Warning: Permanently added '10.128.0.109' (ECDSA) to the list of known hosts. 2018/12/23 15:43:09 fuzzer started 2018/12/23 15:43:14 dialing manager at 10.128.0.26:35233 2018/12/23 15:43:14 syscalls: 1 2018/12/23 15:43:14 code coverage: enabled 2018/12/23 15:43:14 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/23 15:43:14 setuid sandbox: enabled 2018/12/23 15:43:14 namespace sandbox: enabled 2018/12/23 15:43:14 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/23 15:43:14 fault injection: enabled 2018/12/23 15:43:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/23 15:43:14 net packet injection: enabled 2018/12/23 15:43:14 net device setup: enabled 15:46:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c0003002f006a007d0a00010c000200170022ff02f1d071"], 0x2c}}, 0x0) syzkaller login: [ 273.902044] IPVS: ftp: loaded support on port[0] = 21 [ 275.296730] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.303333] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.311656] device bridge_slave_0 entered promiscuous mode [ 275.405265] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.411778] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.420138] device bridge_slave_1 entered promiscuous mode [ 275.500857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 275.581706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 275.832276] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 275.919601] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 276.004456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 276.011489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.095679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 276.102678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.354330] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 276.363104] team0: Port device team_slave_0 added [ 276.443036] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 276.451586] team0: Port device team_slave_1 added [ 276.533854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.621787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.706840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 276.714581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.723802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.810158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 276.817879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.827322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 15:46:42 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000005c0), 0x1000) readlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000500)=""/180, 0xb4) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) [ 277.858307] IPVS: ftp: loaded support on port[0] = 21 [ 278.018017] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.024622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.031844] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.038516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.047804] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 278.054409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.338893] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.345561] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.353849] device bridge_slave_0 entered promiscuous mode [ 280.523953] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.530703] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.539150] device bridge_slave_1 entered promiscuous mode [ 280.710214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 280.865565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 281.304307] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 281.450756] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 281.670524] ip (6714) used greatest stack depth: 53736 bytes left [ 281.712720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 281.719732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.133617] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 282.142582] team0: Port device team_slave_0 added [ 282.305907] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 282.314781] team0: Port device team_slave_1 added [ 282.433024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 15:46:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xffffffffffffac6e, 0x4) sendto$inet6(r0, &(0x7f0000000280)="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", 0x5ad, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000055c0)={&(0x7f0000005480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005500), 0x0, &(0x7f0000005540)=""/81, 0x51}, 0x0) [ 282.627973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.774371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 282.782095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.791799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.964998] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 282.972816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.982008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.997540] IPVS: ftp: loaded support on port[0] = 21 [ 284.106827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.758811] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 284.980743] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.987544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.994728] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.001379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.010699] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 285.017750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.406547] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 285.412937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.421012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.836729] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.843367] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.851763] device bridge_slave_0 entered promiscuous mode [ 285.954158] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.960882] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.969143] device bridge_slave_1 entered promiscuous mode [ 286.133491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 286.156289] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.318816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 286.782726] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 286.959349] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 287.121037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 287.128075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.294195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 287.301172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.831646] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 287.840731] team0: Port device team_slave_0 added [ 287.929754] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 287.938405] team0: Port device team_slave_1 added [ 288.141190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 288.148327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.157465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.335975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 288.343023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.352606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.531457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 288.539049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.548117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.712924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 288.720549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.729673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.040560] netlink: 'syz-executor0': attribute type 3 has an invalid length. [ 290.048055] netlink: 'syz-executor0': attribute type 2 has an invalid length. 15:46:55 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000f00000025000000000000009500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(r0) 15:46:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006ec0)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0x25b, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) getpeername(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffc2) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) getresuid(0x0, 0x0, 0x0) dup2(r1, r2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000006e40), 0x4) [ 290.797650] IPVS: ftp: loaded support on port[0] = 21 [ 290.799167] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.809463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.816632] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.823234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.832289] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 290.838841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 15:46:56 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f0000000600)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') unlink(&(0x7f0000000280)='./file1/file0\x00') rmdir(&(0x7f0000000080)='./file1\x00') [ 292.512717] 8021q: adding VLAN 0 to HW filter on device bond0 15:46:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0600ff000a000200aaaaaaaaaaaa0000"], 0xfd71}}, 0x0) 15:46:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x6) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x7ff}) r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x10000) shutdown(r2, 0x1) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) 15:46:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x6) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x7ff}) r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x10000) shutdown(r2, 0x1) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) [ 293.245614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 15:46:58 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180030a32f0f3100000029000000370000630d19602440d0bd922d0190c4b1b7908e2ecf63d26099fc1d7fe511344ea8c21f7f87348994c500000000000063000043a1dc97a24c68008de555960f2509d9723b3404ecc7d3aab90bdc594ae38ba78c77973be0bd400545af50d400a67c7a6d9f1acfcb6ab3204b26a48176a02c437498b145dd3e0a767fee853bb76fdf6ec0fe0243956a145dc7c6a93cd708f73fdc53cb7442ca44f85af961cf7c0788cd6c0328c19a6de3b53b62f203f9868d477e9df147d0e16f5dbae04a5bb88e83fd9a000000000000f08ce5e8174555cabc7157207946452aebce72751aec61751fcc49df61fef7"], 0x18}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xa8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xffffffffffffffca) sendmsg$can_bcm(r1, &(0x7f0000001600)={&(0x7f0000001500)={0x1d, r2}, 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x4, 0x8, 0x7fffffff, {}, {0x77359400}, {0x2, 0x4, 0x80, 0x3}, 0x1, @can={{0x1, 0xf8e, 0x7f, 0x3ff}, 0x4, 0x3, 0x0, 0x0, "ede82bcd5b261e70"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040844}, 0x200008c1) 15:46:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8, 0x1d1000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0xf006, &(0x7f0000000040), 0xa, r2, 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000180)={0x401, 0xffff, 0xffffffffffffffe5}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@flags={0x3, 0x2000}], 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 293.809574] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 294.074424] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 294.080722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.088617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 15:46:59 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xa99, 0x80020044) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3c, 0xa, 0x0, "1760010400002be2db5a0f9c331fa077e48500"}) 15:46:59 executing program 0: socketpair(0x8000000000001e, 0x805, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xff81, &(0x7f0000000100)=[{&(0x7f0000000340)=""/219, 0xfffffcee}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00001e1e78)}], 0x492492492492321, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x8100) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000280)=""/113) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140)) [ 294.401089] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.407766] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.416103] device bridge_slave_0 entered promiscuous mode [ 294.702567] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.709122] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.717401] device bridge_slave_1 entered promiscuous mode [ 294.937005] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.944750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 295.120719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 295.714154] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 295.895592] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 296.035506] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 296.043747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.706228] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 296.715173] team0: Port device team_slave_0 added [ 296.854263] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 296.863107] team0: Port device team_slave_1 added [ 297.039314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 297.047423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.057453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.252365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.444281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 297.451998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.461749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.632083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 297.639925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.649673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.534619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.310049] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 299.509508] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.516119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.523328] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.529843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.539584] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 299.546102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.802102] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 