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"}, 0x1010) 11:01:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x9effffff00000000}}, 0x20}}, 0x0) 11:01:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x700}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x8, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xd000000}}, 0x20}}, 0x0) 11:01:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x1) 11:01:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x6, @rand_addr=0x4, 0x0, 0x1, 'rr\x00'}, 0x2c) 11:01:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xc}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0xffffffff00000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x6, @broadcast, 0x0, 0x1, 'rr\x00'}, 0x2c) 11:01:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xf0ffff}}, 0x20}}, 0x0) 11:01:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r2, &(0x7f00000000c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 'procppp1Twlan1em0', 0x20, 0x7f, 0x20, [0x3a, 0x34, 0x65]}, 0x41, 0xfffffffffffffffd) 11:01:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x4405000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 608.570813] device bridge_slave_1 left promiscuous mode [ 608.576367] bridge0: port 2(bridge_slave_1) entered disabled state 11:01:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x4000000000000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 608.648989] device bridge_slave_0 left promiscuous mode [ 608.656343] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.722578] IPVS: ftp: loaded support on port[0] = 21 11:01:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x3}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x105000, 0x0) 11:01:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="07007c8906d8de5630e3efc09e8840745dbbdbffcbf4e63e67f7b1409c8a19a482280b4cb52133cbf6aac8ab0abf579f753dbc25d40983e639f14c31b52b9b71b1cee01027e801b58d9b5ddc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB="1ae08c229ce595272d5488de49c11d0118cbeaed6ef21f559846f6c6fb5dda096115d754b1bb090047a2545674dc1d00e880b05dde85a6df3dabec3c"], &(0x7f0000000600)=0x1) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) getdents64(0xffffffffffffffff, &(0x7f0000000700)=""/242, 0xf2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc\x00', 0x80200, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)="2e2f8167726f75702f737b7a3100", 0x1ff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc) syz_open_dev$mice(&(0x7f0000000900)='/dev/input/mice\x00', 0x0, 0x228400) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000480), 0x8) pread64(r2, &(0x7f00000001c0)=""/205, 0xcd, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100)={0x7f, 0xad, 0x9, 0x3}, 0x8) fstat(r3, &(0x7f0000000580)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f00000004c0)=0xc) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000980)=ANY=[]) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2001001, &(0x7f0000001900)=ANY=[]) mkdir(&(0x7f00000006c0)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000001c0)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000240)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) 11:01:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 611.929213] team0 (unregistering): Port device team_slave_1 removed [ 611.941523] team0 (unregistering): Port device team_slave_0 removed [ 611.952337] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 611.992194] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 612.054871] bond0 (unregistering): Released all slaves 11:01:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xf000000}}, 0x20}}, 0x0) 11:01:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="07007c8906d8de5630e3efc09e8840745dbbdbffcbf4e63e67f7b1409c8a19a482280b4cb52133cbf6aac8ab0abf579f753dbc25d40983e639f14c31b52b9b71b1cee01027e801b58d9b5ddc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB="1ae08c229ce595272d5488de49c11d0118cbeaed6ef21f559846f6c6fb5dda096115d754b1bb090047a2545674dc1d00e880b05dde85a6df3dabec3c"], &(0x7f0000000600)=0x1) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) getdents64(0xffffffffffffffff, &(0x7f0000000700)=""/242, 0xf2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc\x00', 0x80200, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)="2e2f8167726f75702f737b7a3100", 0x1ff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc) syz_open_dev$mice(&(0x7f0000000900)='/dev/input/mice\x00', 0x0, 0x228400) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000480), 0x8) pread64(r2, &(0x7f00000001c0)=""/205, 0xcd, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100)={0x7f, 0xad, 0x9, 0x3}, 0x8) fstat(r3, &(0x7f0000000580)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f00000004c0)=0xc) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000980)=ANY=[]) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2001001, &(0x7f0000001900)=ANY=[]) mkdir(&(0x7f00000006c0)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000001c0)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000240)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) [ 613.366672] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.373326] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.381433] device bridge_slave_0 entered promiscuous mode [ 613.436645] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.443645] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.451738] device bridge_slave_1 entered promiscuous mode [ 613.503157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 613.553636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 613.711310] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 613.765908] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 614.016714] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 614.024178] team0: Port device team_slave_0 added [ 614.056430] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 614.063713] team0: Port device team_slave_1 added [ 614.097376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 614.150919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 614.157942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 614.168331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 614.220554] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 614.227938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 614.236018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 614.289281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 614.296506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 614.313540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 614.728108] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.734478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.741200] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.747647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.755324] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 615.137049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 615.737939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.834948] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 615.929072] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 615.935208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 615.947656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 616.035681] 8021q: adding VLAN 0 to HW filter on device team0 11:01:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0xf5ffffff00000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x10000) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xf00}}, 0x20}}, 0x0) 11:01:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x200000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="07007c8906d8de5630e3efc09e8840745dbbdbffcbf4e63e67f7b1409c8a19a482280b4cb52133cbf6aac8ab0abf579f753dbc25d40983e639f14c31b52b9b71b1cee01027e801b58d9b5ddc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)=ANY=[@ANYBLOB="1ae08c229ce595272d5488de49c11d0118cbeaed6ef21f559846f6c6fb5dda096115d754b1bb090047a2545674dc1d00e880b05dde85a6df3dabec3c"], &(0x7f0000000600)=0x1) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) getdents64(0xffffffffffffffff, &(0x7f0000000700)=""/242, 0xf2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc\x00', 0x80200, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)="2e2f8167726f75702f737b7a3100", 0x1ff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc) syz_open_dev$mice(&(0x7f0000000900)='/dev/input/mice\x00', 0x0, 0x228400) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000480), 0x8) pread64(r2, &(0x7f00000001c0)=""/205, 0xcd, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100)={0x7f, 0xad, 0x9, 0x3}, 0x8) fstat(r3, &(0x7f0000000580)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f00000004c0)=0xc) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000980)=ANY=[]) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2001001, &(0x7f0000001900)=ANY=[]) mkdir(&(0x7f00000006c0)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000001c0)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000240)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) 11:01:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xff00}}, 0x20}}, 0x0) 11:01:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xec0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0xc3ffffff00000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x1, r1) r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000003) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f62344885d25d766070") unshare(0x2000400) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) fstat(r1, &(0x7f0000000700)) 11:01:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x76cd000000000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xc00e}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x900000000000000}}, 0x20}}, 0x0) 11:01:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="ec03065cf32e282072731737537f044c", 0x10) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x3f000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) r3 = shmget$private(0x0, 0x1000, 0xa00, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000840)=""/4096) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890b, &(0x7f0000000000)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='em1keyring\x00') ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'bond_slave_1\x00', 0x600}) gettid() sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000540)="3d7ab625402c61bf4809c2ead184de1a29b19a387b2cc4cf8d22db8bfae184cf253646db9985ce38dc5c2d4b861f050b11e73fa21044fa64b0abdb5d77d024810b0469a72e510cd4dfce282b00c41dcce40bdb", 0x53}], 0x1, &(0x7f0000000840), 0x0, 0x800}, 0x20000050) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x45a, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4}, 0x8080) fcntl$setflags(r0, 0x2, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) [ 617.224382] device lo entered promiscuous mode 11:01:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x800000000000000}}, 0x20}}, 0x0) 11:01:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x8000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) r3 = shmget$private(0x0, 0x1000, 0xa00, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000840)=""/4096) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890b, &(0x7f0000000000)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='em1keyring\x00') ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'bond_slave_1\x00', 0x600}) gettid() sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000540)="3d7ab625402c61bf4809c2ead184de1a29b19a387b2cc4cf8d22db8bfae184cf253646db9985ce38dc5c2d4b861f050b11e73fa21044fa64b0abdb5d77d024810b0469a72e510cd4dfce282b00c41dcce40bdb", 0x53}], 0x1, &(0x7f0000000840), 0x0, 0x800}, 0x20000050) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x45a, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4}, 0x8080) fcntl$setflags(r0, 0x2, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) 11:01:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xd}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x1000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xf000}}, 0x20}}, 0x0) 11:01:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) r3 = shmget$private(0x0, 0x1000, 0xa00, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000840)=""/4096) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890b, &(0x7f0000000000)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='em1keyring\x00') ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'bond_slave_1\x00', 0x600}) gettid() sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000540)="3d7ab625402c61bf4809c2ead184de1a29b19a387b2cc4cf8d22db8bfae184cf253646db9985ce38dc5c2d4b861f050b11e73fa21044fa64b0abdb5d77d024810b0469a72e510cd4dfce282b00c41dcce40bdb", 0x53}], 0x1, &(0x7f0000000840), 0x0, 0x800}, 0x20000050) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x45a, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4}, 0x8080) fcntl$setflags(r0, 0x2, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) 11:01:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x3f00, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000000), 0x4) 11:01:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x4000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffffffa6}}, 0x20}}, 0x0) 11:01:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xc00e000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x76cd, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fdatasync(r0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) r3 = shmget$private(0x0, 0x1000, 0xa00, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x4000) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000840)=""/4096) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890b, &(0x7f0000000000)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='em1keyring\x00') ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'bond_slave_1\x00', 