_create(&(0x7f0000000140)='\x00', 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='d'], 0x1) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:52:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, [{}, {0x0, 0xf}]}}) 12:52:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"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"}) 12:52:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETAF(r0, 0x5437, 0x0) 12:52:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x242, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x53, 0x0) 12:52:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) 12:52:35 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600), 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) io_setup(0x8, &(0x7f0000000440)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f00000005c0)={0x77359400}) 12:52:35 executing program 2: clone(0x2103001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000880)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 12:52:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 12:52:35 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) fchdir(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x800010b, 0x18) geteuid() socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x1) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x9a) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/250, 0xfa}], 0x1) 12:52:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x28b20}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x100) 12:52:35 executing program 1: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000200)="0faef24029450ff3440f1157f19164f244ae5426f2af400f34c30fb91d00804167640f71f64582610dc29004f34c0f38f6a30a00000000008f0f6330a30000d45ec31e0ff7c6") 12:52:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 292.289856] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.309638] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 292.316582] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 292.323574] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 292.330396] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 12:52:35 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x42, 0x0) write$P9_RREAD(r0, 0x0, 0x0) [ 292.337275] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 292.344125] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 292.350981] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 292.357840] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 292.364685] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 292.371486] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 292.378363] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 12:52:35 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r1, 0x400000000000021) [ 292.519813] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz1 12:52:35 executing program 5: syz_open_dev$sndtimer(0x0, 0x0, 0x200000) open(&(0x7f0000000080)='./file1\x00', 0x8000101842, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0), 0x4) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000013c0)=""/21, 0xfffffea1) ioctl$LOOP_CLR_FD(r0, 0x4c01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) gettid() setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000003c0)={'filter\x00'}, 0x0) [ 292.642784] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.649743] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.656715] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.663904] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.670708] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.677619] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.684467] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.691270] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.698133] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.704973] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.711832] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 292.776928] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz1 12:52:36 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fstat(r1, 0x0) 12:52:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12:52:36 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000e69000/0x4000)=nil, 0x4000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)={0x14, 0x17, 0x101}, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 293.060071] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.140981] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:52:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000000)=""/190, 0x10}], 0x10000000000002fa, 0x0, 0xfec0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/softnet_stat\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 12:52:41 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x0) open(0x0, 0x8000101842, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() ioctl(0xffffffffffffffff, 0x0, 0x0) 12:52:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() capget(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000240)={0x8ab}) 12:52:41 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./file1\x00', 0xad) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(0x0, 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) 12:52:41 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a321202e1a66696c65300a"], 0xb) 12:52:41 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 12:52:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 298.312370] ================================================================== [ 298.319792] BUG: KMSAN: uninit-value in tipc_conn_rcv_sub+0x187/0x9d0 [ 298.326412] CPU: 0 PID: 790 Comm: kworker/u4:12 Not tainted 5.0.0-rc1+ #9 [ 298.333366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.342730] Workqueue: tipc_rcv tipc_conn_recv_work [ 298.347742] Call Trace: [ 298.350342] dump_stack+0x173/0x1d0 [ 298.353984] kmsan_report+0x12e/0x2a0 [ 298.357794] __msan_warning+0x82/0xf0 12:52:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) [ 298.361601] tipc_conn_rcv_sub+0x187/0x9d0 [ 298.365854] tipc_conn_recv_work+0x3dc/0x5e0 [ 298.370285] ? gfn_to_memslot+0x2a5/0x4f0 [ 298.374443] ? tipc_conn_send_work+0x11a0/0x11a0 [ 298.379201] ? tipc_conn_send_work+0x11a0/0x11a0 [ 298.383968] process_one_work+0x1607/0x1f80 [ 298.388326] worker_thread+0x111c/0x2460 [ 298.392418] kthread+0x4a1/0x4e0 [ 298.395790] ? process_one_work+0x1f80/0x1f80 [ 298.400291] ? schedule_tail+0x1b2/0x410 [ 298.404356] ? kthread_blkcg+0xf0/0xf0 [ 298.408261] ret_from_fork+0x35/0x40 12:52:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002200010000000000000000000400000010001100e2abb4ec7645192056d52f00988316d0f5cae97c6e058b222f4bd4c674843150f4b082616f052b44a0e8207902dce31169d645d4d0a4c0376c40db720f7495ef62854b78315ea1197940de5b8060c1e4e15b2a970eec4ad1985f3012a63afd72fac16ea7eef06a34f73ff143b162ce9a230a2b15aabfc793263ccb15701e19207031ca3f0a3d02de289a8e13e082d3b87884aaf1efabbf490342858203417dddd0d2a6e51f6ad3546b02"], 0x1}}, 0x0) [ 298.411981] [ 298.413614] Local variable description: ----s.i@tipc_conn_recv_work [ 298.420004] Variable was created at: [ 298.423721] tipc_conn_recv_work+0x68/0x5e0 [ 298.428058] process_one_work+0x1607/0x1f80 [ 298.432370] ================================================================== [ 298.439720] Disabling lock debugging due to kernel taint [ 298.445164] Kernel panic - not syncing: panic_on_warn set ... [ 298.451051] CPU: 0 PID: 790 Comm: kworker/u4:12 Tainted: G B 5.0.0-rc1+ #9 [ 298.459370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.468757] Workqueue: tipc_rcv tipc_conn_recv_work [ 298.473773] Call Trace: [ 298.476366] dump_stack+0x173/0x1d0 [ 298.480001] panic+0x3d1/0xb01 [ 298.483223] kmsan_report+0x293/0x2a0 [ 298.487036] __msan_warning+0x82/0xf0 [ 298.490845] tipc_conn_rcv_sub+0x187/0x9d0 [ 298.495114] tipc_conn_recv_work+0x3dc/0x5e0 [ 298.499543] ? gfn_to_memslot+0x2a5/0x4f0 [ 298.503697] ? tipc_conn_send_work+0x11a0/0x11a0 [ 298.508454] ? tipc_conn_send_work+0x11a0/0x11a0 [ 298.513214] process_one_work+0x1607/0x1f80 [ 298.517557] worker_thread+0x111c/0x2460 [ 298.521647] kthread+0x4a1/0x4e0 [ 298.525019] ? process_one_work+0x1f80/0x1f80 [ 298.529521] ? schedule_tail+0x1b2/0x410 [ 298.533598] ? kthread_blkcg+0xf0/0xf0 [ 298.537500] ret_from_fork+0x35/0x40 [ 298.542339] Kernel Offset: disabled [ 298.545958] Rebooting in 86400 seconds..