299.808642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.817384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 15:47:05 executing program 1: r0 = socket(0x20000000000000a, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000e530e9)=""/16, &(0x7f0000000080)=0x10) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', r1}) [ 300.419615] 8021q: adding VLAN 0 to HW filter on device team0 15:47:09 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) setpriority(0x1, r0, 0x7) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10400, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x800) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x3, 0x2) rt_tgsigqueueinfo(r0, r0, 0x3f, &(0x7f00000000c0)={0x4, 0x6, 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000140)={0x7, 0x2, 0x1, 0x7fff, 'syz0\x00', 0x8}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000001180)={0xef2, 0x1, 0x1000, &(0x7f0000000180)="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"}) r3 = socket$inet(0x2, 0x800, 0x1) getsockname(r2, &(0x7f00000011c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000001240)=0x80) r4 = shmget$private(0x0, 0xe000, 0x4, &(0x7f0000ff2000/0xe000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000001280)={0x20}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000012c0)) r5 = syz_open_dev$video(&(0x7f0000001300)='/dev/video#\x00', 0x8, 0x50001) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000001340)={0xf, 0x103, 0x6, {0x5, 0x9, 0x4, 0x4}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000001380)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000013c0)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000001400)=0x8001) getsockopt$inet_dccp_int(r3, 0x21, 0x1b, &(0x7f0000001440), &(0x7f0000001480)=0x4) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000014c0)="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") ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000024c0)={0x1, 0x0, {0x5, 0x80000000, 0xeb7e, 0x2}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000002500)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x9, 0x9}, &(0x7f00000025c0)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000002600)={r6, 0x2}, &(0x7f0000002640)=0x8) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000002680)={0x1, "80f2e04e74db1e7af310b096c407ac21ca1f871dba8cefbdf9e06e152f946994", 0x1, 0x200, 0x400, 0x6, 0x10, 0x4113d5283964838b, 0x2, 0xea6}) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000002700)=0x4000000) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000002740)={{0x87, @broadcast, 0x4e23, 0x2, 'wlc\x00', 0x8, 0x7, 0x1d}, {@empty, 0x4e22, 0x0, 0x200000000, 0x6, 0x9}}, 0x44) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000027c0)) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000002800)=@assoc_id=r6, &(0x7f0000002840)=0x4) [ 304.606704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.857072] IPVS: ftp: loaded support on port[0] = 21 [ 304.931821] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 305.258132] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 305.264555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.273149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.593130] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.257868] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.264482] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.272936] device bridge_slave_0 entered promiscuous mode [ 306.356494] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.363103] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.371547] device bridge_slave_1 entered promiscuous mode [ 306.453048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 306.530888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 306.773408] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 306.858433] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 307.265862] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 307.273800] team0: Port device team_slave_0 added [ 307.360219] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 307.368228] team0: Port device team_slave_1 added [ 307.454913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 307.461956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.471206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.553559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 307.560495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.569612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.659582] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 307.667929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.677103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 15:47:12 executing program 3: setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0xffffffffffffffe5) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) r1 = socket$inet(0x2, 0x0, 0x40) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="07000e00f3ff00000f00060008000e00ffffffff0800050040020000"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) semget$private(0x0, 0x0, 0x3) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) stat(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 15:47:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000000040)) write$P9_RSTATFS(r0, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x1, 0x3, 0xc229, 0xfffffffffffff801, 0x9, 0x800, 0x3f, 0x2, 0x5}}, 0x43) write$P9_RLOCK(r0, &(0x7f0000000180)={0x8, 0x35, 0x2, 0x3}, 0x8) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)) 15:47:12 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffffffffffc1, 0x1) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="0f005a6c0f1957000f05646758660ff645dbf22e0f00db0fc72af020340f0867f20f2a4cfafb", 0x26}], 0x1, 0x11, &(0x7f00000000c0), 0x0) fcntl$getown(r0, 0x9) write$eventfd(r0, &(0x7f0000000100)=0x100, 0x8) fremovexattr(r0, &(0x7f0000000140)=@random={'os2.', '\x00'}) write$eventfd(r0, &(0x7f0000000180)=0x2, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) getgroups(0x4, &(0x7f0000000200)=[0xee00, 0xffffffffffffffff, 0x0, 0x0]) getgroups(0x2, &(0x7f0000000240)=[0x0, 0xee00]) setregid(r1, r3) pread64(r0, &(0x7f0000000280)=""/248, 0xf8, 0x31) setfsgid(r2) write$smack_current(r0, &(0x7f0000000380)='os2.', 0x4) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000013c0)={0x1000, &(0x7f00000003c0)="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"}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000001400)) renameat(r0, &(0x7f0000001440)='./file0\x00', r0, &(0x7f0000001480)='./file0\x00') ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000014c0)={0x2, 0xffffffffffffff9c}) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000001500)=0x1, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000480}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xf0, r4, 0xb0b2a48896538837, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x14}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001740)) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001780)={0x7}, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001800)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000017c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001840)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0xb}, 0x7}, {0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0xd}, 0x4510a480}, r5, 0x100000000000000}}, 0x48) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000018c0)={0x0, 0x1, 0x10001, 0xfffffffffffffff8}, &(0x7f0000001900)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001940)={r6, 0x1e, "cd97c095d46c5766f5221fa9ae37e8c9e1536802ac5928068ec49a2471e2"}, &(0x7f0000001980)=0x26) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000019c0)={0x2, 0x2, @raw_data=[0x6bec, 0x6, 0x7, 0x3, 0x3f, 0x0, 0xa7e, 0x0, 0x0, 0x1, 0x5, 0x5, 0x7fffffff, 0xffffffff, 0x3, 0xfff]}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000001a40)=""/4096) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000002a40)=@req3={0x1, 0x8, 0xe4ed, 0x9, 0x3, 0x1, 0x7fffffff}, 0x1c) 15:47:12 executing program 0: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffe85, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "546a7c16"}, 0x0, 0x0, @fd=0xffffffffffffff9c, 0x4}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000003c0)={0x400, 0x0, [], {0x0, @bt={0x7f, 0x1, 0x0, 0x1, 0x0, 0x7ff, 0x0, 0x139, 0xcab, 0x73e6, 0x8, 0x0, 0x399, 0x132, 0x0, 0x1}}}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x14, 0x53, &(0x7f0000000140)="a8982c62504a7434df8ea646074380af26baaea4804d2a166b550c99d2d8cee453296eba139c3db548e9414019dd2987e242fd686dd6c597e03d43132da4050cc607e20622e681ad7b197f315b0de03b95a12f"}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6287, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0), 0x2, 0x0}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000001c0)=""/191) [ 307.824190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 307.831941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.841207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.862715] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; 15:47:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 307.862715] program syz-executor2 not setting count and/or reply_len properly 15:47:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0xf0ffffff7f0000) 15:47:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) [ 308.207858] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 308.207858] program syz-executor2 not setting count and/or reply_len properly [ 308.281122] Unrecognized hibernate image header format! [ 308.286727] PM: Image mismatch: architecture specific data 15:47:13 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280)={0x1}, 0xff7f) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x20200, 0x0) memfd_create(0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20141042, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x2008004fffffffe) 15:47:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 308.583680] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 308.583680] program syz-executor2 not setting count and/or reply_len properly [ 308.638145] hrtimer: interrupt took 27841 ns [ 308.709175] IPVS: ftp: loaded support on port[0] = 21 [ 309.560070] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.566715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.573994] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.580523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.589624] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 309.596224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.207708] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.214377] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.222772] device bridge_slave_0 entered promiscuous mode [ 310.358442] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.365211] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.373666] device bridge_slave_1 entered promiscuous mode [ 310.460959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 310.542042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 310.791490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 310.875658] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 310.955374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 310.963222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 311.284425] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 311.293153] team0: Port device team_slave_0 added [ 311.378829] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 311.387496] team0: Port device team_slave_1 added [ 311.472289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.561836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.643375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 311.650968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.660195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.745360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 311.752888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.761966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.705316] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.711932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.719124] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.725707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.736897] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 312.743440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.086593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.396563] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 313.694144] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 313.700535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.708841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.024058] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.058648] 8021q: adding VLAN 0 to HW filter on device bond0 15:47:21 executing program 4: setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0xffffffffffffff1e) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) socket$inet(0x2, 0x0, 0x40) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) semget$private(0x0, 0x0, 0x3) stat(&(0x7f0000000500)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 15:47:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x2d1) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x3}}], 0x1, 0x0, 0x0) 15:47:21 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x20004050) 15:47:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept$packet(0xffffffffffffffff, 0x0, 0x0) sendto(r1, &(0x7f0000000580)="ae27ef49b7e25cf64cd6b96f224c59953c39a111a2d1860149fef50a240cad47734d328d5f79211af2595729598fdd8fa3275d9d98d603969f8a4aeb77204b2d5aab944e906e966209dda81395a87e746a67861748a60bf379433c7f61e89a6a6ff4392a498a95004a19703b0cba58f9fa536dccd38f4f065e9986d3579aaba7d649927cd35f39261660a1eaddb00ba217bef937b5ad87dc93e5262d9d", 0x9d, 0x810, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40006, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000500)={'security\x00', 0x2, [{}, {}]}, 0x48) sendfile(r2, r3, 0x0, 0x7fffffff) stat(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8800000) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)) [ 