0x600}) gettid() sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000540)="3d7ab625402c61bf4809c2ead184de1a29b19a387b2cc4cf8d22db8bfae184cf253646db9985ce38dc5c2d4b861f050b11e73fa21044fa64b0abdb5d77d024810b0469a72e510cd4dfce282b00c41dcce40bdb", 0x53}], 0x1, &(0x7f0000000840), 0x0, 0x800}, 0x20000050) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x45a, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4}, 0x8080) fcntl$setflags(r0, 0x2, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000480)='pids.current\x00', 0x0, 0x0) 11:01:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffffff9e}}, 0x20}}, 0x0) 11:01:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0xfffffffe, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7f, 0x60080) getsockname$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10) unshare(0x48000200) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000100)={0xe9, "e0ecf98c1962f77c1007316d853475538e36d9a673d741894b746bdd33254c24f0b2ddee51260ba3296c9a5ad52b14325a8cb0421214344c7e500f66182da20a0e86968f448a0ae345b666a90585f72d90c612cc41e1df37b73151e177a5ff935100a86352545a04c6dca8acbf5c9864ce20db85c28de74ed5097eea50862ff162d5ca14a2b6a608f8bbf5c213c6f3b6e71839676bfb50bfe3dd25373aa2fb812682595cf2c20e1da5697bc25a051e781935b9fea20bea1762f0d7eeb830db076098a2aa33f7b1038dbb047c213fbc24987d35f8ed93658dfca10256515466a4f49222e8ee0a2b2834"}) 11:01:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xa6ffffff00000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa}}, 0x20}}, 0x0) 11:01:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x400000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/current\x00') ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[{0x8, 0x9}, {0xe, 0x6}, {0xb, 0x6e761107}], 0x3) ioctl(r0, 0x8912, &(0x7f0000001e80)="153f6234488dd25d766070") r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x802) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f00000000c0)=0x400000000000004b) r4 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0xffffffff80000000, 0x8080) ioctl$VT_WAITACTIVE(r4, 0x5607) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x440002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000080)=[0x1], 0x1, 0x0, 0x6, 0x1f, 0xff, 0x889, {0x1, 0x7, 0xd9, 0x4, 0x0, 0x81, 0x6, 0xea9a, 0x5, 0x0, 0x10001, 0x4bbd, 0x2, 0x7, "2246785678738dc31424ac6dd7b278becb0ab777d62e5961c0bdb818a7df37f0"}}) write$binfmt_elf64(r3, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 11:01:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 623.066392] IPVS: ftp: loaded support on port[0] = 21 11:01:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="850000004c9d04000000000012c95f8d51c732ddf344ce000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 11:01:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xc00e000000000000}}, 0x20}}, 0x0) 11:01:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:31 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x8000) setxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)=@md5={0x1, "8027dc4c4298f6c9e10aa3caf7515d28"}, 0x11, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000640)={r1, 0x0, 0x30}, 0xc) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x9}, 0x2, 0x2, 0x0, 0x1}}, 0xfffffffffffffca7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x40, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB]) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@loopback}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000004c0)=[@in6={0xa, 0x4e22, 0x80000000, @remote, 0x6}, @in6={0xa, 0x4e20, 0x95, @dev={0xfe, 0x80, [], 0x21}, 0xfffffffffffffffd}], 0x38) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x248, 0x0, 0x358, 0x358, 0x248, 0x468, 0x468, 0x468, 0x468, 0x468, 0x5, &(0x7f00000005c0), {[{{@ipv6={@loopback, @mcast2, [0xffffffff, 0xff], [0x0, 0xffffffff, 0x0, 0xff], 'veth0_to_team\x00', 'veth0\x00', {0xff}, {}, 0x4, 0x9, 0x5, 0x4}, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@mcast2, @ipv6, @port=0x4e23, @gre_key=0xc545}}}, {{@ipv6={@mcast1, @mcast2, [0xffffffff, 0xff0000ff, 0x0, 0xff], [0xffffffff, 0xffffffff, 0xff], 'team_slave_1\x00', 'bond_slave_1\x00', {}, {0x9bb166a7b9231b28}, 0x1d, 0x3, 0x5, 0x20}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x3, 0x3, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1b, @ipv4=@broadcast, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}, @gre_key=0xb817, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x17, @ipv4=@remote, @ipv4=@loopback, @port=0x4e24, @gre_key=0x3}}}, {{@uncond, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv4=@loopback, @gre_key=0x8, @gre_key=0x7fff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@mcast1, @mcast1, @remote, 0x7, 0x5, 0x2, 0x500, 0x4, 0x820200, r5}) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/autofs\x00', 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)="002f0000638915e0df56ac591a298569506c490000") ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000000)) getdents(r6, &(0x7f00000000c0)=""/147, 0x93) 11:01:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x500000000000000}}, 0x20}}, 0x0) 11:01:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0xfeffffff00000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 623.441387] IPVS: ftp: loaded support on port[0] = 21 [ 623.590859] IPVS: ftp: loaded support on port[0] = 21 [ 623.927767] device bridge_slave_1 left promiscuous mode [ 623.933373] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.998428] device bridge_slave_0 left promiscuous mode [ 624.003965] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.188880] team0 (unregistering): Port device team_slave_1 removed [ 624.217782] team0 (unregistering): Port device team_slave_0 removed [ 624.232129] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 624.354123] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 624.486239] bond0 (unregistering): Released all slaves 11:01:33 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8913, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x20000200) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) read$FUSE(r0, &(0x7f00000002c0), 0x1000) 11:01:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xff000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r1, 0x15, &(0x7f0000000280)) dup3(0xffffffffffffffff, r0, 0x0) 11:01:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xc00000000000000}}, 0x20}}, 0x0) 11:01:33 executing program 3: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000840)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)) r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x0, 0x0, 0x3, 'queue1\x00'}) sendto$unix(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)=@file={0x1, '.\x00'}, 0x6e) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000001280)) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000002ac0)={0xa, 0x10000000000000, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0xe0ff) semop(0x0, &(0x7f00000001c0)=[{0x3, 0xffff}, {0x4, 0x4}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/fuse\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x260400, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000200)=0x5) getdents(0xffffffffffffffff, &(0x7f0000001a80)=""/4096, 0x1000) io_submit(0x0, 0x200000000000008f, &(0x7f0000000600)) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000004c0)={0x88, 0xfff, 0x8001, 0x7, 0x0, 0x68f6}) [ 625.291667] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.334717] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.345843] device bridge_slave_0 entered promiscuous mode 11:01:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffffff7f00000000}}, 0x20}}, 0x0) 11:01:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xb00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x1, 0x300) unshare(0x800) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffffffff7fffffff, 0x42000) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'gre0\x00', {0x2, 0x4e24, @loopback}}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x2) 11:01:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x9effffff00000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x700}}, 0x20}}, 0x0) 11:01:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) [ 625.629780] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.658407] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.691543] device bridge_slave_1 entered promiscuous mode [ 625.867432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 626.008720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 626.358215] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 626.472115] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 626.594274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 626.601576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 626.751650] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 626.759279] team0: Port device team_slave_0 added [ 626.795218] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 626.802439] team0: Port device team_slave_1 added [ 626.832342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 626.882348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 626.932726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 626.939995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 626.957299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 626.979681] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 626.986817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 626.997764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 627.332735] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.339138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.345741] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.352152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.359788] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 627.557164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 628.905513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.077362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 629.187263] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 629.193411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 629.217721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 629.349661] 8021q: adding VLAN 0 to HW filter on device team0 11:01:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x3f00000000000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x9e06}}, 0x20}}, 0x0) 11:01:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x400) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) bind$packet(r1, &(0x7f0000000040)={0x11, 0x15, r2, 0x1, 0xffffffffffff8001, 0x6, @random="2df1f80a8bfd"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000080)=0x4000000000003, 0x0) 11:01:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:38 executing program 3: r0 = socket$kcm(0xa, 0x162000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000180), 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000240)=0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) utime(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x8, 0xfff}) 11:01:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x7) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000000)='team_slave_1\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x67, @broadcast, 0x0, 0x0, 'fo\x00'}, 0x2c) 11:01:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x600}}, 0x20}}, 0x0) 11:01:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0xc3ffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:38 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r1, 0x15, &(0x7f0000000280)) dup3(r0, 0xffffffffffffffff, 0x0) 11:01:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xff00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x704, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x12}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdc}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x800) 11:01:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x600000000000000}}, 0x20}}, 0x0) 11:01:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x76cd0000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x300}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:38 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r1, 0x15, &(0x7f0000000280)) dup3(r0, 0xffffffffffffffff, 0x0) 11:01:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x1ff) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(lrw-camellia-asm,md4-generic)\x00'}, 0x5a3369d70ee0b10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x8, 0x3, 0x81, 0x3, 0x80000001, 0xffff, 0x7fff, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x4, 0x10000, 0x7c2ab28e, 0xfffffffffffffffb, 0xff}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r2, 0xc7, "1b37d5d3f5b5e414a244364765d091717146735b07db404d558f7e2ef6ef3948106804e44be62f5d71936322ecbaf0ad36cf2f0ac9b52dfc4acd0e63edeceba6b0d8a182f8acedf6afff81d7c18491eda0a6cdc5c6f12218b10e8e17077e21c32788f8c3e015e21dbf3c7e5ec34304b5845f65348edc6f4ce04d71a93afa64650cafe89bd666a3ed7e2d96513ca3d1c33abff439cc834900f575f1311c7fad4c83bb58bd32c7cd1f0ee734f6e0c3a8c33ff560f273b244bb28d3cd0dda4c70f1d4c279d948eb29"}, &(0x7f0000000240)=0xcf) r3 = accept$alg(r0, 0x0, 0x0) userfaultfd(0x800) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) sendmmsg(r3, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8b, 0x20400) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xf) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x3, 0x7fffffff, 0xe586, 0xffff}) 11:01:38 executing program 0: r0 = socket$inet6(0xa, 0x1000100000003, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) 11:01:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x700000000000000}}, 0x20}}, 0x0) 11:01:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x400000000000000}}, 0x20}}, 0x0) 11:01:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:38 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r1, 0x15, &(0x7f0000000280)) dup3(r0, 0xffffffffffffffff, 0x0) 11:01:38 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) getegid() ioctl$EVIOCSKEYCODE(r1, 0x400448c9, &(0x7f0000000040)) creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 11:01:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3) fgetxattr(r1, &(0x7f0000000680)=@random={'security.', '\x00'}, &(0x7f00000006c0)=""/228, 0xe4) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000600)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x32, @mcast1, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000080)="b79b5cddd40e7b387467b3a9a7f920168e4466f6ec396c22e06688c54a2f2117bf464ee50715e8f2311f30adda30a0834c4db0c07ef05944b30d177e23acdb498057d00df5022940b9d34b8190e1d0f9442d6e733364bd7136cbfea69dd0d5349a32069997cac2f38c4e1b70182df28579e3080522d92124a7f2c7bdb533012e63a958523d1150f1d00c5eed5d95839ee3859b86e26cdfa4ce1fcca19837e9c754a8899f2354067b553bbe5364dc971b23c41f0f00d68700eed1162d53a490b174af60d36f1b07cca24c58fa266920aa09f346591780ca05c1fd339f903efcdf41db8c1a6aec7ea6ff513d", 0xeb}, {&(0x7f0000000180)="354204ba8045b32e79a4900153c49952a52d6d770fdedff5b4b88846639e3e84105c71940bf63aedc4901399b43fb9bb18268563f08b966e11e2250b4c41fc686f9946e2099de6622f68fe68fa23dfac1e0c38deaf8655894fd0e7fd0fe85b62a51a0dfa5cbeada8b3030d13a53b23bc1f8d3048b6d21541a26d53f41e73d1f27c5590c9530247218fe6d47a446eea653f9c39b73c7505099a6c2c08700a1d3d5a52e1f78525c27f2718513a3950e6682080324f5867a1a96fb3f2702fe27251b0dc11c8a6d62c1ff3c03137584a43920326bc84f2650d3c8f6f9d8253a2e11c82103423dc3580865f2cca99a213d2", 0xef}, {&(0x7f00000002c0)="ba982208d3f007082ebb6af72fe3c81cab2e68c40fedaa6b78e4038ceb3821821bb882929befae4f0d3a2f8f1130f058fc73adfdba7726", 0x37}, {&(0x7f0000000300)="7f25abc89a49600da3d71e47498db9220b7f1bd936505b9643aa37cd802de2331a77b0992eb4986c325eb3f9898acbead78c486360831eed02645d92f8009ce54cd895e14d5cb56ad730cc28e0276bc1bc4c3544d3add2963ea20b826383d4dcba69a2f30a3c9cdeaf5a183013c10604271e9e8be88ce9ea78ba665f4d4e79448793b7f887dba9b1057b27ebc0e0ec9dbcc932b66165ada1c28ccb5e1aa67ff016ccb348864a0e17613da0ee1380", 0xae}, {&(0x7f00000003c0)="717835177c09c589153f2e603661654009d5e34be6ba8c751946d0773038288600a8560ac0bd561f0474b395d528fb5d032e18ab1cc434cd8c191568ffa636376768835444473ac7836823f09c2124678234a2e164085c461d19c244c831b4a8a68ecc72a43ca666bb57e84d0b8bedc19bbe18b9782be7b0ad96b5747f7f202ca567e6db336f19b2e58c2c9e198b1eaf71dfee90cdfb2dcbe25a124b8147ff838b5da63dbff0c1", 0xa7}, {&(0x7f0000000480)="91b8f4c1200075084d6b5811c222d5111d65898f211db7d1128c501ea67c", 0x1e}, {&(0x7f00000004c0)="98122a012807cbbd97216b9970cd44b52f354c892ce3f55c1294d50670b223daeecef491d8e086514491ae6473d8cd6dcc6d9b9e63e8bf2f9e1613611aa95f30d5e7fa53ba92d6", 0x47}], 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000cd69a37ff817afa6ba90000000000840000000000"], 0x18, 0x80}, 0x800) 11:01:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x100000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:39 executing program 3: capset(&(0x7f0000000040)={0x39980732}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000180)=0x14) mq_open(&(0x7f0000000000)='\'vboxnet0+\'}wlan0', 0x843, 0x80, &(0x7f0000000100)={0x0, 0x7f, 0x4, 0x1ff, 0x5, 0x9, 0x8, 0x81}) 11:01:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa00000000000000}}, 0x20}}, 0x0) 11:01:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x800000000000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:39 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x32, &(0x7f0000000000)=0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) connect$can_bcm(r0, &(0x7f0000003b80), 0x10) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x412000) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000080)=""/21) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0x50, &(0x7f0000000280)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r4, 0x4) lseek(r5, 0x26, 0x3) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="030000008cfc6cfde19ab3a251fd2cfd09684d9c7afae3b519d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e4600000000407f800000", 0x38}]) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) 11:01:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x300000000000000}}, 0x20}}, 0x0) 11:01:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000000)=0x1, 0x4) 11:01:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x500000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 631.248090] device bridge_slave_1 left promiscuous mode [ 631.253889] bridge0: port 2(bridge_slave_1) entered disabled state 11:01:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa6ffffff00000000}}, 0x20}}, 0x0) 11:01:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xc00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 631.328766] device bridge_slave_0 left promiscuous mode [ 631.337944] bridge0: port 1(bridge_slave_0) entered disabled state 11:01:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 631.457172] team0 (unregistering): Port device team_slave_1 removed [ 631.486067] team0 (unregistering): Port device team_slave_0 removed [ 631.515864] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 631.561724] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 631.645444] bond0 (unregistering): Released all slaves [ 632.897973] IPVS: ftp: loaded support on port[0] = 21 [ 633.390421] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.396839] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.404247] device bridge_slave_0 entered promiscuous mode [ 633.435105] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.441593] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.449757] device bridge_slave_1 entered promiscuous mode [ 633.481797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 633.512530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 633.598648] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 633.631023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 633.765195] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 633.772521] team0: Port device team_slave_0 added [ 633.802207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 633.809540] team0: Port device team_slave_1 added [ 633.839372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 633.871761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 633.902783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.933710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 634.222834] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.229217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.235804] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.242215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.258920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.355391] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 635.449695] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 635.455853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 635.463466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 635.564033] 8021q: adding VLAN 0 to HW filter on device team0 11:01:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x100000000000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xd000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4000000}}, 0x20}}, 0x0) 11:01:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f0000000540)="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") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/169) r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:44 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000002c0)={0x3, r1}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f0000000000), &(0x7f00000001c0)=0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x50, 0x0, &(0x7f00000002c0), 0x3f8, 0x0, &(0x7f0000000340)="c43df9ee2614c80f11b5ec7a8cc6bed51b6947278627e488078ad9c3f3d17c54f8b29f8c6c9f8efdc41665e26a3b634e90a6971f519237393dd64472470690ccd466c3801743bc6437dbca2a575a08a2b3204bdff56e7f0dc0e8f62eaac714856d7d9d7a8247b0e87cc69ba9de060fda80edbfb67009e88d9a32231a06d32c6240a131b05277a402"}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000300)=@req3={0x4, 0x8, 0x5, 0x2, 0x13, 0xfff, 0x3}, 0x1c) r4 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x6, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) fsetxattr(r4, &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=')nodeveth1!\x00', 0xc, 0x2) 11:01:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xb00}}, 0x20}}, 0x0) 11:01:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0xfeffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x600}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x20080002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_names\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1b9, 0x0, &(0x7f00000000c0), 0x100002dd) 11:01:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xfffffff0}}, 0x20}}, 0x0) 11:01:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xf4, &(0x7f0000000040)=[@in={0x2, 0x4e22}, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x12}, 0x7}, @in6={0xa, 0x4e21, 0x5072, @loopback, 0x7}, @in6={0xa, 0x4e21, 0xc4, @remote, 0xfd0}, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0xd22}, @in6={0xa, 0x4e22, 0x9, @loopback, 0x5}, @in6={0xa, 0x4e24, 0x84, @mcast1, 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, @in6={0xa, 0x4e22, 0xffffffffffffffff, @loopback, 0x987b}, @in={0x2, 0x4e23}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x40000000, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xf0ffffff00000000}}, 0x20}}, 0x0) 11:01:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:44 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="5c4f1031db8e62ae8b9d10ca2cd66ba70093f6fb30464b59370b483ba741ae86ec217302ee207af0d5cfc2170c63dbbf1b2fa47a36dfc1bb000000000000badb3338b8d87db18942115648cd6deebea02ed096d0133d5c862a278c49af912f9adbd3f535ce5fc53f6b00db3a6e0651ee8a0e4c2a037eef8fc7602dcffd57c63ae8e09dddfa7db032b0d86e1878a6b5dcff9c77b04febc8ad"], 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000b40)='cbc(blowfish)\x00') socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ac0)) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x3, 0x8000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000880)={0x0, 0xffffffffffffffc1, 0x0, 0x0, 0xfffffffffffffffc, 0xfff, 0x0, 0x9, {0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x8, 0x8}}, &(0x7f0000000240)=0xb0) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, &(0x7f0000000040)=0xf000000, 0x10000000000443) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 11:01:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xa}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x4000000000000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xb00000000000000}}, 0x20}}, 0x0) 11:01:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="11d30211488d18bd922076") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) syncfs(r1) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x121080) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) lseek(r0, 0x0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f000093eee8)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xe5, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x203}}], 0x20}], 0x914, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000380)={0x1f, 0x0, 'client1\x00', 0xffffffff80000002, "25baa329864938dd", "c7d8d5a806d788d13ec541112a48be6b3aab277e38e0689e86584e5e9c76f255", 0xffffffffffff41d0, 0x4f}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x48) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0x6000, 0xf000, 0x0, 0x10000], 0x6, 0x21, 0x1b}) 11:01:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x3f000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xffffff9e}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x200000000000000}}, 0x20}}, 0x0) 11:01:47 executing program 3: lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) getsockopt(r0, 0x0, 0x1, &(0x7f0000001180)=""/166, &(0x7f0000000040)=0xa6) 11:01:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0xd3e, 0x4) ioctl(r0, 0x8912, &(0x7f0000000180)="01806253488dd25d766070") fcntl$setpipe(r0, 0x407, 0x424052bb) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) unshare(0x400) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), 0x4) 11:01:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x3f00, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xb00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000000bc0)=ANY=[]}, 0x0) 11:01:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40030000000000}}, 0x20}}, 0x0) 11:01:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xffffffc3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) sendmsg(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000100)="92d293269e4bc17834f0185b3d8372995f9b57d310896205d27c1d37a083f7261137299e6055cc54d39dfd2dd0a178aa705812d19671f571c2ad53a8482101acc833a4c93f5485e4038d1146bf319965e7f879df7dddc302416647b37dbcb16f627a5be98a0e14cb471174fe1521aa572f90d9e59163954ec86dac5b83420bb65a32c12870a1e5b8c24d715903db7ae7461a2daabacf0d57cf8c096fc55b6850e68967fb89c8b6d157589c993a01eb78a6d4e81245e5a7944c424009ee7c565380de860d79f5b72843f647e26a1ad9bd8c429759e06445168bb8e8c1280fbac01e1d7aa6", 0xe4}, {&(0x7f0000000200)="69a6bf182e1631e6ca26c77d50485a84f32ac9a66a2d07a6bea91057fe96dfb43190eec999686e7bf794e710cdcef88898bb500220b007fee4ee54e949d3f613c7aa4148efe43efabeca271ca9e4a3eab6255dd4083123", 0x57}, {&(0x7f0000000280)="7735ace72e2c29ed111810dff5ccfecf1cb4c4c9332d11d87289609fe26c3aaab0de5f48ea3a205ca2038ae38032fe8365a8e406ad2e3cb4041c3fd8f0d6c4889d", 0x41}, {&(0x7f0000000300)="199e7b5d28168533d532d0a728aa79810f7123d9a1662f4809ea0a02f29053a41071739c74f1b456ccd393ac1ce742da16a091b5f8415de5108409e42c69516ab0d4c5e8c81bc417d8396454404c2449a8574645ce662998d7d1cd03da6eb4565fe80f075ebe88a9b68f364e003d28d2b400588cc68894feb0c391752157834886fa4ceedd99804be289db", 