316.294991] syz-executor0 (8104) used greatest stack depth: 53232 bytes left [ 316.474852] Unrecognized hibernate image header format! [ 316.480354] PM: Image mismatch: architecture specific data [ 316.663386] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 316.832438] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 316.838654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.846655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.012829] 8021q: adding VLAN 0 to HW filter on device team0 15:47:23 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) close(r1) 15:47:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:23 executing program 1: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x0, [0x40000000, 0x0, 0x40000021, 0x3], [0xc1]}) 15:47:23 executing program 4: getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x2}, 0xfffffffffffffdef) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x149) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96130329a39f92bdef505217695a0400de3d4bccb18cc5c8d8afed7048345d9700007ee9df5f70f2c9019d443d5bc274a1f157d585"], 0x0, 0x0, 0x8000000000000002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000800)=ANY=[], &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001800210000000000000000001c140000fe000001000000000400090091802ab514270568e50891e613143103b75bb50f8e7bc44e89df4e0e25e7a42a2b657cb1ff038ef724ffdc3c3f9885da9b093493a4ab0b25a1b8f93ec1cbb0311e21c4656b113544c3f970d37dcfcd4d8c4b2456b175003e4f56"], 0x1}}, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x100000001}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffffe) r6 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0) syz_open_dev$usbmon(&(0x7f0000000480)='/dev/usbmon#\x00', 0x200, 0x40087f) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x8000, &(0x7f0000000800)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) ioctl(r5, 0xfffffffffffffbff, &(0x7f0000000e00)="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") io_submit(r8, 0x20000000000000c7, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r7, &(0x7f0000001000), 0xffffffffffffffe1, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xffff, 0xffffffffffffff67, 0xc65b, 0x9, 0x3f, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)="ef", 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000004c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYPTR64=&(0x7f0000000840)=ANY=[@ANYBLOB="64964c5677e0c5b12035d7d55cf3c5729c30f43999ddf60d675a2a5a84afd009a45cc7013c6a1b27b314f623290d78f9ed6e4c48be3af578e500000000d23195495b9da2c81ae812345a456f2520c519fb7ac61a2dace26548b395905e3d8153cfc1d90693bf87152581bd1b71ee4f2b21fa17250596aa1f2b9923b9d1d3caae65bf5ce705f030930a0f7dafcc2154fd24c42ae2006f9496ef6ff6123cf2afe18ef30b3bc3a11854f901ec15"], @ANYRES16=r5, @ANYRESDEC=r6, @ANYRESOCT=r9, @ANYPTR64=&(0x7f0000000780)=ANY=[@ANYRES64=r4, @ANYPTR, @ANYRESOCT=r2]], @ANYRES64=0x0, @ANYPTR64, @ANYRESOCT=r4, @ANYRESDEC=r8, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r8]], 0x4b}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6) memfd_create(&(0x7f0000000640)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xe4\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) 15:47:23 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x400002108001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) write$cgroup_type(r0, 0x0, 0x0) 15:47:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 318.230094] kvm [8216]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 318.251146] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 318.251146] program syz-executor2 not setting count and/or reply_len properly 15:47:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 15:47:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000710fe4)={0xa, 0x1}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x1, 0x8}}}}}, 0x0) 15:47:23 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) 15:47:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_GET_TIMERSLACK(0x1e) r1 = getpgrp(0x0) ptrace(0xffffffffffffffff, r1) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="02070000020000000000000000005a9cdb0606e124e1e4832cc96a0000646d3f55f4455600e201e23e551b9095ee08a17758670e0cce7f44d387130f0000fffffffffffffefcc820c7fb999b8a526bac28ae9cbb2388addf009827dd0c4a7e85df74c37b4452ee370184d20143f64e6ea176837055b050adc7a8ef72c59762f33709d6d4e86f1cc72e21dad09c99f36e8c845c7b82819a5da653d377bedaa410a8024684e866d165553c3ca59bc864cccef3f466f7f3"], 0xb6}}, 0x0) 15:47:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r1, r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write$P9_RSETATTR(r2, 0x0, 0x0) 15:47:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1d, 0xffffff1f, 0x0, 0x0, {0xffffff05}}, 0x14}, 0x1, 0x8001a0ffffffff}, 0x0) 15:47:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x24, 0xaff, 0x0, 0x0, {0x5810}}, 0x14}}, 0x0) 15:47:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r0, &(0x7f0000000180)=""/220, 0xdc) 15:47:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) r1 = socket$inet6(0xa, 0x3, 0x180000000000000a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000287, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") 15:47:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x10000000000402) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020006000011f7ff"], 0x18) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:47:24 executing program 0: 15:47:24 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000058b000/0x4000)=nil, 0x2) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) 15:47:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:24 executing program 3: 15:47:24 executing program 1: 15:47:24 executing program 3: 15:47:24 executing program 0: 15:47:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000ebdec0df333f220005001a00050000000005000654c6c6598d18a7c61400ebe0d28df8fe2c8ce6ae96b306000a000000"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) [ 319.650944] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 319.650944] program syz-executor2 not setting count and/or reply_len properly 15:47:24 executing program 0: 15:47:24 executing program 3: 15:47:25 executing program 4: 15:47:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:25 executing program 1: [ 320.394554] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 320.394554] program syz-executor2 not setting count and/or reply_len properly 15:47:26 executing program 5: 15:47:26 executing program 0: 15:47:26 executing program 3: 15:47:26 executing program 1: 15:47:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:26 executing program 4: 15:47:26 executing program 3: [ 321.320609] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 321.320609] program syz-executor2 not setting count and/or reply_len properly 15:47:26 executing program 0: 15:47:26 executing program 1: 15:47:26 executing program 4: 15:47:26 executing program 3: 15:47:26 executing program 5: 15:47:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:26 executing program 3: 15:47:26 executing program 1: 15:47:26 executing program 0: 15:47:26 executing program 4: 15:47:26 executing program 5: [ 321.775317] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 321.775317] program syz-executor2 not setting count and/or reply_len properly 15:47:26 executing program 3: 15:47:27 executing program 0: 15:47:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:27 executing program 4: 15:47:27 executing program 1: 15:47:27 executing program 5: 15:47:27 executing program 3: [ 322.222731] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 322.222731] program syz-executor2 not setting count and/or reply_len properly 15:47:27 executing program 4: 15:47:27 executing program 0: 15:47:27 executing program 1: 15:47:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:27 executing program 3: 15:47:27 executing program 5: 15:47:27 executing program 4: 15:47:27 executing program 0: [ 322.620517] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 322.620517] program syz-executor2 not setting count and/or reply_len properly 15:47:27 executing program 1: 15:47:27 executing program 3: 15:47:27 executing program 5: 15:47:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000011c0)={0xffffffffffffffff, 0x5}) 15:47:27 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fffffff}], 0x1, &(0x7f00000000c0)={0x0, r0+10000000}) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 15:47:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:28 executing program 1: syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x10000000000402) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000020006000011f7ff"], 0x18) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:47:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) fcntl$setstatus(r1, 0x4, 0x42400) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 15:47:28 executing program 3: 15:47:28 executing program 4: [ 323.152523] sg_write: data in/out 262108/77 bytes for SCSI command 0x0-- guessing data in; [ 323.152523] program syz-executor2 not setting count and/or reply_len properly 15:47:28 executing program 0: r0 = socket(0x1e, 0x5, 0x0) sendmsg(r0, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, 0x0}, 0x0) 15:47:28 executing program 3: r0 = msgget(0xffffffffffffffff, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/184) 15:47:28 executing program 4: socketpair$unix(0x1, 0x4000000002, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() msgctl$IPC_RMID(0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x31) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x3, 0x0, 0x0, 0x0, 0x83}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 15:47:28 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0x0) 15:47:28 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)) 15:47:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x1000000013, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 323.544831] ptrace attach of "/root/syz-executor4"[8429] was attempted by "/root/syz-executor4"[8433] 15:47:28 executing program 0: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0x337, 0x0) getpeername(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) dup2(r1, r2) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000000)="83", 0x1) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000240)={@local}, 0x14) 15:47:29 executing program 1: mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001300)='/dev/uhid\x00', 0x1000000002802, 0x0) write$UHID_INPUT(r0, &(0x7f0000001340)={0x8, "4eb997ff0b8f1e1a58be573c7a15e9bfb2fa0105713b086c5ef66bdbb5bbb6f7be967179d24d31011e2e7d5169ddd40bc3c9f5b17b5294fba8dbd33180d29e7cdfce8ca87821af8783d8a1266c94574dabd49355c7b355730247652fffe5044d98c611c30f5f4951ec4c6403f770b3cf5d237694aa1b046cce32677754d36b7775ba8de769347870967b5dc6092fb6e4cc65ef2a315158a95603caa6a37a7943c2042cae255de6e2ea8ae24af1d25e94c94fdc78e71811d54bdb942a27eb14414bfa00d7748c43c5cbe71e0b9b6c74ce8140165c680504460736dfa8dca222a547740538f5be07b139cae522be2c962d95c4c04d00ba7d9579bb2615d15455154a3b06d5135ee6a94fd01b2f71587b57e99b2e67f9e6a151415f7d8465030eee068d81451559d49397823318881106afd5812ef15da255ed09068db8e922b804808215a70ba0c434750b763d88e5a3dce4b7d68632016bb43bd4af63adc3a926e304032e5e4e6fa6ad659a8b1d52de14e857230a003480f5bfc1859d64395b7e4927710e7ac87ccb5b4e76a492f32b9f1763ec1822c20ee9c06b638913d22e2ebc960ef5b3ef5d24c70d4e68d9e77941d7454069dbbe8a93b40e675a5f23297f0409e9ffef0c96609f5b0fe80275806e08a23b75c5a63c9ac0c93e7046dec7ec1bc20f5085e45a18dbec8c752c4316e88e7e45295709870ccdf98127108e50a7d4da951bf9ce1b1a6ef1b5859f2ce0d74fdd2932088731f2feea86b78289dc83189a666b9cce75576e1e8b4b710a316e202b7acc7f139dcfe8062443d38b56ee16aa84e7137b5fd98ab8e10bc6b53ce7e14db2aeb0966fd190c91d2c5ac84df2967bb7e116511bc3070000000000000021e509756967bbcd9d19415046d3499cab5ad1f55732359f243d13ee7a38451e483ed8ec600fc425a62e7ff67631700a6ea40b653ad14992c26292cf1d6a1fda0250ebd6a80862606b2c3d4d4ddd341208e90950c8251077e019125eca12f387a37a9e931bf479649306d363bc6decf529958aa5aa3e17d3161d9047a0fdc293510aed40a1de8db01ba69330f0a586d8ecbb2d6a873eec7296af4473fa6e221af7b0537d340ba367f6031bdc71b46d2bd250b49dbf4b4dfcda1df62123f6575ec42ef6cf71a0147c8d4ec667ee93b078e225646f8b87c5d699cd28e36f69b8ecb2d7f785a29011d994b0ceb25f1bcb8722e822c50d9640bfa1abf98f84d520378ec5e3b0c8b7a25d23f017762e878689eea22a1ece3efa524fd031ca614d821f1ed94c2e98ad203fa6b2f5fd10323dc5a05de5e48c254439301d6c08dc1a0e54c2442b3e66a585856772c54093c79103de067e4a2517af10c606b85a9f2cf21d6a2bf30a85491bd03965b7769725903cae1489185c97bfd4b309ab6657e80d045915aeac67b928d83f79a7a31ace2b7f2a60ffa02fff0254be6a0e6c186ae65e1e2d24092911d2a080fd09a39723ee2624e0b04389ca6c43c305ec1e52f12375ce0dc67a44fbe60dc6188e3cffebe27221d47f7cb3cbb9f0691ac4f3ab047c3ff7274ebb78139392d01bf43971c0118dc748f2f153bdab7fcb49366edf40f31b644c1b2a4c3e893ea928637b18615939d1f5307f7f3d0f117cae3c88815ff5a6b4646eaa326c0de25874140555b83b99c9a3c15fa9f886abf887bdbbb34d1a1e13520c957afcf7d4024e49c6d12a0ca4d0792641908269f818799c3ed71623b2e8e77be8b2e0e54c290756fe2de9c89d773b204a3cbae83f0d4c5331afdd44d87b8601ea2720bc660332002297c8f37ba8657ae97db14cea3ad149c40e39a82ecf1637a8a8925f6e81fcb75c4a4c7dee47277eed2f3a89b2ba925cd3b58aaa91a1c274cb37032fff4a9669a88b3ee74c0b58b270b85bcffc2b56602e3ac27f347d0f14205b407cd596fd4ab49932dd69fa2492d5fa64852942158eefa793da083e1bc526fcf725a283e726a7224d6cc505000000000000005c9f4987716fc01d68c8c4a11f94ba9c6042152a1c32d7d8cb18d3fa32f742a7b08157846e0ea5ee70c12863f0bad11b5bc63a1dd67ed43d063518192cbabb9980fcddce9cf1619b69b32aeff933df8de92fefcac65e9f0d5413064926ac33351d5bd1b84bb008e776c369b8f75dfa8ef1034a6464eca3e435606b8e0f6b59ed846f3adc3ca51cb5c0d3a4e18f0337b35cff11dd8c9f3c87344d615cbf58a22574395656893c6ae71a3a3203364a0ac3177109f4f946c759a52bdbd063f7d8e209f5fcc19198424162ba051a2ae1330e76d3f97afd8041a9947daf441f5e953a3fa569621e7f90fb961e2ebce7cc0506274bb8261296bafee9ee5e4ff1693ae8a87005789945c23ad332922dd55ca8017beadc497254e2e2f10000776dd88424b62436c12e9871cfff1ad44c0dc68a13c2a5bac944809b6c3663b27b219b3a9c649234195dca9a398921606558b5f964c1e377f630f52a33909a32a92c08455c3b25b87129bb045472c3be39b5348f8caa32602770874ad28a372313b07e08f216afbefdb17e0ab63742f6e58a06405c3bcd360b06494aec2