0x8b}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="a0201ac70282722b2253587de1034565dc304fe5a8dcd658e665a1008c7685300fcc41d2f02de3ba78619c224f156140e6720c0af5b1116eecbe4bfee25e39aaf005f5112c1097d56f8480592bc415fda3b882b8e4f49a130090f945d36c152b0fe061204d54acbe444f740a96fdd8a656e0750361b5d9392c0d31f99e0eaf57bd7846f2f805b8006b946f1e58c4189bb336a4ba686ebc14b2ad8826b5bbf0a1d75b2acd10aa3315873e609848c24159ce3b095ef36789f784f9900fa9362881bad7afa97a68a89c903c6bc5104803e18f70ba87b23e39fb6308e040c1ef1357789a0116462c4a7923fe6d9c37d2e96162192a7018a9844014ccebc4c8c4d99a5cb8297d0e20cbd49f4cb1cd78718b12e0d30bf56cb179a76ab90f280537250b2d13cde4d42b0b7d1c3628ef4e3941f3d2e7bb5cc950550235264a7d11f42234a84db42c0d02c52da1ac80cb37a030c5b5520b7e7fc659d03a660789cc17a81b85bf86f3aa357f0bf25f38aebb54c48cf1cf8fb097e7c7ff8f01f57861ec9f248b6e49c382eb5bd00efc26bad6943c2964aabf9b27995aea6765c5cc76cca943d2d9e0615acdea66249c1d74a4602606f995716a1bd31bde0583654f1de226b7ccb8610b23d21d01bc1c09c4a89b24bca43831fa03c54a7226955a32602063d1f05e77b8c5b84800640beeb32f4f3e5c15a19e007f90b2f70d09bbfe53be9c57a25a7113d80842c3c319b4242340515c317087099dbc47c891b2463077770bad23792c6e74423de2907339b5e37419003a792096f1adda951ff96be3032eb8cfe011df5ae4f1c74d1a28d1ed638bc82953fa6ecae2c51efa48553a2d00fef0d0e6cf190e00f1f27c2492e3e88d127c854bd5a52fcf808d66709360c4244184d35832a17fdd7ba23f602c24458ec22d859697783f74945a488e5afa0818103f2c2e5abbecacbf6eca6ee8bff1908cca4cfb5491c455f5e0ebf71ee2f0e1ba8b36e75bb6bfbec892602e7a8dfb4df6887d9841bbc3c1fd0c4a0eed15a8d258f3e235ea2a2affbcc5b60695b3b2f778bc16079419e02782ccfaaeed31a46f20f115b73f6eafabb3a639366da204c194176b93abb8647a62ffc6bd54285d5b4cc20c34e01901714559d805fc7756787b589a1ddd00dfadae3ea1eb70b4faa5f6cb919a3b8f67c23b26fd938d96a3b6ec901be80b81f7036931db1905ed9ab23d2625e27d787deaad99bd47f923b29f8b10d0a4f1c485bf7a995c3534bbe920b31daa9918b9795adafdaa9c9983aefe663556bb138f6bd0327dd866abaa3539b0f6d5d34bc486413ac1fcf40e2532a849d5f57f3ad83bb2058fa93075718b0839a74f0c82483bfad400d34b30cc9e45a6467c05760b4ea785c7216223f3eee8ec1a13ebe1053eae1ccd1b4635a7eb3d0f82578cf58552c35aa62d1bcc61297ea1bc8eefe8f574ad12e9f197cb62d6049626eaab29aa8a82c792acbc9bbdbfe6e74ce423f4b6dc379863bce2c718d1f97f09664465da1dc6bcb8806d5f2fd877db4c48f99596c697f5afa2add924e44ae352e032393c0ff8743233074f8ce961524432755a1e5a00462cf5f5cd2910db039957956986153a32762b708d2a9b29aa39344ad16039c8fd5d29d06ee99e5d39b35824b9aeaa26346f1da4087d86ddb63616679b6e745c977f970138990ec102da4ad04216a64b603509522e3c2630991abbc59949d92da481b43b145dfe9d85bff224b1b117bc873a7167abf4f1dfc97a9fafa7f6e9c949c5284e866881b01572b1ab642079d209655b75413dc0fc7c3cb1b247e1321132251415dabdf2b648edb8e380ac4a698efde11079bc439090cc0e4662e868521528c0274a970bb66f65e426dfb778d943e272a9f870eb2aec613e506f90dada8c73be162112275033f254dd1275bd4964f05d90de7d93053bf80a20a1e8e8c39eae69a1a9534d7e79bed7de2ebe99bc000cea491e2b845c9d10cd38af6af85b940a7c28e7e3a216824556124bb00ee8079e489a85698e9528ca4e93b32171e64c3203aa3aac33736ed11f21e99372dd8e73999ceed24b4be727bcc848bf0154e51e7c0275e1dbb1416abead8a1f0853c601b6e8f7fe7db1bb2f580bde2a0cf2ba32d70bea5af358152035b33e12c61c47222bd3f8bca232a7eb45fd6fea62b49305596a9b73e609d171bbec8b839337a1db568a8666c52c5d98fa3a2cbca71f6a614911dd1801e9d60cd18451b090ee19378ae31a387ff8d08351c52b1d6695a75e29a751e4adfaac44ee33d6c1543481ba8e8b774a90c80dc2e13cd28723cf32558828f2b582292c26a433ca2b6baf554a6b045f693935ca5ee1cb950af53120bcefb262ef25046503543313cd31b5131478dc57bf5a7e62cb3eeba811470397aa4b21be6ab371e809fd88d0c319e51880395237230d86b7a14779404393b809836967c6ffad4fe43fbd264f5efa33ca108e0a2d100b86eb76b48f0ec3e705b0f0d225d2955bb765135312b989514061d8d6e0887138a98e2b88d021b36e5e9bde23636c067da40df2bb87141635c2e99d5787a6c1a480238d37543564b038b956176ae785044beb4fbdabec43792f5adcc9f406cef8ca6375bc787b3b7adab44285114c9ce9956a822eb6e6a5ef6ffa02d46ae512e029365ef7361408d3865a96cf69486a00d9b6c6a662e91df0b1cd136502e4364512f53a6c061c337d80d71572b59b6a1fa89aae84c1830de439149266e8224d1a1166a454c3c4eda8bd28d22a99ee7f108e71b7a85161655babf4f43a2a9f526fee6af2299e70b886b8948222e2a584a287448f7f7637d90093c5f4cd87934b5b4a5fb2776c9148ba8e3e473876eed0268ecb4188ff401cabefa4f98a578e602a8381b3a707332b6f9e736583108cbce5a67bad4c71649390fdd1357b1236b85165cccabb0447156a1ae066a0cd698273e5eae23bc1733eb87739703e0e696536bf7a435b9bd6f836346132e7b44ff9270deb9928fb8a4157c1fce0157eceefcf9180b0809ea0485a8375536d6fdecc1cb29bf14a82b9a8407562b02056cf0e965e71b001d21f903d5a131625421ae61f1b1ec7bfbeb7ac2297b762f98ced1a62f02beb74b0dee9a28b983d3ab8cdd047c75654d72a8518222978b75da2e47f471e5052f37bd884358e017c1d2cdf217b9b150f25f4c9dc68db03ff86814cdfb96ce5265a14812d0b2050b4a72f77b84fc14eb4e68a39c2fdcda2b7239036494e89590a2d301187204399f01b49c242d2128c7f3b77ca4c10881facb7ba349a429d48c3268db5f74c9a803a9c4111e30836a489f00a624149352b6f71cddd74085e5b9f724a855b4469680b9510a4c41c9bd3ce5515242839970c38136f2587a3b539736a4aaef99ff39f204382844c93dc833b3894b4d60b4320cddb1431834c4040d24680e76ae0f9cb7a1b08dcd45982ae2e5ced1598bf9736dc0a2b1112b18391da3f3af93186d6d93d734528d7afcd735aa15a56ce599d8e6ca81fcaadf97d254d8aec33599e7cc04820a60ce558fee4f6b5dc98c93603a1667f0263253471d581154228475c40f075b422ec6b88531b6ae7dd2266671fb3b79dc97c91cab666a277aa78e180269fcc50110f46d7bf40015c8e966c331437d31aba9b31313d05b61dac305104a40a418f5d3ed622872cc73a5e66b68b118e4ec22f8d6d2e67e91cf681531dcf887c64e5609d0402d3a0e49fb266314ae862f3632471cf479e4f7ad5894094c6acfd8f489f2c0a2d1f6285e5cede3ef671281b327a3ad6b160a63f3f7fa91ff1ecaac09a4496a46937227b94babea0e11a690a88846d1293d4c609ca33e54bcc21ca1e905a24381f9c1dbad5ca7b51f283b7efbb4134f768307ef3f842a3b051cef0fbdc87ece660956f70cf449473cf012ce09ff0b5a343caaee5c8d46dd6244919c7a999e8834152389440cdee4bdf14a2ea01a23d4f5cb43f901bc5c7c5f1ff5cee6f6a9ac458200a3ecdfdc39a0bf8defd6f359057652812337d3413ccfa35915500fadc17cc464c2babe688982d07a491c3db3cf84308ad87dcbb8c72d6dbc6367d39e8dc2f7c1bd0a6304351ea723fa0f51ba9ec8d5cdecd14b03a8774e3d87e3c256644e2d31e8bf2a0d6501ce658b44a7d3a6fa776e389139bc62ad877acc55d435e420d56e99649a2c1f3551d5b1c8d78b99e02c5d694c6191502094a26ff1b2d488aae67a21b1eee5b1fe3d959dd8eb6e1c8ee5810880484c41b4492a3fa71408dc8d4ec6bb687ad19aff3729bcc0f0d0a3827a168b6f0b7ae756d9a7b47e87bc40f26f1f90bd3de6d2c6e5a2624f2bbab9907d22d78ce39fe7522b95216302a7aed1ccf0ee1eb71942062806c050d391894427e6d952a00566217cb40fea37c1ae955491fc81016fe49cf9c9c1057631f1089a2c8626dd32ee5d81d7c59b3b047c54c5f739564fe21f3918a936300facab293951f937b1e12c4778a3e8fb1046281acce5e3a5cab1d6e9cacb7f338d8579881e78a3b3723f2dbf52628e81189535df6d33d1de87951513b67c56ef5eab08caaf672e0189dbf917bd281407c2b7cbc72a2a976462c4a60eb6c3d8a238dfc8f29fde178a55e8322cbe069a27dbac10fe750def557e2c2bb8c6dadd575ac163f297a2bab3631cd0b9b9e323511a6b17370491dfc70ae579090d6a504cb568e58e3ecfbc33fb92a3a4d3879b77e17f4cb36248d03434a8bf1f8d9a80d586522e21d9ac207248f21e6ee537b488cfa207829b1ee3ddabf73266343ace0ef59205eb3042fe79c7eec2293e86445aa3fe66063c237082f5b1e0dfa7b087efcf0ffa4798bef8e5b2cc413f2ee7802cd9abf22d29dd3ec913eb91dbd5588aec4425cc7a9be02db6f6f7718a32e01b7ee15f024dece123522c0bb1fe399b8ebc34e819765a45a1ad874eb282d019d43a7ddc6df09c6c618105ceeaa03ba72765c25170a185070be2680b3bf44c4ea7ab08ad1de634789d4197baf9f082495b31fb8296885cadaf2901d0c9a3238320a18d3ef24951311744ef8242228f7bac0aeca45b43947dee31685b160dab7d5c03213e13cbf860819b29bd80e14a715076e5fdfe22446ad91870865cf839bd41a4ee62ef6ce88514ab43d3e15588a1f8b56973348199268dff48935e1c0df8b955bb468464fac1002c60aaa5a7db90d560155d9ed33913a05422ed141c74c9138a876dd1c73876ddaffef4c26935ef3863ce52e01a14033feece8a0d0e9fe542c2adf2bb211c98713f16db946b53f3e581b0e2579c6a7317f0850a5943d60f36b9c0b13cdf6d839bf19fa677db2c0649d3e718f59752859423722206535424a247bbea7c3d8768bcd6944ee506bfbb82352072253c6ed83c0f70b56a4c6300ca73c7315203cc3e8c26be26f4801f8a728f4c95f9a1a08f32a110d899ff4aa3836eb2a86b756e2bd250f61e69ccd1841f94d2ea30b3aa1ffad7735bda3ef7d4992c12f6fc633033c04744ac3f23c307149c765255771f934877b8248dab38ac03031080aa391368fd88e4c19c6b766e357ebe90c4c324a704fbcf145f892f6718b6df5211012c0957e50cd1fc91a705aea9dcb58fab7368f916920d53b790fa780805d5e57b38f7e0ebd600e041495de44854a3ddfb640b02391dd8f4c2f1985e998016f893bfdaf60db275ea00f45deef5b9caf8d59e66694ebdd0d596b2bc33237fd9462f74814eb80f03fddbbbdf00f66d8855182da51fa3de05d927e6cb2a638422b0121d823a581b32a393e7e1cd0f6bd0a7ac497ddc036", 0x1000}, {&(0x7f00000023c0)="4a9e3c4e05bba96960e121038600b88c5a6721945c02349f08c7a0e4a5c3202a60b892f1831f0d0753c376182926d5c6c78530684aeb98f4910df5cd2281e4f62b6f3b891cb789bb6a836e827fa0a471d16e4b6efb76bc44ea6f19a55e3fadf47d8d27156bcd26ccd23a6422ea94ff59a0a8fddfeb4cd84656bf521c86b69da265ee8ba9d0cbc22783088144cea8352dc6999afd17b3a578ea1b6f7297", 0x9d}, {&(0x7f0000002480)="e3a02a39f8ed908d8cc743772e3c380c063d70863f72efa21a7603f28fac6925eda17e876539b82315c6c065843804a1b85fb2ff1765fe35a32b4600d321c029db10e91aee928a971a09ed4367f62712d1bdc5ceb45ebbf2a852582cf52748689a31eab9db0a8b0153fe57f7bb9dd5bc5eae3c7abf95151e91ba235825a765edcea48b9d5203c50d169394092994148c2518dce4f9a672d4f4d6846d247fcb9bf7d32c6cdb5f0bd4b779d061af92c9e6efd29730537c52a4c45ead80900940991b09a53699812e1326a894290744", 0xce}, {&(0x7f0000002580)="be8774440ed9616dd2e8db58", 0xc}, {&(0x7f00000025c0)="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", 0x1000}], 0xa, &(0x7f0000003680)=[{0x98, 0x11e, 0x2, "afc7f00f7256a656e7c76af24cc9ef231282263f464e378d67adc4bd9b0a0881aede64223dd7a8a7716f51b19779b383464605a35ca2c96490ffd0b1be40fb40528a15c442d3b84f338c14935648dfbbf647d3007cd0a994b1ee67f6670dfd0e893b4d9e427fa4c089f13cc68a2e2d396fd9f94936a79ba3e1ac0997938dcce4b553eafb"}, {0xa0, 0x19f, 0x7, "d6a1b74855c9196160284e33b6fff63c103a92e577e18fe92a784e1e96eafc26aee28e3b53a5c2293c7d9b3123847dbf4ec005539ac54468f04db1805e2218d4376be4f6647df35d3191e6855f356adce3d65e4b3fc79821ae373fbbd4f163ada51d071f35c9906d1083fcab11708f399d306131bc442aa01874eab02a5fa4aaf219fa804fb18d10aa"}, {0x110, 0x0, 0x101, "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"}, {0x38, 0x0, 0xef, "1369e71c498c98754523fda6d0b3e6aeb0e8e9643a6b4a3fed2d1588a30c8ba3833ed370"}], 0x280, 0x10}, 0x8000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x202, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000000c0)={0x1, 0x1}, 0x2) 11:01:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x3f00000000000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xc00e000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000008000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 11:01:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xfffff000}}, 0x20}}, 0x0) 11:01:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x5, 0x2, 'client1\x00', 0x2, "12aea493f7b8d136", "d41ec19b0484e79968e6db5dc273058931f701165cbe76187c01b9be5979d1f0", 0xe99, 0x34c0000000000000}) 11:01:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xf5ffffff00000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000008000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 11:01:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xa6ffffff00000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7000000}}, 0x20}}, 0x0) 11:01:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl(r0, 0xffffffffffffffff, &(0x7f0000000040)="cf15ae2e1313dd8ff2bf40d403c670c2c629fe8cbee4e089d9b2e8be6eac9184d9a0a063722cfe2f51cd964602cd635769b129b6f2c9ad21788c1a8c8cf58615c558663d523a179751a64f9b9114d7cf16e70fa383c022720d7393122f38a353a79c5b4c1af960ee5d8a4e56146719be9162ef2abfe36b7cc2a4bbcf795b98a9739f51f82c63f7c084eb95c77feb256984d94d11e089525e23f6a5f6b38f884e94af63aa0bca043dc81d43630237495e4bd1e33a4173e2d68b8f1cbe71ac9d2f063bcfbe659c598e985d9ef71ed8949e147ccb9eeae34efa2153e6d586c98c375c1e7ceacfead2b5") unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000002c0)={0x9, 0x3, 0x0, 0x6, [], [], [], 0x81, 0x101, 0xff, 0x2, "3929304e4b3d5302bfa8b77e519ef35d"}) accept$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) 11:01:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xa000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8000000}}, 0x20}}, 0x0) 11:01:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000008000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}}, 0x0) 11:01:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xc3ffffff00000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x800000000000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2e40, 0x200) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) unshare(0x400) r2 = dup3(r1, r1, 0x0) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000)=0xffffffffefbfffff, 0xffffffffffffffae) 11:01:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xd00}}, 0x20}}, 0x0) 11:01:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x400300}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000300)={[{@redirect_dir={'re\\irect_dir', 0x3d, './file1'}}], [], 0x2c}) 11:01:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:51 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\'*trustedmd5sum\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4803000000000000002f591c406e00000000090088b99c559c940ba8"], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0xfeffffff, 0x0, 0x0, @tick=0x26000000, {}, {}, @connect}], 0xffffff76) 11:01:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x9}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 643.061459] overlayfs: unrecognized mount option "re\irect_dir=./file1" or missing value 11:01:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x76cd, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x500}}, 0x20}}, 0x0) 11:01:51 executing program 0: r0 = socket(0x18, 0xb, 0x1ff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast2}]}, &(0x7f00000000c0)=0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000200)='lo\x00') getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x8000}, &(0x7f0000000140)=0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x80, 0x2) ioctl$KDGETLED(r4, 0x4b31, &(0x7f00000001c0)) 11:01:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x8}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:51 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400020000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:01:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xfffffff5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) 11:01:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8001) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x0, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:01:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xc00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 643.562749] input: syz0 as /devices/virtual/input/input12 11:01:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xfeffffff00000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xff000000}}, 0x20}}, 0x0) [ 643.666163] input: syz0 as /devices/virtual/input/input13 11:01:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r1, 0x15, &(0x7f0000000280)) dup3(0xffffffffffffffff, r0, 0x0) 11:01:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x100) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) r2 = dup2(r1, r0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000080)=0x40c81) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x3, 0x7ccd, 0x1, 0x400, 0x3, 0x7, 0x7, 0x4, 0x5, 0x7, 0x1, 0x7}) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0xfffffffffffffffc, 0x4) 11:01:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:51 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f00000000c0)={0x10, 0x4800000000000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x11}]}, 0x30}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 11:01:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x5000000}}, 0x20}}, 0x0) 11:01:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) unshare(0x400) 11:01:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xb00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 644.010883] netlink: 'syz-executor3': attribute type 17 has an invalid length. 