ee6153463f8fc4f2cf93ee9f3b051256fb036133da4a5cb2dca38844051dae1233a856ebe1e8918106ba3b8d13d1e42e0a71503f11f5ddb15091894898414eba6dda382cc76cc6ddfc09808b3a69310c0cc2558d77fcc1636f602b3af9c6ed723150b5df6717ec098831f6eb0bd275cc15eba96522168847f111990b78092ce9386a34b88a459d358db19160bf28860f10607a0b8e9ad1b2101d9cff30b016bf492efcfb192f0cc285194625d1f88da87fc89af73463ebe838b395766c98f065173fbd6ff931855040a6ae966f01392fb543b523ee7a5a59f514fd4a40194d06d45bdf031f8db3f0d02b6cf351575ba93b29b13ce829964b950cc957c86bb11ec505b23a0459fc158199cd3fd67e5b3a058d50f674385e57e1cc3044793bda63875f95dbf71dac227fe828435483950a58df37dccb8ad7b1b5acf07a5742254a34b35256e4b0de24b50e5553aa639d4bf4abe3286032a286df19e24a7f02dc75e2128e5b179a540508d4d8bf019838812551842a701349631a27819b47716cd879c2f1d8d2b04727a7cd2aa29fac2f48998a1cd2dbcb3d0a65255167b4d9b1ddda14b27fe4e24ecc08b64f84f8306988a224ed79bb6981718e177a7f8171e72c9e64b7b18ae2ee62e8903d29c29046239e4a0d133a795943fe154dd3d48d2057a41cca82ac20b5bcad5127d6d15d093ea4292cab6bb0c9ee5c7cbfb4fd182ab1d462ebcaf091ffef6ee6a2a5f16bf45334cb5b4d99aaa60a5d00fccc9279a754dd3010217ac9fc10a368eedc04ce82f69f7afaf914ffd84f58726f30b7f1bc388c8a0a3fbd5abc32bda578185b02a5a969a31bf2cafa748af825ceb9f1d9367bbd57e222b82535722abda92d4f9159c779434668a5645d20b88128dddcafba70382c4d66131194401d55b4956d3b9f6759d9f203deb07197b92105c2e3ee568d22c1b6d44f92992913f5a09bd0f5d5ce903fa22a7ca655be3c23e1394be5b29ad967f45481a76319b384f28642074dfd0837c9e9c8132aef84719bb532ef797e9dc3029768d7bed6f59f760cfc6a8c40b82e18592d8dd2d5da4a505896f81c426d911435da78835ef792a281bd7ac0aa8a7f6a102edc7a2892f45d0f4ef1c11b82f23b447f2efaf6b10ba75bddcba96ca89253feabc523e125a0b32ee541c557526e8e0a86d8f0b86ab565c098039af7623dc6f2595396514f86fd30841c117aaf2bdd105cb7100624c565953843833bf91e4e665b168d173e5af2225929f4e1271f1f4d864186cd18e0c47d6161ba134b614908f0ead349ed1dc00be78275d42aac20e6b4acd526960e74b026813a5b2905fa2716e2296832f6302f9ebd7bb7d12e8ab9c4c0bb5e8304d2f2d18476d7fc6d827467cb0a8d31351039f7beefb7cffa109c9a0f3ad2acbf243b5152381308aaa5de5295d213fc57073ad6be4866557a9e0d3b6c59eb8c19cf48990080cacf9f5bea11767202240394a75f0f4220e4f31d4f62b8d02e2f9f95256f65800575bdd862f90c0edf7be90e234d797325002f6181c1425d87948bfe8069707f19f9bb50b74d351a7a52e8b2c57f5a5df8b7844932f537e22cfeac786f5635fa6976bb02c16d172191f81edfa8606c194fb930572730802d36f6e0dc20945c1218344d6e80ef4f78117c7f1daa46ad55910653bd2d80ff65362b0e8d3736aeebe13937dd5c54c86d096cfce7a31b38b24c4c544415ec138fb0f874e50b2797201e21e173efbbe2bf928bf0a04439d395860c0b27e2e5da8d7597163981c1fdef4d0ba6e3f3b2720819b7ef5ad4bf8ee560fbcef619ace2d830bc7cd895f7a50ab3811a861f7d531b3e4bab5a266baf9c770275ad9668f8543b4191af86c92be9082dfcc3e45485611f1903b32268277e4d6cbf6888820bdbe6754eeb6b91cc428e02375c1b92b61e9c9830ee0a84a4e4624eafbeefd7ac27dda95d4feeb46e27940e71d5f994e17bf07d93e248713ee895b5f98278be8d7fc3c84c4102c017eb8e54485cd1435c1c48a63382f2da2caf0d3e16fb94b538b9801a150c746447fa59fa1e6d07eca5ba472007db1b4456fba2f13f5c92b1f9f0a09ca8f605e18193c8d96392af180e7cb9b5d9af531a651d71a4eefa54b43944115caf4c119d32d4805945f845b2f1b21feb6b30e5b2a8b29c22324cf26862a88944031860dec6a5d78a5401ec49cc8185ac645e0720b169db7eefad8af260349fa52397c7b8d00767819fa6d2b6a2e0031af951a99765c5f832f0a983089fd6c3472c1c6dc8468a104000abcf8fcce28a2edba45609aef7aed7fdc375daeb4f1f1d56a839155444404c502620f20bafbc74f86c820fa96134e3713aa627b4810115dcf9724de6fcb108bef581583a667de705c5c427c0474d10258aaa58e7d80ac91fb4020cc3e7ffc48b5c161f08216c45897f5a7d2bdc439cff464f34eb4232b6763dd574bb01fe746e468e24aa08d0490d051f45aab1eaf009f3cfd61eef58da4a25ce2c5eb27c02843e727630a861bb934c91a2a39681adea455d8bddf04f4bdad27784ae99ebc3ff9e91bad57c05863bb623998122f22bde79ee0fd98d7a0a917f75ae40cf8bbce2cf597da202c0905567c19b5e560372b9729cbd44188729548b139786b2d19f26f45bf510b98ea2a200dbecadb775d3259a48b267fd9f070771abfb145288c95e0d30c8e6199aba778d03d8a1db56b5f9f68f194636e15e248f35bdf8a19f31a7559f2b98c3aa14d8ff61a9cc3459706137879d2410ebccc27157807a4e49846c311d606774704bb71a38b6e12626af736b23b236e5cac9956823c894bfeac562f8eb30a0dbbfd698bebf046d50c7f806d7050b947dc11c9a0fc527313906235ceb471be257958c6d4d0feacb5be092fe28e3bb3fb0b286b817a0e9ad0d80901ae231f34625204726e626ce80518b2b2092409bab8608ae7c4197a52d5a0c55ce7d81fc7c833353b69599eabbc2647ab7477382c1b36f6fdc6705046fdebf596aff258e6f5403f26a3a4dcc5a12d513dc196cceadaa0d91bb12efb2827541d9e501e41533ed99f3550e925d64efc16866e8ffa0fd85cebe423f35e3e0095cf65cccbd32094951eabfce269b83f0e49fdb3a6e3f025c1ad62136c7a823d063ea1c30c7447fbe3fb771288af68819264747d21bf8bf8691d6f3e02f9cfb317286c5945d3f61f36ac336200", 0x1000}, 0x1006) 15:47:29 executing program 2: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x4b) read(0xffffffffffffffff, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:29 executing program 5: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='permhat x0000000000000000^/proc/thread-self/attr/current\x00'], 0x1) 15:47:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 15:47:29 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 15:47:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000000000a01, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) syz_open_pts(r4, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, 0x0) shmget(0x3, 0x1000, 0x1808, &(0x7f0000025000/0x1000)=nil) prctl$PR_GET_DUMPABLE(0x3) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:29 executing program 3: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x8, 0x11d}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) 15:47:29 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:29 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x32d3, 0x1fffd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f00000002c0)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x4a3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x20) pread64(r3, &(0x7f0000002400)=""/4096, 0x1000, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000480)=0x60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000900)={0x3, 0x0, @ioapic={0x100000, 0x4, 0x7, 0x6, 0x0, [{0x3, 0x4, 0x3, [], 0x4}, {0x6, 0x7, 0x401}, {0x6, 0x5, 0x5, [], 0x8}, {0x6, 0x10000, 0x7, [], 0x3}, {0x100000000, 0x0, 0x5}, {0x1f, 0x5d92, 0x3, [], 0x1}, {0x3ff, 0x0, 0x3, [], 0x5}, {0x8, 0x7, 0x3, [], 0x101}, {0x9, 0x100000001, 0x100}, {0x4, 0x0, 0xfffffffffffffffd, [], 0x7e46db1d}, {0xffffffff, 0xa29bc3e, 0x2, [], 0x9}, {0x3f, 0x9, 0x0, [], 0x7fffffff}, {0xf9e8, 0xb317, 0x200, [], 0x8}, {0x7, 0x0, 0x0, [], 0x54}, {0x9, 0x1, 0x0, [], 0x8}, {0xfffffffffffffffe, 0x5, 0x80, [], 0x2}, {0x8b35, 0xec, 0xffffffff, [], 0x8}, {0x0, 0x72, 0x0, [], 0x3}, {0x8001, 0xfffffffffffff394, 0x6736, [], 0x8}, {0x1, 0x2, 0x3, [], 0x2}, {0x6, 0xffffffff, 0x7, [], 0x3}, {0x10001, 0x40, 0x0, [], 0x4a4}, {0x0, 0x7ff, 0x40, [], 0x100000000}, {0x20, 0xfffffffffffff3b5, 0xdd, [], 0x3}]}}) r4 = syz_open_procfs(r2, &(0x7f00000004c0)='attr\x00') r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000100)) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff606c5365064d82792cb9b2ce01000000080039000000000000000000"], 0x23) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r3], &(0x7f00000000c0)=0x2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000600)={{{@in, @in=@remote}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) fstat(r4, &(0x7f0000000880)) sendmsg$unix(r4, &(0x7f0000000b40)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4, 0x40}, 0x800) r6 = dup2(r3, r5) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x8000, 0x0) syz_open_dev$vcsn(0x0, 0x1, 0x8000) gettid() fcntl$setpipe(r6, 0x407, 0x6) mlockall(0x1) mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x8032, 0xffffffffffffffff, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r7, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 15:47:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$unix(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f0000000180)=@abs={0x1}, 0x6e) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 15:47:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 15:47:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:29 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0506107, &(0x7f0000000300)) 15:47:29 executing program 1: read(0xffffffffffffffff, &(0x7f00000000c0)=""/132, 0x84) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000000380)={0x0, 0x7a120}) 15:47:29 executing program 5: clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x40000000) exit(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 15:47:29 executing program 4: [ 324.921970] IPVS: ftp: loaded support on port[0] = 21 15:47:30 executing program 3: 15:47:30 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") 15:47:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x8, 0xa8a}, 0x0, 0x1000) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 15:47:30 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0/../file0\x00', 0xfffffffffffffffe, 0x0) [ 325.209166] binder: 8517:8518 transaction failed 29189/-22, size 0-8 line 2834 15:47:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) 15:47:30 executing program 3: [ 325.298337] binder_alloc: binder_alloc_mmap_handler: 8517 20003000-20006000 already mapped failed -16 [ 325.363350] binder: 8517:8518 transaction failed 29189/-22, size 0-8 line 2834 15:47:30 executing program 4: [ 325.407623] binder: undelivered TRANSACTION_ERROR: 29189 [ 325.418230] binder: undelivered TRANSACTION_ERROR: 29189 15:47:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:30 executing program 5: 15:47:30 executing program 1: 15:47:30 executing program 3: 15:47:30 executing program 0: 15:47:30 executing program 4: 15:47:30 executing program 5: 15:47:30 executing program 1: 15:47:30 executing program 3: 15:47:31 executing program 0: [ 325.959665] sg_write: data in/out 262108/77 bytes for SCSI command 0x0-- guessing data in; [ 325.959665] program syz-executor2 not setting count and/or reply_len properly 15:47:31 executing program 5: 15:47:31 executing program 1: 15:47:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, 0x0) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:31 executing program 4: 15:47:31 executing program 0: 15:47:31 executing program 3: 15:47:31 executing program 5: 15:47:31 executing program 1: 15:47:31 executing program 0: 15:47:31 executing program 5: 15:47:31 executing program 1: [ 326.864088] sg_write: data in/out 262108/77 bytes for SCSI command 0x0-- guessing data in; [ 326.864088] program syz-executor2 not setting count and/or reply_len properly 15:47:32 executing program 3: 15:47:32 executing program 4: 15:47:32 executing program 0: 15:47:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:32 executing program 3: 15:47:32 executing program 4: 15:47:32 executing program 5: 15:47:32 executing program 1: 15:47:32 executing program 0: 15:47:32 executing program 5: 15:47:32 executing program 0: 15:47:32 executing program 1: 15:47:32 executing program 4: 15:47:32 executing program 3: [ 327.804811] sg_write: data in/out 262108/77 bytes for SCSI command 0x0-- guessing data in; [ 327.804811] program syz-executor2 not setting count and/or reply_len properly 15:47:33 executing program 5: 15:47:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(0xffffffffffffffff, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:33 executing program 1: 15:47:33 executing program 3: 15:47:33 executing program 0: 15:47:33 executing program 5: 15:47:33 executing program 4: 15:47:33 executing program 1: 15:47:33 executing program 5: 15:47:33 executing program 0: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 328.640409] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 328.640409] program syz-executor2 not setting count and/or reply_len properly 15:47:33 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(0x0, 0x0) close(r1) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) utime(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x0, 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000001040), 0x4) 15:47:33 executing program 4: socket$inet(0x2, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='keyring\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000040000000083e23df77495089500000035570007efa973c914f53b38000220d9f28f51def13b5bb099c720626b55aacb137f865c0182fd6538809f2e1ad97e8a516f536de0617a46128edbf680667405a40b867e27d029cb710cd749d3b93c62e6489c0c790f65f826cc61730adce5796f679c13bddc92f09db2e98f1634932970319229dfb1388d6707aa20102712306d060861917b"], 0xb1) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 15:47:33 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x281, 0x0) 15:47:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:34 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000017740)={0x90, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x90}}, 0x0) 15:47:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c00030051006a007d0a00010c000200170022ff02f1d071"], 0x2c}}, 0x0) 15:47:34 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000340)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x14) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xffffffea) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0) 15:47:34 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80f}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) [ 329.167384] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 329.167384] program syz-executor2 not setting count and/or reply_len properly 15:47:34 executing program 1: socketpair$unix(0x1, 0x20000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ff8000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x0, [0x40000000, 0x800002c0, 0x4b564d02, 0x3], [0xc1]}) [ 329.227686] netlink: 'syz-executor0': attribute type 3 has an invalid length. [ 329.235177] netlink: 'syz-executor0': attribute type 2 has an invalid length. 