11:01:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xa00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 644.090767] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:01:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xffffffff00000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xc000000}}, 0x20}}, 0x0) 11:01:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:52 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x480000, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x9, 0x9}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/108) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xec0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0) 11:01:52 executing program 1: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r1, 0x15, &(0x7f0000000280)) dup3(r0, 0xffffffffffffffff, 0x0) [ 644.647341] device bridge_slave_1 left promiscuous mode [ 644.664734] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.718114] device bridge_slave_0 left promiscuous mode [ 644.723806] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.795636] team0 (unregistering): Port device team_slave_1 removed [ 644.806200] team0 (unregistering): Port device team_slave_0 removed [ 644.820437] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 644.871809] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 644.934603] bond0 (unregistering): Released all slaves [ 644.992521] netlink: 'syz-executor3': attribute type 17 has an invalid length. [ 645.003017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 646.196578] IPVS: ftp: loaded support on port[0] = 21 11:01:54 executing program 3: 11:01:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="8ab06be670ad1098284944bcc3499c713a099a9b043215c98b322fbb4a195b9ae6fb1b307087e43bef534a93278d74ff82ef4b1cf3ef85faa123a1c5c9a46741a80e0b4e6b8d6992cd99122eac9cb1e5992f35363bcca3fdfd30ddb1a658862eebc35c9de6ce624a556187ec0a12643e75bacf52181d83a4e7b580f571dad9f1e21d88d576053cd6f126890c9f7d36ee075852904b6ee2aea2033f60b722ff70e7993560103fb72ba28fb96b3dedb3475ac2837fe2d3ababfb59a887ba99", 0xbe, 0x400}], 0x2000, &(0x7f0000000300)={[{@suiddir='suiddir'}, {@meta='meta'}, {@spectator='spectator'}, {@rgrplvb='rgrplvb'}, {@suiddir='suiddir'}, {@norgrplvb='norgrplvb'}, {@statfs_quantum={'statfs_quantum', 0x3d, 0xffffffffffffffff}}, {@errors_withdraw='errors=withdraw'}, {@meta='meta'}, {@localflocks='localflocks'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_type={'subj_type'}}]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000003c0)={'ipvs\x00'}, &(0x7f0000000400)=0x1e) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000040)=""/161, &(0x7f0000000100)=0xa1) 11:01:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x4405000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x34000}}, 0x20}}, 0x0) 11:01:54 executing program 1: [ 646.819151] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.825555] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.832678] device bridge_slave_0 entered promiscuous mode [ 646.861532] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.868134] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.875100] device bridge_slave_1 entered promiscuous mode [ 646.904462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 646.932593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 647.014180] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 647.058726] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 647.189450] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 647.196673] team0: Port device team_slave_0 added [ 647.224821] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 647.232031] team0: Port device team_slave_1 added [ 647.259190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 647.289832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 647.320297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 647.350857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 647.619819] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.626178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.632897] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.639282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.626384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.724751] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 648.821528] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 648.828058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 648.835035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 648.932601] 8021q: adding VLAN 0 to HW filter on device team0 11:01:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x100000000000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:57 executing program 1: 11:01:57 executing program 3: 11:01:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x7000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x9000000}}, 0x20}}, 0x0) 11:01:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:57 executing program 3: 11:01:57 executing program 1: 11:01:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x76cd000000000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xf0ffffff}}, 0x20}}, 0x0) 11:01:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x6000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r1, 0x0, 0x20, 0x1, 0x75c}) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:57 executing program 3: 11:01:57 executing program 1: 11:01:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffffff7f}}, 0x20}}, 0x0) 11:01:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x9effffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getpid() r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:01:57 executing program 3: 11:01:58 executing program 1: 11:01:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x5000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xf5ffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:01:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xff000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:58 executing program 3: 11:01:58 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000700)=0x7) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x81, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000740)={{0x2, 0x4e22}, {0x6, @remote}, 0x2, {0x2, 0x4e20, @multicast2}, 'bcsh0\x00'}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000680)=0x100000001) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KDADDIO(r0, 0x4b34, 0x8) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$UI_DEV_CREATE(r1, 0x5501) unshare(0x400) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000040)=""/224, 0xe0}, {&(0x7f0000000140)=""/239, 0xef}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/151, 0x97}, {&(0x7f0000000500)=""/203, 0xcb}], 0x7) 11:01:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xc00}}, 0x20}}, 0x0) 11:01:58 executing program 1: 11:01:58 executing program 1: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x400) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000480), &(0x7f0000000500)=0x8) write$evdev(r0, &(0x7f0000000400), 0x0) timer_create(0x0, &(0x7f0000001540)={0x0, 0x0, 0x0, @thr={&(0x7f0000000440), &(0x7f0000000540)}}, &(0x7f0000001580)) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) clock_gettime(0x0, &(0x7f00000004c0)) 11:01:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400020000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:01:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}}, 0x20}}, 0x0) 11:01:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x900}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:01:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}, 0x20}}, 0x0) 11:01:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xfffff000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 650.479548] device bridge_slave_1 left promiscuous mode [ 650.485093] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.588878] device bridge_slave_0 left promiscuous mode [ 650.591703] IPVS: ftp: loaded support on port[0] = 21 [ 650.594411] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.681720] team0 (unregistering): Port device team_slave_1 removed [ 650.692561] team0 (unregistering): Port device team_slave_0 removed [ 650.703641] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 650.752165] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 650.815141] bond0 (unregistering): Released all slaves [ 651.654493] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.661095] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.668979] device bridge_slave_0 entered promiscuous mode [ 651.718132] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.724592] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.732387] device bridge_slave_1 entered promiscuous mode [ 651.781141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 651.829742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 651.977983] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 652.029955] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 652.078192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 652.085046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.133879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 652.140847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.287759] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 652.295246] team0: Port device team_slave_0 added [ 652.341845] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 652.349367] team0: Port device team_slave_1 added [ 652.390298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.425465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 652.454913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 652.463154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.473170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.509819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 652.517036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.528745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.888496] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.894857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.901558] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.907939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.915179] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 652.957527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 653.895359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.995521] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 654.088868] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 654.094995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.102325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.194333] 8021q: adding VLAN 0 to HW filter on device team0 11:02:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xc3ffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:02 executing program 3: unshare(0x400) r0 = creat(&(0x7f0000000ff8)='./file0\x00', 0x0) syncfs(r0) 11:02:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x78, 0x0, &(0x7f00000002c0)=[@request_death, @increfs, @increfs_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000380)}) 11:02:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}, 0x20}}, 0x0) 11:02:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x7, 0x70, 0x3, 0x7, 0x80, 0x9, 0x0, 0x8a4, 0x2000, 0x0, 0x7, 0x5, 0x0, 0x2020000000000000, 0x3f, 0x7, 0x401, 0xfffffffffffffffd, 0x7fffffff, 0x0, 0x0, 0x9, 0x6, 0xb760, 0xff, 0x81, 0x3, 0x5, 0x58ef, 0x401, 0x5, 0x20, 0xffffffffffff8001, 0x9, 0x9, 0x705cff0c, 0xb9a9, 0x7f, 0x0, 0x10000, 0x3, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x1f, 0x40, 0x0, 0x8, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) ioctl$FICLONE(r0, 0x40049409, r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xc00e}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, 0x20}}, 0x0) [ 654.825635] binder: 6191:6194 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 654.857297] binder: 6191:6194 BC_INCREFS_DONE node 6 has no pending increfs request [ 654.865461] binder: 6191:6194 got reply transaction with no transaction stack 11:02:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x40000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40000000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:02:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xd8f, 0x2100) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8cefff00", @ANYRES16=r3, @ANYBLOB="0c032cbd7000fedbdf2511000000500002000800030003000000080009000100000008000400000800000800070001000000080009000500000014000100ac14141e0000000000000000000000007a080009000800000008000700f7b00000280001000c0007001c000000010000000800050002000000080002002f000000080009000c000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4c0d1}, 0x4000) 11:02:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 654.950199] binder: 6191:6194 transaction failed 29201/-71, size 0-0 line 2762 [ 654.988801] binder: BINDER_SET_CONTEXT_MGR already set [ 655.011286] binder: 6191:6213 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:02:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x900}}, 0x20}}, 0x0) [ 655.068060] binder: undelivered TRANSACTION_ERROR: 29201 [ 655.073725] binder: 6191:6194 ioctl 40046207 0 returned -16 [ 655.085726] binder: 6191:6213 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 655.101050] binder: 6191:6213 BC_INCREFS_DONE u0000000000000000 no match [ 655.136400] binder: 6191:6213 got reply transaction with no transaction stack [ 655.157077] binder: 6191:6213 transaction failed 29201/-71, size 0-0 line 2762 11:02:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xc000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 655.189945] binder: undelivered TRANSACTION_ERROR: 29201 11:02:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x121080) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) lseek(r0, 0x0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f000093eee8)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xe5, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x203}}], 0x20}], 0x914, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000380)={0x1f, 0x0, 'client1\x00', 0xffffffff80000002, "25baa329864938dd", "c7d8d5a806d788d13ec541112a48be6b3aab277e38e0689e86584e5e9c76f255", 0xffffffffffff41d0, 0x4f}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x48) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0x6000, 0xf000, 0x0, 0x10000], 0x6, 0x21, 0x1b}) 11:02:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$packet(0x11, 0x2, 0x300) unshare(0x28000100) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') setsockopt$packet_int(r0, 0x107, 0x800000000000e, &(0x7f0000000080)=0x1, 0x2) 11:02:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x34000}}, 0x20}}, 0x0) 11:02:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xa6ffffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x500}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7, 0x14000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @link_local}, {}]}) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000340)=0xc) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x5, 0x2) accept$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r3 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000380)={0x3, [0x101, 0x1, 0x5]}, 0xa) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000300)=0x0) ptrace$setregset(0x4205, r4, 0x201, &(0x7f00000002c0)={&(0x7f0000000080)="22bc80b4f482ba2c3731e38ffc0f5fd37d92732d8215a6018020b22f3341ffc167374ae8f89809a9b6a472ca9f8c3e7fe09be6f843a495", 0xb9}) ioperm(0x6, 0x80000001, 0xb) prctl$setfpexc(0xc, 0x80) 11:02:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x76cd0000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 655.658424] device bridge_slave_1 left promiscuous mode [ 655.665378] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.740509] device bridge_slave_0 left promiscuous mode [ 655.746175] bridge0: port 1(bridge_slave_0) entered disabled state 11:02:03 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}, 0x20}}, 0x0) 11:02:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xb}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40000000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:02:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) memfd_create(&(0x7f0000000040)='\x00', 0x6) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, 0x0) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/211, 0xd3}], 0x1, 0x0) [ 655.887519] FAULT_INJECTION: forcing a failure. [ 655.887519] name failslab, interval 1, probability 0, space 0, times 0 [ 655.916304] IPVS: ftp: loaded support on port[0] = 21 11:02:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 655.933707] CPU: 1 PID: 6269 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 655.940683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.950047] Call Trace: [ 655.950074] dump_stack+0x244/0x39d [ 655.950101] ? dump_stack_print_info.cold.1+0x20/0x20 [ 655.950127] ? debug_smp_processor_id+0x1c/0x20 [ 655.950154] ? perf_trace_lock+0x14d/0x7a0 [ 655.950182] should_fail.cold.4+0xa/0x17 [ 655.956425] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 655.956441] ? perf_trace_lock+0x14d/0x7a0 [ 655.956477] ? find_held_lock+0x36/0x1c0 [ 655.956507] ? __f_unlock_pos+0x19/0x20 [ 655.992058] ? find_held_lock+0x36/0x1c0 [ 655.996170] ? kasan_check_write+0x14/0x20 [ 656.000424] ? perf_trace_sched_process_exec+0x860/0x860 [ 656.005917] ? wait_for_completion+0x8a0/0x8a0 [ 656.010550] __should_failslab+0x124/0x180 [ 656.014804] should_failslab+0x9/0x14 [ 656.018638] kmem_cache_alloc+0x2be/0x730 [ 656.022806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 656.028360] ? check_preemption_disabled+0x48/0x280 [ 656.033404] getname_flags+0xd0/0x5a0 11:02:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x4}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 656.037227] getname+0x19/0x20 [ 656.040445] do_sys_open+0x383/0x700 [ 656.044192] ? filp_open+0x80/0x80 [ 656.047753] ? trace_hardirqs_off_caller+0x310/0x310 [ 656.047782] __x64_sys_open+0x7e/0xc0 [ 656.047805] do_syscall_64+0x1b9/0x820 [ 656.047823] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 656.047843] ? syscall_return_slowpath+0x5e0/0x5e0 [ 656.047859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 656.047876] ? trace_hardirqs_on_caller+0x310/0x310 [ 656.047897] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 656.056800] ? prepare_exit_to_usermode+0x291/0x3b0 [ 656.090853] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 656.095729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.100934] RIP: 0033:0x4111a1 [ 656.104149] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 656.123066] RSP: 002b:00007f995f41d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 656.130793] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 11:02:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x800000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000001c00)='hfsplus\x00', &(0x7f0000001c40)='./file0\x00', 0x1, 0x1, &(0x7f0000002140)=[{&(0x7f0000002040)}], 0x0, &(0x7f00000024c0)={[{@force='force'}, {@session={'session', 0x3d, 0x4}}, {@barrier='barrier'}], [{@subj_user={'subj_user', 0x3d, 'clear_refs\x00'}}]}) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="bf740e1fa82c642f8877e5cf62e2c973c4e60f9917b72f8ca5c2494edecb38f72862562ba21a68c8455f06960fd379f5ded2c524770bae4d587653c48f71d36aee3fefe7634b779a5c6f99d450405e03019f530d788bc3fc1a362b339477a8040fd6ee4199838caf78bd8ed89611dc33b7865b2024aa652cf94c814d1e878036cabf53e7ba377962df0cdef6", 0x8c}], 0x1084020, 0x0) [ 656.138073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f41d850 [ 656.145354] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 656.152640] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f41e6d4 [ 656.152651] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 [ 656.195072] team0 (unregistering): Port device team_slave_1 removed [ 656.218808] team0 (unregistering): Port device team_slave_0 removed [ 656.238213] hfsplus: unable to parse mount options 11:02:04 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x900000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 656.287920] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 656.344317] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 656.348386] FAULT_INJECTION: forcing a failure. [ 656.348386] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 656.363193] CPU: 1 PID: 6297 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 656.370131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.379508] Call Trace: [ 656.382118] dump_stack+0x244/0x39d [ 656.385780] ? dump_stack_print_info.cold.1+0x20/0x20 [ 656.390991] ? lock_is_held_type+0x210/0x210 [ 656.395439] should_fail.cold.4+0xa/0x17 [ 656.399525] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 656.404651] ? perf_trace_lock+0x14d/0x7a0 [ 656.408928] ? mark_held_locks+0x130/0x130 [ 656.413189] ? debug_smp_processor_id+0x1c/0x20 [ 656.417874] ? perf_trace_lock+0x14d/0x7a0 [ 656.422123] ? _kstrtoull+0x188/0x250 [ 656.425981] ? _parse_integer+0x180/0x180 [ 656.430162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 656.435722] ? check_preemption_disabled+0x48/0x280 [ 656.440769] ? perf_trace_sched_process_exec+0x860/0x860 [ 656.446240] ? debug_smp_processor_id+0x1c/0x20 [ 656.450920] ? perf_trace_lock+0x14d/0x7a0 [ 656.455186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 656.460739] ? should_fail+0x22d/0xd01 [ 656.464660] ? lock_is_held_type+0x210/0x210 [ 656.469085] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 656.474207] ? perf_trace_lock+0x14d/0x7a0 [ 656.478466] __alloc_pages_nodemask+0x34b/0xde0 [ 656.483159] ? find_held_lock+0x36/0x1c0 [ 656.487277] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 656.492334] ? __f_unlock_pos+0x19/0x20 [ 656.496325] ? find_held_lock+0x36/0x1c0 [ 656.500393] ? trace_hardirqs_off+0xb8/0x310 [ 656.504793] cache_grow_begin+0xa5/0x8c0 [ 656.508846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 656.514376] ? check_preemption_disabled+0x48/0x280 [ 656.519385] kmem_cache_alloc+0x66b/0x730 [ 656.523545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 656.529069] ? check_preemption_disabled+0x48/0x280 [ 656.534079] getname_flags+0xd0/0x5a0 [ 656.537870] getname+0x19/0x20 [ 656.541054] do_sys_open+0x383/0x700 [ 656.544759] ? filp_open+0x80/0x80 [ 656.548289] ? trace_hardirqs_off_caller+0x310/0x310 [ 656.553385] __x64_sys_open+0x7e/0xc0 [ 656.557175] do_syscall_64+0x1b9/0x820 [ 656.561048] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 656.566395] ? syscall_return_slowpath+0x5e0/0x5e0 [ 656.571309] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 656.576141] ? trace_hardirqs_on_caller+0x310/0x310 [ 656.581163] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 656.586177] ? prepare_exit_to_usermode+0x291/0x3b0 [ 656.591213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 656.596047] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.601236] RIP: 0033:0x4111a1 [ 656.604430] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 656.623321] RSP: 002b:00007f995f41d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 656.631023] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 656.638304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f41d850 [ 656.645577] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 656.652847] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f41e6d4 [ 656.660104] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 [ 656.741362] bond0 (unregistering): Released all slaves [ 657.514688] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.521507] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.529052] device bridge_slave_0 entered promiscuous mode [ 657.576157] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.582740] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.590224] device bridge_slave_1 entered promiscuous mode [ 657.637653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 657.684888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 657.831826] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 657.884091] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 657.934056] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 657.941409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 657.993799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 658.000803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.148578] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 658.156136] team0: Port device team_slave_0 added [ 658.202082] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 658.209780] team0: Port device team_slave_1 added [ 658.259142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.289112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.322757] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 658.329871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 658.338413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 658.378749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 658.385911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 658.403236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 658.749642] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.756000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.762726] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.769102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.776585] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 658.807096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 659.770150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.867666] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 659.967441] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 659.973562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 659.985574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 660.075336] 8021q: adding VLAN 0 to HW filter on device team0 11:02:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x1000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000001c00)='hfsplus\x00', &(0x7f0000001c40)='./file0\x00', 0x1, 0x1, &(0x7f0000002140)=[{&(0x7f0000002040)}], 0x0, &(0x7f00000024c0)={[{@force='force'}, {@session={'session', 0x3d, 0x4}}, {@barrier='barrier'}], [{@subj_user={'subj_user', 0x3d, 