15:47:34 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:47:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3f, 0x80) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000860000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x5) 15:47:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="ab0f30640f3266b82b0a00000f23d80f21f86635400000300f23f86764def80fa20f300f0015f20f5d8d5500660f2fa50700", 0x32}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x3}, 0x129}}, 0x0) 15:47:34 executing program 1: socket$key(0xf, 0x3, 0x2) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x34}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 329.663060] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 329.663060] program syz-executor2 not setting count and/or reply_len properly 15:47:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:47:34 executing program 5: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 330.066427] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 330.066427] program syz-executor2 not setting count and/or reply_len properly 15:47:35 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) munmap(&(0x7f00001bf000/0x3000)=nil, 0x3000) 15:47:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r1) close(r0) 15:47:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) add_key$user(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:35 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x4}) 15:47:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:35 executing program 5: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xbcT\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\x98@\xf2h\t\xa9Qq\xa9\xa2\x85{Q\xd1\\x}\xf4\xa3\xcb\v\x90\xb7y\x9aaj\xf3r\xc7\xaa\xa6\xf1G\xbb\x142\xf8\x8a\xdbxe\t\xdc\xc4 0\xad\xac\x1c\xcda\xce\xab\x02\x19f\xa9\x80\x81B\x87\xc1') fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) socket$netlink(0x10, 0x3, 0x14) [ 330.458659] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 330.458659] program syz-executor2 not setting count and/or reply_len properly 15:47:35 executing program 3: write$eventfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x6e, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) [ 330.539770] *** Guest State *** [ 330.544158] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 330.553373] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 330.562571] CR3 = 0x0000000000000000 [ 330.566645] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 330.573014] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 330.579266] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 15:47:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000006, 0x0, 0x0) [ 330.586346] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.594796] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.603217] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.611595] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.620075] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.628633] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 15:47:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) [ 330.637014] GDTR: limit=0x00000002, base=0x0000000000000000 [ 330.645309] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 330.653510] IDTR: limit=0x00000000, base=0x0000000060000011 [ 330.661766] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 330.670170] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 330.676817] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 15:47:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r1) close(r0) [ 330.684546] Interruptibility = 00000000 ActivityState = 00000000 [ 330.691087] *** Host State *** [ 330.694656] RIP = 0xffffffff812b177c RSP = 0xffff888183b6f380 [ 330.700813] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 330.707689] FSBase=00007f46de8b2700 GSBase=ffff88821fd00000 TRBase=fffffe000003d000 [ 330.715990] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 330.722092] CR0=0000000080050033 CR3=00000001813e4000 CR4=00000000001426e0 [ 330.729603] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ac015f0 [ 330.736715] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 330.743108] *** Control State *** [ 330.746717] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 330.753765] EntryControls=0000d1ff ExitControls=002fefff [ 330.760278] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 330.767661] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 330.774663] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 330.781444] reason=80000021 qualification=0000000000000000 [ 330.788015] IDTVectoring: info=00000000 errcode=00000000 [ 330.793753] TSC Offset = 0xffffff4ae592f8a9 [ 330.798251] EPT pointer = 0x00000001809ba01e 15:47:36 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) munmap(&(0x7f00001bf000/0x3000)=nil, 0x3000) [ 330.925749] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 330.925749] program syz-executor2 not setting count and/or reply_len properly 15:47:36 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) 15:47:36 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="24000000250007041dfffd946fa2830020200a0009000000001d8568ff0ffffff00000002800", 0x26}], 0x1}, 0x0) [ 331.013332] *** Guest State *** [ 331.016725] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 331.025820] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 331.034818] CR3 = 0x0000000000000000 [ 331.038564] RSP = 0x0000000000000f80 RIP = 0x0000000000008000 [ 331.044681] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 331.050699] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 15:47:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000069, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) [ 331.057485] CS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 331.065680] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 331.073763] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 331.081784] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 331.089903] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 331.098040] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 331.106118] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 331.114213] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 331.122316] IDTR: limit=0x00000000, base=0x0000000000000000 [ 331.130330] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 331.138587] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 331.145094] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 331.152765] Interruptibility = 00000008 ActivityState = 00000000 [ 331.159142] *** Host State *** [ 331.162469] RIP = 0xffffffff812b177c RSP = 0xffff8881822af380 [ 331.168521] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 331.175056] FSBase=00007f46de891700 GSBase=ffff88821fd00000 TRBase=fffffe000003d000 [ 331.183024] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 331.188975] CR0=0000000080050033 CR3=00000001813e4000 CR4=00000000001426e0 [ 331.196109] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ac015f0 [ 331.202948] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 331.209064] *** Control State *** [ 331.212620] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 331.219313] EntryControls=0000d1ff ExitControls=002fefff [ 331.224868] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 331.231836] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 331.238625] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 331.245301] reason=80000021 qualification=0000000000000000 [ 331.251654] IDTVectoring: info=00000000 errcode=00000000 [ 331.257209] TSC Offset = 0xffffff4ae592f8a9 [ 331.261559] EPT pointer = 0x0000000182e8601e 15:47:36 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x5, 0x9}) 15:47:36 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/mcfilter\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 15:47:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, 0x0, r0, 0x0, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000480)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rtc0\x00', 0x40000, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x800, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x6f, 0x0, &(0x7f0000000680)) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000100)={0x0, 0x2}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101400, 0x0) pwrite64(r2, &(0x7f0000000780)="3b96398489e13e82a9bf2907b927255a74d14445f5030000000000000088d264a2e5f71061f8f2f79a04e176065245de4870ed32e4f12a6367e435b10d03861a5798232d7c4b67a18bdecc6eeafe970e47a23e6fce040081729c17111d613cc4a246d003420b64868b5c90db440028438a30ff7d06000000000000262795077a25d03ed0f625107178be0fc41ca720ab7e", 0x91, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x297ef) pipe(&(0x7f00000016c0)) socket$inet(0x2, 0x4000000000000001, 0x0) clone(0x8000, &(0x7f0000000200)="f687749d31cfc4d5d02022b38c4d9d85cabc596f5cb88a1769aec47d31524fc7d5a9a8705b8b6e6da206a22a8ab2e1a3ad44f352096fce649f7f06726447180b00ed21e36b2c9073062eabf01bbd83872c67ccf25badda279007d50f4850c7d0730c8e5c8fba5e3c5a830914279a83cd4c790700f17f7567c69eb4e6b495eefb95f075844970c1c2b3149b02c21d7a4b46342d06f17526ffc1997b85a087cc89c9face7611ce76a68755ad7ce6912bb863e9ce5212baeffac1899b04a6", 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000005c0)={'mangle\x00'}, &(0x7f0000000000)=0x54) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000380)=0x10020) setsockopt$inet_tcp_int(r3, 0x6, 0x1f, &(0x7f00000002c0)=0x9, 0x4) request_key(0x0, 0x0, 0x0, 0x0) 15:47:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:36 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x3, &(0x7f0000cbc000)=""/244, &(0x7f0000000000)=0x3d5) 15:47:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) 15:47:36 executing program 4: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'sit0\x00'}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000480), 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) [ 331.814205] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 331.814205] program syz-executor2 not setting count and/or reply_len properly 15:47:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0xa6c1a2b9683c7c6a, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = dup2(r0, r0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) 15:47:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23ab1c679ef275e70000009844753f3366d4fe78514dd3a5f4"], 0x8f) [ 332.229681] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 332.229681] program syz-executor2 not setting count and/or reply_len properly 15:47:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x8, 0x0, 0x0) [ 332.305320] sg_write: data in/out 262108/32 bytes for SCSI command 0x0-- guessing data in; [ 332.305320] program syz-executor1 not setting count and/or reply_len properly 15:47:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x157) 15:47:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) [ 332.623609] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 332.623609] program syz-executor2 not setting count and/or reply_len properly [ 332.656808] sg_write: data in/out 262108/232 bytes for SCSI command 0x0-- guessing data in; [ 332.656808] program syz-executor0 not setting count and/or reply_len properly 15:47:37 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x32, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:47:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) [ 333.009053] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 333.009053] program syz-executor2 not setting count and/or reply_len properly [ 333.021268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.031618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:47:38 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7}) pwrite64(r2, &(0x7f0000000200)="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", 0x200, 0x3200) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffcbe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000000000, 0x0) 15:47:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) [ 333.352818] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 333.352818] program syz-executor2 not setting count and/or reply_len properly [ 333.771081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:47:38 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x400002100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) 15:47:38 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x6e, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r0, 0x0) 15:47:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x8, 0x0, 0x0) 15:47:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000903000000003b2dddeb"], 0xf}}, 0x0) 15:47:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:41 executing program 1: setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0xffffffffffffffe5) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) socket$inet(0x2, 0x0, 0x40) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) semget$private(0x0, 0x0, 0x3) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r0) stat(&(0x7f0000000500)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 15:47:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="c4a12f2a1a4f0fc75e00c482214671d20fc79d007000003e66400f3881b600800000b9950000400f320f070f01dfb9320200000f32b938030000b800480000ba000000000f30", 0x46}], 0x1, 0xa6c1a2b9683c7c6a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=',', 0x1}], 0x1}, 0xc100) write(r0, &(0x7f00000033c0)="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", 0x73f) 15:47:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 15:47:41 executing program 3: creat(&(0x7f0000007340)='./file1\x00', 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) [ 336.813529] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 336.813529] program syz-executor2 not setting count and/or reply_len properly 15:47:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:42 executing program 4: [ 337.084034] Unrecognized hibernate image header format! [ 337.089456] PM: Image mismatch: architecture specific data 15:47:42 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 15:47:42 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x400002108001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) [ 337.217828] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 337.217828] program syz-executor2 not setting count and/or reply_len properly 15:47:42 executing program 0: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0x25b, 0x0) getpeername(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffff7f) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) getresuid(0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r4, 0xd, 0x0) dup2(r1, r2) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000240)={@local}, 0x14) 15:47:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1d, 0xffffff1f, 0x0, 0x0, {0xffffff6b}}, 0x14}, 0x1, 0x8001a0ffffffff}, 0x0) 15:47:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x7ffff000}], 0x12, 0x0) 15:47:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:42 executing program 3: [ 337.510599] ptrace attach of "/root/syz-executor4"[7531] was attempted by "/root/syz-executor4"[8955] [ 337.542638] ptrace attach of "/root/syz-executor4"[7531] was attempted by "/root/syz-executor4"[8955] [ 337.554671] sg_write: data in/out 262108/8 bytes for SCSI command 0x0-- guessing data in; [ 337.554671] program syz-executor2 not setting count and/or reply_len properly 15:47:42 executing program 3: 15:47:42 executing program 4: 15:47:42 executing program 1: 15:47:42 executing program 3: 15:47:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000000000bf2a6babbd23"], 0x77) 15:47:42 executing program 4: 15:47:43 executing program 5: 15:47:43 executing program 1: 15:47:43 executing program 3: 15:47:43 executing program 4: 15:47:43 executing program 0: 15:47:43 executing program 1: 15:47:43 executing program 3: 15:47:43 executing program 4: 15:47:43 executing program 0: 15:47:43 executing program 5: 15:47:43 executing program 3: 15:47:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, 0x0, 0x0) 15:47:43 executing program 1: 15:47:43 executing program 5: 15:47:43 executing program 4: 15:47:43 executing program 0: 15:47:44 executing program 3: 15:47:44 executing program 5: 15:47:44 executing program 1: 15:47:44 executing program 4: 15:47:44 executing program 0: 15:47:44 executing program 3: 15:47:44 executing program 1: 15:47:44 executing program 4: 15:47:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[], 0x0) 15:47:44 executing program 0: 15:47:44 executing program 1: 15:47:44 executing program 5: 15:47:44 executing program 3: 15:47:44 executing program 1: 15:47:44 executing program 3: 15:47:44 executing program 0: 15:47:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="c4a12f2a1a4f0fc75e00c482214671d20fc79d007000003e66400f3881b600800000b9950000400f320f070f01dfb9320200000f32b938030000b800480000ba000000000f30", 0x46}], 0x1, 0xa6c1a2b9683c7c6a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:45 executing program 5: 15:47:45 executing program 3: 15:47:45 executing program 0: 15:47:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) 15:47:45 executing program 1: 15:47:45 executing program 0: 15:47:45 executing program 3: 15:47:45 executing program 5: 15:47:45 executing program 4: 15:47:45 executing program 3: 15:47:45 executing program 4: 15:47:45 executing program 0: 15:47:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="c4a12f2a1a4f0fc75e00c482214671d20fc79d007000003e66400f3881b600800000b9950000400f320f070f01dfb9320200000f32b938030000b800480000ba000000000f30", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x16f) 15:47:45 executing program 3: [ 341.053887] sg_write: data in/out 262108/256 bytes for SCSI command 0x0-- guessing data in; [ 341.053887] program syz-executor1 not setting count and/or reply_len properly 15:47:46 executing program 0: 15:47:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") 15:47:46 executing program 4: 15:47:46 executing program 3: 15:47:46 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0a5c2d023c126285718070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x2000012c, 0x0, 0x0) close(r1) 15:47:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a"], 0x3c) 15:47:46 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000440)=0xc, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x101000, 0x0) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000340)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1732) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000480)=@md5={0x1, "6ea5438eed14faaefc1e8dd10dbdb6b8"}, 0x11, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0x0) [ 341.595650] binder: 9094:9095 got transaction with fd, 0, but target does not allow fds [ 341.604152] binder: 9094:9095 transaction failed 29201/-1, size 24-8 line 3077 15:47:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x400000000000803, 0x3) ioctl(r2, 0x400001000008912, &(0x7f0000000100)="0a5c2d023c126285718070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000540)=""/71, 0x47}], 0x3}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000140)="f20f23e843d9fa0f22e4c481f95b4300f4460fc79cfb9e8bd626c48180c63f04b9800000c00f3235004000000f3065670f20e6c4c178115ec7", 0x39}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) 15:47:46 executing program 4: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) [ 341.654634] binder_alloc: binder_alloc_mmap_handler: 9094 20003000-20006000 already mapped failed -16 [ 341.688234] binder: BINDER_SET_CONTEXT_MGR already set [ 341.693807] binder: 9094:9095 ioctl 40046207 0 returned -16 [ 341.752077] binder: undelivered TRANSACTION_ERROR: 29201 15:47:46 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 15:47:47 executing program 1: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0x25b, 0x0) getpeername(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffff7f) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) getresuid(0x0, 0x0, 0x0) dup2(r1, r2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), 0x8) 15:47:47 executing program 4: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0x25b, 0x0) getpeername(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffff7f) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) getresuid(0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r4, 0xd, 0x0) dup2(r1, r2) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000240)={@local}, 0x14) 15:47:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2"], 0x5a) 15:47:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 15:47:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x100840000000002, 0x3, 0x1f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @local}, 0xc) setsockopt$sock_linger(r1, 0x1, 0xf, &(0x7f0000000180), 0x8) 15:47:47 executing program 5: r0 = creat(&(0x7f0000007340)='./file1\x00', 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) 15:47:47 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x100080000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 15:47:47 executing program 0: write$nbd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x40000003]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) 15:47:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000036c0)={0x1, &(0x7f0000003700)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x4d5}], 0x1, 0x0, 0x0, 0x800}, 0x0) shutdown(r0, 0x1) socket(0x1d, 0x6, 0x1f) 15:47:47 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$sock_inet_SIOCRTMSG(r0, 0x80085504, &(0x7f00000000c0)={0x3f00000000000000, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 15:47:48 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000001c0)=0x40) 15:47:48 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 15:47:48 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$sock_inet_SIOCRTMSG(r0, 0xc0105512, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 343.076069] usb usb3: usbfs: process 9175 (syz-executor3) did not claim interface 0 before use 15:47:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006ec0)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0x25b, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) getpeername(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffc2) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) getresuid(0x0, 0x0, 0x0) dup2(r1, r2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000006e40), 0x4) 15:47:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed5"], 0x69) 15:47:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='cgroup\x00') sendfile(r0, r1, 0x0, 0x80000002) 15:47:48 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x5, 0x0, 0xffffffffffffffc0}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) r5 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r5, &(0x7f00000003c0)={0x11, 0x0, r6}, 0x14) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000400)=0x99) creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x1732) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xffffffea) fsetxattr$security_ima(r8, 0x0, &(0x7f0000000480)=@md5={0x1, "6ea5438eed14faaefc1e8dd10dbdb6b8"}, 0x11, 0x3) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r9, 0x0) 15:47:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000001c0)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x200000000080}, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0xffffff80}}) [ 343.402675] tls_set_device_offload_rx: netdev lo with no TLS offload 15:47:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='cgroup\x00') sendfile(r0, r1, 0x0, 0x80000002) 15:47:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in=@remote}}, 0xe8) 15:47:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000200)={0x0, 0x0, @raw_data}) 15:47:48 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x32d3, 0x1fffd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f00000002c0)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x4a3, 0x0, 0x0, 0x0, 0x1, 0x3, 0x8}, 0x20) pread64(r3, &(0x7f0000002400)=""/4096, 0x1000, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000480)=0x60) r4 = syz_open_procfs(r2, &(0x7f00000004c0)='attr\x00') r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff606c5365064d82792cb9b2ce0100000008003900000000000000"], 0x21) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r3], &(0x7f00000000c0)=0x2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000600)={{{@in, @in=@remote}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) fstat(r4, &(0x7f0000000880)) sendmsg$unix(r4, &(0x7f0000000b40)={&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r5], 0x16, 0x40}, 0x800) r6 = dup2(r3, r5) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x8000, 0x0) syz_open_dev$vcsn(0x0, 0x1, 0x8000) gettid() fcntl$setpipe(r6, 0x407, 0x6) mlockall(0x1) mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x8032, 0xffffffffffffffff, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r7, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 15:47:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="3ef00fc78b95cfb807008ee065650f06f36ebaf80c66b889c52e8f66efbafc0cec66b8186e00000f23d00f21f866350000000e0f23f80f01cbd03d670fc75d622e0f01cb", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:47:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x3e, 0x105, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 15:47:49 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x5, 0x0, 0xffffffffffffffc0}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) r4 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$packet(r4, 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000400)=0x99) creat(&(0x7f00000000c0)='./bus\x00', 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffea) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000480)=@md5={0x1, "6ea5438eed14faaefc1e8dd10dbdb6b8"}, 0x11, 0x3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) 15:47:49 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffed7, &(0x7f0000000380)={&(0x7f0000000300)={0x7, 0x0, 0x0, {}, {0x0, 0x2710}, {0xfffffffffffffffc}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 15:47:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed500000000000000"], 0x70) [ 344.575981] kvm: emulating exchange as write 15:47:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x400000000000803, 0x3) ioctl(r2, 0x400001000008912, &(0x7f0000000100)="0a5c2d023c126285718070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@setlink={0x34, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, [{0x8, 0x1, [@nested={0x4}]}]}]}, 0x34}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000540)=""/71, 0x47}], 0x3}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000140)="f20f23e843d9fa0f22e4c481f95b4300f4460fc79cfb9e8bd626c48180c63f04b9800000c00f3235004000000f3065670f20e6c4c178115ec7", 0x39}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 344.617409] sg_write: data in/out 262108/1 bytes for SCSI command 0x0-- guessing data in; [ 344.617409] program syz-executor2 not setting count and/or reply_len properly 15:47:49 executing program 4: clone(0x7ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() exit_group(0x0) migrate_pages(r0, 0x2, 0x0, 0x0) 15:47:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {}, 0x0, 0x0, 0x20800000001}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in=@remote}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 15:47:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed5"], 0x69) 15:47:49 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000140)=0x10) shmdt(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) unlink(&(0x7f0000001800)='./file0\x00') geteuid() getgid() ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)=0xff07) 15:47:49 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), 0xffffffffffffff8b) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0xfffffffffffffdff) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/81, 0x51}, 0x40002102) 15:47:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x1ffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:47:50 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)=[&(0x7f0000000640)='-#*:\xea@\'', &(0x7f0000000240)='\x00', &(0x7f0000000280)='a\xc3@\xeb']) [ 345.081718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:47:50 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 15:47:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:50 executing program 5: r0 = add_key$user(&(0x7f0000000fc0)='user\x00', &(0x7f0000001000)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000001080)=""/17, 0x11) 15:47:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$sock_inet_SIOCRTMSG(r0, 0x4004551e, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 15:47:50 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0a5c2d023c126285718070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x2000012c, 0x0, 0x0) close(r1) 15:47:50 