'clear_refs\x00'}}]}) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="bf740e1fa82c642f8877e5cf62e2c973c4e60f9917b72f8ca5c2494edecb38f72862562ba21a68c8455f06960fd379f5ded2c524770bae4d587653c48f71d36aee3fefe7634b779a5c6f99d450405e03019f530d788bc3fc1a362b339477a8040fd6ee4199838caf78bd8ed89611dc33b7865b2024aa652cf94c814d1e878036cabf53e7ba377962df0cdef6", 0x8c}], 0x1084020, 0x0) 11:02:08 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x400300}}, 0x20}}, 0x0) 11:02:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) r2 = accept4(r0, &(0x7f0000000040)=@ethernet={0x0, @broadcast}, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000001c0)={0x101, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0xfda0) 11:02:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}}, 0x20}}, 0x0) [ 660.724735] FAULT_INJECTION: forcing a failure. [ 660.724735] name failslab, interval 1, probability 0, space 0, times 0 [ 660.780225] hfsplus: unable to parse mount options [ 660.787270] CPU: 1 PID: 6581 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 660.794257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.803630] Call Trace: [ 660.806237] dump_stack+0x244/0x39d [ 660.809889] ? dump_stack_print_info.cold.1+0x20/0x20 [ 660.815134] ? debug_smp_processor_id+0x1c/0x20 [ 660.819863] ? perf_trace_lock+0x14d/0x7a0 [ 660.824150] should_fail.cold.4+0xa/0x17 [ 660.828234] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 660.833372] ? __lock_acquire+0x62f/0x4c20 [ 660.837641] ? zap_class+0x640/0x640 [ 660.841400] ? find_held_lock+0x36/0x1c0 [ 660.845505] ? debug_smp_processor_id+0x1c/0x20 [ 660.850194] ? perf_trace_sched_process_exec+0x860/0x860 [ 660.855678] __should_failslab+0x124/0x180 [ 660.859947] should_failslab+0x9/0x14 [ 660.863769] kmem_cache_alloc+0x2be/0x730 [ 660.867932] ? zap_class+0x640/0x640 [ 660.871663] ? print_usage_bug+0xc0/0xc0 [ 660.875752] ? mark_held_locks+0x130/0x130 [ 660.880025] __alloc_file+0xa8/0x470 [ 660.883758] ? file_free_rcu+0xd0/0xd0 [ 660.887670] ? find_held_lock+0x36/0x1c0 [ 660.891764] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 660.897318] ? check_preemption_disabled+0x48/0x280 [ 660.902372] alloc_empty_file+0x72/0x170 [ 660.906471] path_openat+0x170/0x5150 [ 660.910290] ? lock_is_held_type+0x210/0x210 [ 660.914716] ? unwind_dump+0x190/0x190 [ 660.918642] ? zap_class+0x640/0x640 [ 660.922381] ? path_lookupat.isra.43+0xc00/0xc00 11:02:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}}, 0x20}}, 0x0) 11:02:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x8000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 660.922397] ? unwind_get_return_address+0x61/0xa0 [ 660.922415] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 660.922437] ? expand_files.part.8+0x571/0x9a0 [ 660.932123] ? find_held_lock+0x36/0x1c0 [ 660.932161] ? __alloc_fd+0x347/0x6e0 [ 660.932180] ? lock_downgrade+0x900/0x900 [ 660.953799] ? getname+0x19/0x20 [ 660.957199] ? kasan_check_read+0x11/0x20 [ 660.961384] ? do_raw_spin_unlock+0xa7/0x330 [ 660.965805] ? do_raw_spin_trylock+0x270/0x270 [ 660.970406] ? __lock_is_held+0xb5/0x140 [ 660.974490] ? __check_object_size+0xb1/0x782 [ 660.979013] ? _raw_spin_unlock+0x2c/0x50 [ 660.983188] ? __alloc_fd+0x347/0x6e0 [ 660.987022] do_filp_open+0x255/0x380 [ 660.990847] ? may_open_dev+0x100/0x100 [ 660.994860] ? get_unused_fd_flags+0x122/0x1a0 [ 660.999461] ? __alloc_fd+0x6e0/0x6e0 [ 661.003296] do_sys_open+0x568/0x700 [ 661.007034] ? filp_open+0x80/0x80 [ 661.010624] ? trace_hardirqs_off_caller+0x310/0x310 [ 661.015772] __x64_sys_open+0x7e/0xc0 [ 661.019593] do_syscall_64+0x1b9/0x820 [ 661.023521] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 11:02:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x5}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xc00e0000}}, 0x20}}, 0x0) [ 661.028902] ? syscall_return_slowpath+0x5e0/0x5e0 [ 661.033844] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 661.038704] ? trace_hardirqs_on_caller+0x310/0x310 [ 661.043751] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 661.048788] ? prepare_exit_to_usermode+0x291/0x3b0 [ 661.053825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 661.058730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.063925] RIP: 0033:0x4111a1 11:02:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x4000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 661.067149] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 661.067186] RSP: 002b:00007f995f41d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 661.067202] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 661.067212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f41d850 [ 661.067225] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 661.115702] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f41e6d4 [ 661.122985] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 11:02:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) timerfd_create(0x1, 0x80000) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x6}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) write$FUSE_BMAP(r0, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x6}}, 0x18) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f00000019c0)={0x8, "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", 0x1000}, 0xba1830554f084841) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x95}, &(0x7f00000004c0)=0x8) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000380)={r2, 0x6, 0x16103f4579d7c943}, &(0x7f0000000540)=0xc) sendfile(r1, r1, &(0x7f00000000c0)=0x4, 0x8080fffffffe) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={0x0, 0xefda}, &(0x7f00000005c0)=0xffffff17) open(&(0x7f00000002c0)='./file0\x00', 0x100, 0x4) geteuid() ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000200)) syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x3f89e42f, 0x44000) 11:02:09 executing program 1 (fault-call:2 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xf000}}, 0x20}}, 0x0) 11:02:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) unlinkat(r1, &(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$packet(0x11, 0x2, 0x300) unshare(0x400) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x800, 0x0) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000)=0x3, 0x24429d1cad194afd) 11:02:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x34000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xcd76, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 661.465049] FAULT_INJECTION: forcing a failure. [ 661.465049] name failslab, interval 1, probability 0, space 0, times 0 [ 661.548845] CPU: 0 PID: 6639 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 661.555843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.565204] Call Trace: [ 661.567813] dump_stack+0x244/0x39d [ 661.571480] ? dump_stack_print_info.cold.1+0x20/0x20 [ 661.572722] overlayfs: failed to resolve './file1': -2 [ 661.576695] ? debug_smp_processor_id+0x1c/0x20 [ 661.576724] ? perf_trace_lock+0x14d/0x7a0 [ 661.576750] should_fail.cold.4+0xa/0x17 [ 661.594974] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 661.600114] ? is_bpf_text_address+0xd3/0x170 [ 661.604731] ? kernel_text_address+0x79/0xf0 [ 661.609163] ? __kernel_text_address+0xd/0x40 [ 661.613682] ? unwind_get_return_address+0x61/0xa0 [ 661.618668] ? __save_stack_trace+0x8d/0xf0 [ 661.623013] ? find_held_lock+0x36/0x1c0 [ 661.627124] ? do_syscall_64+0x1b9/0x820 [ 661.631207] ? perf_trace_sched_process_exec+0x860/0x860 [ 661.636696] __should_failslab+0x124/0x180 [ 661.640950] should_failslab+0x9/0x14 [ 661.640968] kmem_cache_alloc_trace+0x2d7/0x750 [ 661.640988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.641010] ? check_preemption_disabled+0x48/0x280 [ 661.649503] apparmor_file_alloc_security+0x168/0xaa0 [ 661.649521] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 661.649539] ? rcu_pm_notify+0xc0/0xc0 [ 661.649557] ? apparmor_sock_graft+0x690/0x690 [ 661.649583] ? rcu_read_lock_sched_held+0x14f/0x180 [ 661.649601] ? kmem_cache_alloc+0x33a/0x730 [ 661.674207] overlayfs: failed to resolve './file1': -2 [ 661.674744] ? zap_class+0x640/0x640 [ 661.674772] security_file_alloc+0x4c/0xa0 [ 661.674793] __alloc_file+0x12a/0x470 [ 661.705775] ? file_free_rcu+0xd0/0xd0 [ 661.709712] ? find_held_lock+0x36/0x1c0 [ 661.713810] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 661.719364] ? check_preemption_disabled+0x48/0x280 [ 661.719395] alloc_empty_file+0x72/0x170 [ 661.719416] path_openat+0x170/0x5150 [ 661.719433] ? lock_is_held_type+0x210/0x210 [ 661.719446] ? unwind_dump+0x190/0x190 [ 661.719477] ? zap_class+0x640/0x640 [ 661.728577] ? path_lookupat.isra.43+0xc00/0xc00 [ 661.728593] ? unwind_get_return_address+0x61/0xa0 [ 661.728608] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 661.728646] ? expand_files.part.8+0x571/0x9a0 [ 661.728670] ? find_held_lock+0x36/0x1c0 [ 661.728696] ? __alloc_fd+0x347/0x6e0 [ 661.771579] ? lock_downgrade+0x900/0x900 [ 661.775755] ? getname+0x19/0x20 [ 661.779153] ? kasan_check_read+0x11/0x20 [ 661.783324] ? do_raw_spin_unlock+0xa7/0x330 [ 661.787779] ? do_raw_spin_trylock+0x270/0x270 [ 661.792702] ? __lock_is_held+0xb5/0x140 11:02:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xb00}}, 0x20}}, 0x0) 11:02:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xfffffffe, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 661.796793] ? __check_object_size+0xb1/0x782 [ 661.801319] ? _raw_spin_unlock+0x2c/0x50 [ 661.805482] ? __alloc_fd+0x347/0x6e0 [ 661.809352] do_filp_open+0x255/0x380 [ 661.813168] ? may_open_dev+0x100/0x100 [ 661.817179] ? get_unused_fd_flags+0x122/0x1a0 [ 661.821786] ? __alloc_fd+0x6e0/0x6e0 [ 661.825645] do_sys_open+0x568/0x700 [ 661.829396] ? filp_open+0x80/0x80 [ 661.832957] ? trace_hardirqs_off_caller+0x310/0x310 [ 661.838118] __x64_sys_open+0x7e/0xc0 [ 661.841948] do_syscall_64+0x1b9/0x820 11:02:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x20}}, 0x0) [ 661.845861] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 661.851251] ? syscall_return_slowpath+0x5e0/0x5e0 [ 661.856199] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 661.861070] ? trace_hardirqs_on_caller+0x310/0x310 [ 661.866116] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 661.871168] ? prepare_exit_to_usermode+0x291/0x3b0 [ 661.876225] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 661.876262] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.886769] RIP: 0033:0x4111a1 [ 661.889982] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 661.889991] RSP: 002b:00007f995f3fc7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 661.890009] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 661.890019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f3fc850 [ 661.890029] RBP: 000000000072bfa0 R08: 000000000000000f R09: 0000000000000000 [ 661.890046] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f3fd6d4 11:02:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2, 0x1, 0x0, r2}) r3 = eventfd(0x0) dup3(r3, r2, 0x0) 11:02:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xd}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0xd01c) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x80000005, 0x300) unshare(0x404) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x102) write$binfmt_elf32(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x100000001, 0x5d6, 0x5, 0xff, 0xffffffffffffffff, 0x3, 0x3f, 0x7fffffff, 0x1, 0x38, 0x150, 0x91, 0xfffffffffffffff8, 0x20, 0x2, 0x0, 0x10001, 0x6}, [{0x70000007, 0x3f, 0xdf, 0x8000, 0x3000000000, 0x5, 0x959, 0x101}, {0x0, 0x7, 0x60f, 0x400, 0x1, 0x401, 0x4, 0x8}], "a72ba60a3e29f62fc4b7", [[], [], [], [], [], [], [], [], []]}, 0x982) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x2, 0x2) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) [ 661.947558] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000004 11:02:10 executing program 1 (fault-call:2 fault-nth:4): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xd}}, 0x20}}, 0x0) 11:02:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xc}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:10 executing program 0: r0 = socket$inet6(0xa, 0x8000f, 0x6bc) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x9effffff00000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xc}}, 0x20}}, 0x0) 11:02:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x90800, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x2c, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x9, @local, 0xfb9f}]}, &(0x7f00000002c0)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000100)={{0x7, 0x9}, {0x3, 0x40073}, 0x9, 0x7}) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000109, 0x1100) [ 662.267276] FAULT_INJECTION: forcing a failure. [ 662.267276] name failslab, interval 1, probability 0, space 0, times 0 [ 662.338116] CPU: 0 PID: 6685 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 662.345125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.354500] Call Trace: [ 662.357115] dump_stack+0x244/0x39d [ 662.360772] ? dump_stack_print_info.cold.1+0x20/0x20 [ 662.365991] ? debug_smp_processor_id+0x1c/0x20 [ 662.370684] ? perf_trace_lock+0x14d/0x7a0 [ 662.374939] should_fail.cold.4+0xa/0x17 [ 662.379017] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 662.384214] ? get_signal+0xfaf/0x1980 11:02:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0xfeffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:10 executing program 0: r0 = socket$inet6(0xa, 0x7, 0x3) ioctl(r0, 0x6, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x4000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]}) r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) connect$packet(r2, &(0x7f0000000600)={0x11, 0x2, r3, 0x1, 0x1f, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) [ 662.388138] ? ptrace_notify+0x130/0x130 [ 662.392224] ? find_held_lock+0x36/0x1c0 [ 662.396337] ? perf_trace_sched_process_exec+0x860/0x860 [ 662.401876] ? do_signal+0x9c/0x21c0 [ 662.405610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 662.411208] __should_failslab+0x124/0x180 [ 662.415477] should_failslab+0x9/0x14 [ 