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) 15:47:50 executing program 1: [ 345.762051] *** Guest State *** [ 345.765902] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 345.775456] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 345.784639] CR3 = 0x0000000000000000 [ 345.788521] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 345.795069] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 345.801367] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 345.808723] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.817347] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.826009] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.834274] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.842689] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.850823] GS: sel=0x0000, attr=0x10000, limit=0x00000020, base=0x0000000000000000 [ 345.859106] GDTR: limit=0x00000002, base=0x0000000000000000 [ 345.867524] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 345.875886] IDTR: limit=0x00000000, base=0x0000000060000011 [ 345.884076] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 345.892647] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 345.899231] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 15:47:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed500000000"], 0x6d) 15:47:50 executing program 5: 15:47:50 executing program 4: 15:47:50 executing program 1: [ 345.907809] Interruptibility = 00000000 ActivityState = 00000000 [ 345.914579] *** Host State *** [ 345.918040] RIP = 0xffffffff812b177c RSP = 0xffff88817a1cf380 [ 345.924239] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 345.930787] FSBase=00007fbc9ff6c700 GSBase=ffff88821fc00000 TRBase=fffffe0000003000 [ 345.938866] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 345.945245] CR0=0000000080050033 CR3=000000017e260000 CR4=00000000001426f0 [ 345.952683] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac015f0 [ 345.959662] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 345.966209] *** Control State *** [ 345.969891] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 345.977168] EntryControls=0000d1ff ExitControls=002fefff [ 345.983263] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 345.990399] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 345.997533] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 346.004556] reason=80000021 qualification=0000000000000000 [ 346.011239] IDTVectoring: info=00000000 errcode=00000000 [ 346.017246] TSC Offset = 0xffffff42c2731201 [ 346.021821] EPT pointer = 0x000000017f07a01e 15:47:51 executing program 0: 15:47:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000a, &(0x7f0000000300)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000880)=0xfffffffffffffdc1) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000180)=0x30) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="00ffffceecefce8fada72d0e8bdc24ffd103749d1bb5547004000f8887c6477f281db961a02b66e500000000000000000000002acae8c3f9ce26a630e4e32ca98ae392"], 0x43}}, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025c090000000000000070") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r4, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) write(r4, &(0x7f0000000900)="1102ea373406b21d9bc444ba83f952d57b52f57f53bbf7bdedb5d362ddbb8481de598149d6a8d515d6baa6a4f2fe29511d6f0c4a0d4977f4aa1b9a1488d387afb5c54099f65395e38ca84b3c1fe8896530ab7f6d1ac6415e9dffea1e2db57fac4a61ddf40a739ada2c12a7fdaf14d340039c61", 0x73) ppoll(&(0x7f00000001c0)=[{r0, 0x2008}, {r3, 0x801d}, {0xffffffffffffffff, 0x28}, {r2, 0x2}, {0xffffffffffffffff, 0x80d4}, {r3}], 0x6, &(0x7f0000003740)={0x0, 0x989680}, &(0x7f0000003780), 0x8) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) r6 = socket$inet6(0xa, 0x1000000200002, 0xfffffffffffffffe) ioctl(r5, 0x0, &(0x7f0000000240)="025cc85c20000000000000") syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) dup3(r0, r6, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) [ 346.214594] *** Guest State *** [ 346.218099] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 346.227125] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 346.236203] CR3 = 0x0000000000002000 [ 346.239961] RSP = 0x0000000000000f80 RIP = 0x0000000000008000 [ 346.246089] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 346.252195] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 346.259017] CS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 346.267134] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 346.275229] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 346.283350] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 346.291377] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 346.299545] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 346.307657] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 346.315818] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 346.323942] IDTR: limit=0x00000000, base=0x0000000000000000 [ 346.331968] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 346.340091] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 346.346611] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 346.354204] Interruptibility = 00000008 ActivityState = 00000000 [ 346.360478] *** Host State *** [ 346.363816] RIP = 0xffffffff812b177c RSP = 0xffff88818038f380 [ 346.369856] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 346.376494] FSBase=00007fbc9ff2a700 GSBase=ffff88821fc00000 TRBase=fffffe0000003000 [ 346.384417] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 346.390379] CR0=0000000080050033 CR3=000000017e260000 CR4=00000000001426f0 [ 346.397584] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac015f0 [ 346.404381] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 346.410497] *** Control State *** [ 346.414096] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 346.420803] EntryControls=0000d1ff ExitControls=002fefff [ 346.426400] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 346.433481] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 346.440191] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 346.446914] reason=80000021 qualification=0000000000000000 [ 346.453338] IDTVectoring: info=00000000 errcode=00000000 [ 346.458833] TSC Offset = 0xffffff42c2731201 [ 346.463277] EPT pointer = 0x0000000180cc601e 15:47:51 executing program 3: 15:47:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 15:47:51 executing program 1: 15:47:51 executing program 0: 15:47:51 executing program 0: [ 346.649003] dccp_close: ABORT with 1061 bytes unread 15:47:51 executing program 4: 15:47:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed5000000000000"], 0x6f) 15:47:51 executing program 1: 15:47:51 executing program 5: 15:47:51 executing program 3: 15:47:51 executing program 0: 15:47:51 executing program 4: 15:47:52 executing program 4: 15:47:52 executing program 1: 15:47:52 executing program 5: 15:47:52 executing program 3: 15:47:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000040000000000000000000000d40000000000000000000000000000000000000000001cca000000e4ff38000000000018b7074db0cb5a8531eb5bd40000000000070000000000000000cc373556b4db7880c5f4e2098c33cb2eda936530c9facf929ed50000000000"], 0x6e) 15:47:52 executing program 0: 15:47:52 executing program 5: 15:47:52 executing program 3: 15:47:52 executing program 1: 15:47:52 executing program 4: 15:47:52 executing program 5: 15:47:52 executing program 0: 15:47:52 executing program 1: 15:47:52 executing program 3: 15:47:52 executing program 0: 15:47:52 executing program 4: 15:47:53 executing program 1: 15:47:53 executing program 5: 15:47:53 executing program 3: 15:47:53 executing program 0: 15:47:53 executing program 4: 15:47:53 executing program 2: 15:47:53 executing program 4: 15:47:53 executing program 5: 15:47:53 executing program 1: 15:47:53 executing program 0: 15:47:53 executing program 2: 15:47:53 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) listxattr(0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0xfffffffffffffecc) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) tkill(r1, 0x1000000000016) 15:47:53 executing program 5: 15:47:53 executing program 4: 15:47:53 executing program 1: 15:47:53 executing program 2: 15:47:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=',', 0x1}], 0x1}, 0xc100) write(r0, &(0x7f00000033c0)="e6a2e0091b61501ea87850c6d258201cbf3fe9fe75bc31032c1bd695e6f89fffb8dd1bb327cde2fa8115c8949109dddb3332b28603a1e35d08e3d07606314bc0e1cf58b62864f0023821ae335454a2a6d9cc29a3fc3d2c30ff2907f14f80fce3c468ce732418663bbb11e34e1f9e819d012f4928b5fb59fb31755c98649f35c587263cbf7830ddde04ed4e4a9fda1923d06559d4e9df911797333a46b8d2268133da26a6e59e35a66021404ba08e9b550cd132eda9a970ae2ef50b25dbe1c3da78074af2a762c27eeb9b22630beec52475e7a8a159fad88d41e8309b5e32983e315025fbc9c7603d676a5316fffcb42642150cd498d59748ff6200a73c31b403eb73a20b57a47e7d69aa0bb5c59235f2fd893d6b5b86efa9b05a2b566184e4f8a3589d5d5e09337f161517cdcac41b5732064919358d7cd6a9b1fb0a5ad5c4106124da93437fed9f2503223c3eb1103cd9b1a9ecf29674ea86921bd5b0094e3937a1286a44089ef4b42cca8e46cfda355cfe8622e860f416b60af1196f7c0196daa0bf0dd3797d0b8199ac4e2381d92f473393b860c9f97a08324c83c372553042c7f24709106c016ff1e20c93d645e734daaf50f13ad845377b895c1dede9b73432d24c9f6207bc31fe8fb9900377b387f8787f20849ec05b0d44982a78a650e12306efff6f4ef89b0eb175bfff545fda8692314d7fc9e8f4fdffd01b56a6b1358adab6d78f3d693e6781c8bf399024aaa888d572d59cf7cdb74aa974d20549a47624f35caf0956651e8d24079e0866e0172f2fc26af14c628f99051e04e50fba06de938d52d934a78921d5144d18e8c5d1f4fd2d0e7ca22119be065574f5f7dfbabbc44d42b51d62d658ed2ed1250d7821a09d26760bca0f8bc1b186e5cf931377b2adefca5a752c7f9e82224c5734c88d27c3afb7d785ee510fb3806f42bbff9fe9bc1d50cb329bb666a1d766182ffd6b6aee8535406b2a77e2328d90b90950034dd468577693571bc9a9fb9f8aaae67d5a8747f85e38318d97f458c6c9fed9c3b8f0affe63a2adaa57e472449c76b53af7f0cf9087e62bd5556947e681873a002c78d08326290a34489f5eb7acb38367778460473e6b5e4a8c5caa8213092cf59a2f3834548793ef1a55983af67a304c187ded353c4b3f95b9ec569fdc39b60613f8f622a759b7b6a59901d32a2725c7db7768259ad896a7315d07c850035b67dd4ba1ab8be64d2dcf83988b66f3801c26164b3ceb65778e2db97212cac966167ffea65af621e027588b76a23d01995d91e83b6ba104272789f857e75cb959a2206a439d56fd89108d4d6590ac1c6da88cdc53913a51c4b68c17aa26a050d026d6aff72329f597f506280268c61507d62535345d6d2c9e48343825fc36648aa68b2d01c404dfd1dedcba7532f510316d7b18baa8786bd5fa2d1b56c875de3ea88201003b92f6d70ee1e9408cceb561ea511db3a8c85da59390668c486fe1e555b317e767046f69ee031d6021369a01a474bbb3d6f5b094d78745ce3f8ad89e373c18ec3c2dd85af00a79ebaaffb7c049386078bf0b9b56b686c1f0a8855fb1007eb306a68fd840176ff09797edfbace33d4f213ea3599d97d643569ed40a69a41083c65592508305b234587a79aae09645416898a659b17a2c778f5bb2f80878f01f3a14a0488e48fd9d4670cf218b4da04e79c03f77174717e3c25a888bd6286dd91f08af9d281da4bae8d033197171c4fd2503ed398059a78d0ed1fbd98dba8314008ed399ab3ccb56847d30fff2b26a3be5d84af230e1915c2ab7eef4b01b29986985db14213b9b05816ef7724aa896073641a7bc6eb9406e79fa961eb8afbeba75293c1f786e3c8c051733565f40dcfb0f45a036fd01e25be3291f0f5eba9523ba1679a35aebbcfa896ab6401296270ba8742259adaf5a52606c3239b8ecc208e39ee916d09f55e5789d5b08c72984dffb457809d51d5dfa8ca921b747f7b46b11ee23cd741a73aba019f14712758376c53649b8ed6f7e4d1805568221feb803a1d1e63df108d435b42fb0f38e3c6410f15d0f56142d4aba83d7bfe3ef5844d4ed36f0bfa6046697742a89689941fa04a68da4e7cbaf6e284d08a8fc3fb9150a6e262b55d616ccb3999a2ff16f6b571c24ce61d9e51d2f4bd294361fa2bf7fa193fac13535233de13789a1131daed83bd6d403be2ef6edd7d45b9d3cf77c2aa4d79fcbad52462b21bfc89920578e2a60363fb274e242d640109ef5dde5f218e256da68aca762883b7cbefdea6eddc013257214d9bb588ed83a517dd9d34fcc32824f9d880712c2fe48f4e8949728473a6bf9688f999adf2e219423090a75b1acfc8ea96105e22de77e415e7b406b47ffb57bdc26ead43ba946a2be6602c64c79275a0ed0fdbbae0825b63c939a0e3ae6dcfbc2f1b6ddb3d4ec7479e85407fb70ac4813951705d6cf1a35d73e97f6fed3ad2d4e60af3e9c5393200dc6b7bb809d5d44247b2b224e4232b7adb97f060ea85bf22cdd8a2f7533d703fd75d6498e517478e144da0c273edcd31fea2143bed37c930c02c2d74261966e18b3ee1c1aa1f0517563aa840a151785d941ffbd70683b165e3a31395d1d7d91189a", 0x740) 15:47:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f5, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 15:47:53 executing program 4: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0x14}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', 0x0, 0x0, 0x0) 15:47:53 executing program 3: r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x50) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8), 0x71, 0x0) 15:47:53 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000680), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:47:54 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000005c0)) lstat(0x0, 0x0) getresgid(0x0, 0x0, 0x0) geteuid() ioprio_get$uid(0x3, 0x0) r0 = semget(0x0, 0x1, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/71) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 15:47:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 15:47:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffff9c}, 0x333) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x4, 0x208002) write$P9_RLINK(r1, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x97, 0xee0, 0x81}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000005340)={0x5, 0x9, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0xfec7, &(0x7f00000002c0)=""/129}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0x2e, &(0x7f0000000440)}, 0x10) 15:47:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000140)=0x10) shmdt(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) unlink(&(0x7f0000001800)='./file0\x00') geteuid() getgid() ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 15:47:54 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) 15:47:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f000059dffc), &(0x7f0000000040)=0x4) 15:47:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffff9c}, 0x333) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x97, 0xee0, 0x81}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005340)={0x5, 0x9, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0xfec7, &(0x7f00000002c0)=""/129}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0x50, &(0x7f0000000380)}, 0x10) 15:47:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg(r0, &(0x7f000000cd80)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) 15:47:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x7, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="c4a12f2a1a4f0fc75e00c482214671d20fc79d007000003e66400f3881b600800000b9950000400f320f070f01dfb9320200000f32b938030000b800480000ba000000000f30", 0x46}], 0x1, 0xa6c1a2b9683c7c6a, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000002c0)=""/118) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:54 executing program 3: syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) 15:47:55 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x400032, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000040)) 15:47:55 executing program 1: r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x38}, 0x0) 15:47:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{}, {}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:47:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000200f30f30f092e0fc7a90000", 0x44}], 0x1, 0x0, &(0x7f0000000680), 0x0) 15:47:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000840)=ANY=[], 0x370) close(r0) 15:47:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x386}], 0xed, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001f5, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x80000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) 15:47:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)}}, 0x20) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1, 0x2}}, 0xffffffff, 0xf79}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000600)={0x30166c04, 0x6, 0x5, 0x0, 0x3, [{0xffffffff, 0xffffffffffffff7f, 0x9, 0x0, 0x0, 0x80}, {0x2, 0x1, 0xcb0e, 0x0, 0x0, 0x4}, {0x8, 0x1a41e576, 0x5c02, 0x0, 0x0, 0x200}]}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0xc0200, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = socket(0x1e, 0x805, 0x0) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000300)={0x0, 0x0}) r6 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x80000000, 0x1}, 0x1c) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0xfffffffffffffffe, 0xd, 0x3, "0543bad461fc921a2775eaacfd0eb1ef24dae1d5b5145f981c2709487d79b72e", 0x3247504d}) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r4, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) 15:47:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuset.effective_mems\x00\x93\xb9y\x9a\xd3}o\xa5\x111(\xfd.\xac-\xb8\xb5\xfe\"\x1b,\xfbw\x9a\x83\xc9LO\t\x83u\n\xb6\xf6\x05\xe2g\x16\xf7%\x00B\x87%\x8f;\xdf\xfd\xcb\xc9Z\xb0D\t4Wm\xe5\xd2\xa2\xa3Z\xbd\xadY\xdb\xcc\xab|UW\x8bx\xf8\xf6\xb0\x8d\xae\x00\x00L\xe5\xaf\xb0\xa0\xbd\xe7\x97\xe7\x97Y\xb0M\x87!^\a\x12\x12\x0f\xa7\xf3\x8cxu\x89B\xeb\x99\b_k\xac\x02\xd0\xf50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x400) 15:47:56 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x80083313, 0x0) 15:47:56 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) fchmodat(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getresgid(0x0, 0x0, 0x0) getgid() clock_gettime(0x0, 0x0) utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:47:56 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x0, 0x0, 0x0, 0x0}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000200f30f30f092e0fc7a90000", 0x44}], 0x1, 0x0, &(0x7f0000000680), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:47:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000140)=0x10) shmdt(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) unlink(&(0x7f0000001800)='./file0\x00') geteuid() getgid() ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 15:47:56 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000440)=0xc, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x101000, 0x0) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) r4 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$packet(r4, &(0x7f00000003c0), 0x14) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x1732) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xffffffea) fsetxattr$security_ima(r5, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000480)=@md5={0x1, "6ea5438eed14faaefc1e8dd10dbdb6b8"}, 0x11, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0) 15:47:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="c4a12f2a1a4f0fc75e00c482214671d20fc79d007000003e66400f3881b600800000b9950000400f320f070f01dfb9320200000f32b938030000b800480000ba000000000f30", 0x46}], 0x1, 0xa6c1a2b9683c7c6a, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:58 executing program 3: 15:47:58 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0), 0x1, 0x0) 15:47:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000540)=""/71, 0x47}], 0x3}, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000140)="f20f23e843d9fa0f22e4c481f95b4300f4460fc79cfb9e8bd626c48180c63f04b9800000c00f3235004000000f3065670f20e6c4c178115ec7", 0x39}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:47:58 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) 15:47:58 executing program 4: 15:47:58 executing program 5: 15:47:58 executing program 1: 15:47:58 executing program 5: 15:47:58 executing program 4: 15:47:58 executing program 3: 15:47:58 executing program 5: 15:47:58 executing program 1: 15:47:58 executing program 4: 15:47:59 executing program 0: 15:47:59 executing program 3: 15:47:59 executing program 5: 15:47:59 executing program 2: 15:47:59 executing program 1: 15:47:59 executing program 4: 15:47:59 executing program 4: 15:47:59 executing program 5: 15:47:59 executing program 3: 15:47:59 executing program 1: 15:47:59 executing program 2: 15:47:59 executing program 0: 15:47:59 executing program 3: 15:47:59 executing program 4: 15:47:59 executing program 5: 15:47:59 executing program 1: 15:47:59 executing program 2: 15:48:00 executing program 3: 15:48:00 executing program 0: 15:48:00 executing program 1: 15:48:00 executing program 4: 15:48:00 executing program 3: 15:48:00 executing program 5: 15:48:00 executing program 2: 15:48:00 executing program 0: 15:48:00 executing program 1: 15:48:00 executing program 3: 15:48:00 executing program 2: 15:48:00 executing program 4: 15:48:00 executing program 5: 15:48:00 executing program 0: 15:48:00 executing program 3: 15:48:00 executing program 1: 15:48:00 executing program 5: 15:48:00 executing program 4: 15:48:00 executing program 2: 15:48:01 executing program 0: 15:48:01 executing program 3: 15:48:01 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) io_setup(0x9, &(0x7f0000001100)=0x0) io_submit(r1, 0x1, &(0x7f0000003900)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) write$FUSE_ENTRY(r0, &(0x7f0000001040)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}}, 0x90) 15:48:01 executing program 2: socketpair$unix(0x1, 0x400000000002, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0x25b, 0x0) getpeername(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffff7f) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) getresuid(0x0, 0x0, 0x0) dup2(r1, r2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x100}, 0x8) 15:48:01 executing program 1: mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='posix_acl_accesswlan0keyring/nodev#*md5sumcgroup\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x2000203a, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) pread64(r0, 0x0, 0x4a8, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 15:48:01 executing program 0: socketpair$unix(0x1, 0x4000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005540)={@remote}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:48:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000180)={0x401, 0xffff, 0xffffffffffffffe5}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f00000002c0)={0x20000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@flags={0x3, 0x2000}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x3, 0x5, 0x9, 0x0, 0x0, 0x2, 0x1, 0x4, 0x0, 0x91c, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29d, 0x0, 0x0, 0x400, 0x9, 0x8, 0x80, 0x10000, 0x200, 0x7, 0x3, 0x0, 0x80000001, 0x5, 0x0, 0x6, 0x0, @perf_config_ext={0x5}, 0x20000, 0x1dff, 0xa00000000, 0x7, 0x919, 0x1f, 0x80000001}, r4, 0x0, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:48:01 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x7ffffffff000) 15:48:01 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x400002100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) 15:48:01 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_emit_ethernet(0x7ffff, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x2}}}}}, &(0x7f0000000100)) 15:48:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0xa6c1a2b9683c7c6a, &(0x7f00000001c0)=[@dstype0={0x6, 0x7}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:48:01 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0xdd86) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 15:48:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x6, 0xf08a}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(r0) [ 356.751316] ================================================================== [ 356.758763] BUG: KMSAN: uninit-value in check_6rd+0x65c/0x720 [ 356.764717] CPU: 1 PID: 9747 Comm: syz-executor3 Not tainted 4.20.0-rc7+ #12 [ 356.771907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.781277] Call Trace: [ 356.784403] dump_stack+0x173/0x1d0 [ 356.788060] kmsan_report+0x12e/0x2a0 [ 356.791924] __msan_warning+0x81/0xf0 [ 356.795786] check_6rd+0x65c/0x720 [ 356.799371] sit_tunnel_xmit+0xb58/0x34d0 [ 356.803575] ? dev_hard_start_xmit+0xb3/0xc40 [ 356.808090] ? ipip6_tunnel_uninit+0x7e0/0x7e0 [ 356.812691] dev_hard_start_xmit+0x607/0xc40 [ 356.817184] __dev_queue_xmit+0x2e42/0x3bc0 [ 356.821585] dev_queue_xmit+0x4b/0x60 [ 356.825404] ? __netdev_pick_tx+0x1270/0x1270 [ 356.829917] packet_sendmsg+0x8306/0x8f30 [ 356.834084] ? kmsan_internal_chain_origin+0x134/0x230 [ 356.839372] ? __msan_memcpy+0x61/0x70 [ 356.843307] ? __vfs_write+0x888/0xb70 [ 356.847280] ? __x64_sys_write+0x4a/0x70 [ 356.851354] ? do_syscall_64+0xbc/0xf0 [ 356.855270] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 356.860666] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 356.866070] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 356.871528] ? compat_packet_setsockopt+0x360/0x360 [ 356.876569] sock_write_iter+0x3f4/0x4d0 [ 356.880681] ? sock_read_iter+0x4e0/0x4e0 [ 356.884847] __vfs_write+0x888/0xb70 [ 356.888612] vfs_write+0x46a/0x8c0 [ 356.892196] __se_sys_write+0x17a/0x370 [ 356.896277] __x64_sys_write+0x4a/0x70 [ 356.900219] do_syscall_64+0xbc/0xf0 [ 356.903978] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 356.909181] RIP: 0033:0x457669 [ 356.912388] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.931314] RSP: 002b:00007fbc9ff6bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.939032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 356.946314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 356.953595] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 356.960870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbc9ff6c6d4 [ 356.968149] R13: 00000000004c6096 R14: 00000000004dac50 R15: 00000000ffffffff [ 356.975468] [ 356.977100] Uninit was created at: [ 356.980670] kmsan_internal_poison_shadow+0x92/0x150 [ 356.985810] kmsan_kmalloc+0xac/0x130 [ 356.989618] kmsan_slab_alloc+0xe/0x10 [ 356.993528] __kmalloc_node_track_caller+0xe38/0x1060 [ 356.998741] __alloc_skb+0x309/0xa20 [ 357.002490] alloc_skb_with_frags+0x1c7/0xaf0 [ 357.006993] sock_alloc_send_pskb+0xafd/0x10e0 [ 357.011624] packet_sendmsg+0x661a/0x8f30 [ 357.015828] sock_write_iter+0x3f4/0x4d0 [ 357.019897] __vfs_write+0x888/0xb70 [ 357.023620] vfs_write+0x46a/0x8c0 [ 357.027166] __se_sys_write+0x17a/0x370 [ 357.031147] __x64_sys_write+0x4a/0x70 [ 357.035046] do_syscall_64+0xbc/0xf0 [ 357.038770] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 357.043961] ================================================================== [ 357.051324] Disabling lock debugging due to kernel taint [ 357.056778] Kernel panic - not syncing: panic_on_warn set ... [ 357.062683] CPU: 1 PID: 9747 Comm: syz-executor3 Tainted: G B 4.20.0-rc7+ #12 [ 357.071280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.080648] Call Trace: [ 357.083265] dump_stack+0x173/0x1d0 [ 357.086932] panic+0x3ce/0x961 [ 357.090187] kmsan_report+0x293/0x2a0 [ 357.094021] __msan_warning+0x81/0xf0 [ 357.097873] check_6rd+0x65c/0x720 [ 357.101462] sit_tunnel_xmit+0xb58/0x34d0 [ 357.105673] ? dev_hard_start_xmit+0xb3/0xc40 [ 357.110201] ? ipip6_tunnel_uninit+0x7e0/0x7e0 [ 357.114824] dev_hard_start_xmit+0x607/0xc40 [ 357.119327] __dev_queue_xmit+0x2e42/0x3bc0 [ 357.123710] dev_queue_xmit+0x4b/0x60 [ 357.127539] ? __netdev_pick_tx+0x1270/0x1270 [ 357.132053] packet_sendmsg+0x8306/0x8f30 [ 357.136237] ? kmsan_internal_chain_origin+0x134/0x230 [ 357.141523] ? __msan_memcpy+0x61/0x70 [ 357.145421] ? __vfs_write+0x888/0xb70 [ 357.149330] ? __x64_sys_write+0x4a/0x70 [ 357.153400] ? do_syscall_64+0xbc/0xf0 [ 357.157297] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 357.162726] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 357.168117] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 357.173580] ? compat_packet_setsockopt+0x360/0x360 [ 357.178614] sock_write_iter+0x3f4/0x4d0 [ 357.182715] ? sock_read_iter+0x4e0/0x4e0 [ 357.186871] __vfs_write+0x888/0xb70 [ 357.190626] vfs_write+0x46a/0x8c0 [ 357.194231] __se_sys_write+0x17a/0x370 [ 357.198235] __x64_sys_write+0x4a/0x70 [ 357.202149] do_syscall_64+0xbc/0xf0 [ 357.205920] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 357.211145] RIP: 0033:0x457669 [ 357.214347] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.233261] RSP: 002b:00007fbc9ff6bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.240976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 357.248251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 357.255558] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 357.262835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbc9ff6c6d4 [ 357.270112] R13: 00000000004c6096 R14: 00000000004dac50 R15: 00000000ffffffff [ 357.278364] Kernel Offset: disabled [ 357.281994] Rebooting in 86400 seconds..