662.419303] kmem_cache_alloc+0x2be/0x730 [ 662.423500] ? exit_to_usermode_loop+0x8c/0x380 [ 662.428214] ? exit_to_usermode_loop+0x8c/0x380 [ 662.432909] getname_flags+0xd0/0x5a0 [ 662.436733] ? do_syscall_64+0x6be/0x820 [ 662.440818] getname+0x19/0x20 [ 662.444034] do_sys_open+0x383/0x700 [ 662.447774] ? filp_open+0x80/0x80 [ 662.451334] ? trace_hardirqs_off_caller+0x310/0x310 [ 662.456462] __x64_sys_open+0x7e/0xc0 [ 662.460289] do_syscall_64+0x1b9/0x820 [ 662.464196] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 662.469580] ? syscall_return_slowpath+0x5e0/0x5e0 [ 662.474535] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 662.479396] ? trace_hardirqs_on_caller+0x310/0x310 11:02:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}}, 0x20}}, 0x0) [ 662.484434] ? prepare_exit_to_usermode+0x291/0x3b0 [ 662.489481] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 662.494370] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.499574] RIP: 0033:0x4111a1 [ 662.502793] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 662.521702] RSP: 002b:00007f995f41d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 662.521720] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 11:02:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x4405}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 662.521743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f41d850 [ 662.521766] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 662.521776] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f41e6d4 [ 662.521786] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 11:02:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x1b, 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x80) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:10 executing program 1 (fault-call:2 fault-nth:5): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}, 0x20}}, 0x0) 11:02:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xb000000}}, 0x20}}, 0x0) [ 662.897960] device bridge_slave_1 left promiscuous mode [ 662.903668] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.975798] FAULT_INJECTION: forcing a failure. [ 662.975798] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.987685] CPU: 1 PID: 6728 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 662.993510] IPVS: ftp: loaded support on port[0] = 21 [ 662.994635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.994644] Call Trace: [ 662.994670] dump_stack+0x244/0x39d [ 662.994700] ? dump_stack_print_info.cold.1+0x20/0x20 [ 663.020685] ? perf_trace_lock+0x14d/0x7a0 11:02:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x2}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 663.024952] ? do_notify_parent_cldstop+0x87a/0xe40 [ 663.029988] ? trace_hardirqs_off_caller+0x310/0x310 [ 663.035110] should_fail.cold.4+0xa/0x17 [ 663.039213] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 663.044352] ? zap_class+0x640/0x640 [ 663.048106] ? mark_held_locks+0x130/0x130 [ 663.052368] ? find_held_lock+0x36/0x1c0 [ 663.056456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 663.062008] ? check_preemption_disabled+0x48/0x280 [ 663.067074] ? debug_smp_processor_id+0x1c/0x20 [ 663.071757] ? perf_trace_lock+0x14d/0x7a0 [ 663.076008] ? trace_hardirqs_on+0xbd/0x310 [ 663.080351] ? kasan_check_read+0x11/0x20 [ 663.084517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 663.090070] ? should_fail+0x22d/0xd01 [ 663.093975] ? lock_is_held_type+0x210/0x210 [ 663.098400] ? __dequeue_signal+0x7d0/0x7d0 [ 663.102754] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 663.107884] __alloc_pages_nodemask+0x34b/0xde0 [ 663.112578] ? get_signal+0xfaf/0x1980 [ 663.116501] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 663.121546] ? ptrace_notify+0x130/0x130 [ 663.125650] ? find_held_lock+0x36/0x1c0 [ 663.129762] ? trace_hardirqs_off+0xb8/0x310 [ 663.134198] cache_grow_begin+0xa5/0x8c0 [ 663.138280] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 663.143839] ? check_preemption_disabled+0x48/0x280 [ 663.148882] kmem_cache_alloc+0x66b/0x730 [ 663.153066] getname_flags+0xd0/0x5a0 [ 663.156888] ? do_syscall_64+0x6be/0x820 [ 663.160972] getname+0x19/0x20 [ 663.164186] do_sys_open+0x383/0x700 [ 663.167923] ? filp_open+0x80/0x80 [ 663.171486] ? trace_hardirqs_off_caller+0x310/0x310 [ 663.176627] __x64_sys_open+0x7e/0xc0 [ 663.180449] do_syscall_64+0x1b9/0x820 [ 663.184361] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 663.189753] ? syscall_return_slowpath+0x5e0/0x5e0 [ 663.194703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 663.199565] ? trace_hardirqs_on_caller+0x310/0x310 [ 663.204600] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 663.209660] ? prepare_exit_to_usermode+0x291/0x3b0 [ 663.214700] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 663.219574] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.224789] RIP: 0033:0x4111a1 [ 663.227997] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 663.246917] RSP: 002b:00007f995f41d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 663.254646] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 663.261948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f41d850 [ 663.269230] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 663.276517] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f41e6d4 [ 663.283805] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 [ 663.328870] device bridge_slave_0 left promiscuous mode [ 663.335781] bridge0: port 1(bridge_slave_0) entered disabled state 11:02:11 executing program 3: socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x40000, 0x0, 0x0, 0x0, 0xa7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x40000) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffffffff80000000, 0x240000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x0, 0x15, &(0x7f0000000100)='/dev/bus/usb/00#/00#\x00'}, 0x30) sched_setparam(r2, &(0x7f0000000200)=0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x2) clone(0x0, &(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)) r4 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r4, 0x409, 0x8) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000340)={0x0, @link_local}) [ 663.460806] team0 (unregistering): Port device team_slave_1 removed [ 663.490141] team0 (unregistering): Port device team_slave_0 removed [ 663.514337] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 663.564084] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 663.644277] bond0 (unregistering): Released all slaves [ 664.489399] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.495942] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.503970] device bridge_slave_0 entered promiscuous mode [ 664.555193] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.561724] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.569747] device bridge_slave_1 entered promiscuous mode [ 664.620049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 664.668707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 664.821230] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 664.873396] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 664.923295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 664.930712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 665.124343] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 665.132270] team0: Port device team_slave_0 added [ 665.180198] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 665.188270] team0: Port device team_slave_1 added [ 665.228227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 665.264603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 665.293410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 665.300955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 665.311438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 665.358976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 665.366145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 665.378748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 665.727733] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.734503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.741465] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.747896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.755207] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 665.761807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 666.777570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.879903] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 666.975808] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 666.982014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 666.990150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.086232] 8021q: adding VLAN 0 to HW filter on device team0 11:02:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x8000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x700000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @rand_addr=0x10000}], 0x20) unshare(0x400) socket$alg(0x26, 0x5, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x8001}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e23, 0x8000, @remote, 0xffffffffffffffc0}], 0x48) 11:02:15 executing program 1 (fault-call:2 fault-nth:6): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:15 executing program 3: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000180)='./file0\x00', r0, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x2b, &(0x7f0000000000)=@broute={"62726f75746500000200", 0x60, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x30, &(0x7f0000000080), &(0x7f00000000c0)=[{}, {}, {}]}, 0x108) fsetxattr$security_capability(r2, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000440)=@v3={0x3000000, [{0x10001, 0x3f}, {0x4, 0xfffffffffffff339}], r0}, 0x18, 0xfffffffffffffffe) 11:02:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x500}}, 0x20}}, 0x0) 11:02:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}, 0x20}}, 0x0) 11:02:15 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200000001808200000008004500002800000000002f9078ac2814aaac1479fed388d8490c23df728b31340eb9f95d7f205c162b2b04ce675f268ae0f33f89228471fab10cb976891be23194d6e580fb45edf1182f01a563bc67f648f3b29db01a122440a6cfe71cfd48", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000000)={0x0, 0xfffffffffffffffc, [0x2, 0xfffffffffffffffc]}) r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write(r0, &(0x7f0000000240)="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", 0xfc) 11:02:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 667.789604] FAULT_INJECTION: forcing a failure. [ 667.789604] name failslab, interval 1, probability 0, space 0, times 0 [ 667.841404] CPU: 1 PID: 7024 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 667.848382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.857756] Call Trace: [ 667.860385] dump_stack+0x244/0x39d [ 667.864051] ? dump_stack_print_info.cold.1+0x20/0x20 [ 667.868842] netlink: 'syz-executor3': attribute type 29 has an invalid length. [ 667.869281] ? debug_smp_processor_id+0x1c/0x20 [ 667.881462] ? perf_trace_lock+0x14d/0x7a0 [ 667.885743] should_fail.cold.4+0xa/0x17 11:02:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 667.889833] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 667.891998] netlink: 188 bytes leftover after parsing attributes in process `syz-executor3'. [ 667.894965] ? trace_hardirqs_on+0xbd/0x310 [ 667.894985] ? print_usage_bug+0xc0/0xc0 [ 667.895016] ? find_held_lock+0x36/0x1c0 [ 667.895054] ? debug_smp_processor_id+0x1c/0x20 [ 667.920789] ? perf_trace_sched_process_exec+0x860/0x860 [ 667.926276] __should_failslab+0x124/0x180 [ 667.930538] should_failslab+0x9/0x14 [ 667.934357] kmem_cache_alloc+0x2be/0x730 [ 667.934373] ? zap_class+0x640/0x640 [ 667.934388] ? print_usage_bug+0xc0/0xc0 [ 667.934405] ? check_preemption_disabled+0x48/0x280 [ 667.934431] __alloc_file+0xa8/0x470 [ 667.934450] ? file_free_rcu+0xd0/0xd0 [ 667.942329] ? find_held_lock+0x36/0x1c0 [ 667.942359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.942375] ? check_preemption_disabled+0x48/0x280 [ 667.942399] alloc_empty_file+0x72/0x170 [ 667.977738] path_openat+0x170/0x5150 [ 667.981560] ? lock_is_held_type+0x210/0x210 [ 667.985987] ? unwind_dump+0x190/0x190 11:02:16 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x80, 0x210000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x80400000000013, &(0x7f0000000080)="ab3fa861", 0x4) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000001c0)=""/154, 0x9a}], 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000300)='./file0\x00', 0x2, 0xa, &(0x7f0000002940)=[{&(0x7f0000000340)="e997499c5de4952b61b5d7f1a018880d0413f36a03f1213565592aa64227dfc05c370e3d4e9232bfbb39960d0578609bf7ee8ff119aff7f7b5494837291729853fe720d8ea66bf43cc11ec4066953671d0fcd07462d968453c8b8b0350559c0470885ed60b2fccccbb8436ae9d275f5c14c403fc024a5fa4a46750093ab7b2fe61d3f38b9892", 0x86, 0x3}, {&(0x7f0000000400)="48b0a0bbe6af2e71b42a1a7961a1a31675a2564b56bfbc6555a596334172ea0ca86859a2542dfb19ad925faf812c16d4457adb2c7624b1b01506f998e94d891fab9bf00f813f591637cef8c962db9318c4687bc27f73f910b6018efaa70026dca5d1f1113e0d300f4a1d2f541284d80c2cb7cd04d5a7ddb6bdfe9426f1f6e9404fc187f3efaf003e7d0a456fc06c6e7846aab0a4a64af29a867e3c9668d4ab6cd2fc00107802eb8a4d2f40b599c89849e434b59058aac274e0ae172b3eb04c0ef2d31730b2cb9599d006343486f73b4ec4bb", 0xd2, 0x6}, {&(0x7f0000000500)="12d93c6d47a4a9ec85b55350d905f68d07e203f602ab2c4e610e423f5bdc87372dc4b19cb527d73d2ba5307681202266bb5c9a7c1b5b214ef16d52e3152f78b404b0f3c36da5866308818271e134c989351722657681a40605e77afe6a58271e7cf9bed50c0c0913ce9c609d70d6be6a8c8f147a1be25f042c9736fd72578817dc32b530592387ca611996d5a3b4a0df9d1e8c43717b9bbbae5941bf1f255238356ba719c2a7f8a8463ad7b9a1bf5071467b715137d0d644e8a573ad7614d6681e65c073720bc036669fb848", 0xcc, 0x8}, {&(0x7f0000000600)="c0f135f2296c862ab3d609c051b27fe2078c677d86f1cc1d9165bb78e363b5544b26cd57a478bdaf7a4f287a2efc67e90b789754d7d2bf156faced897301783266138acc89ace2ed618d2898294cc21b9a0308248ce958fdd231758c7e2ee30df9d4de3f00c26b8d504e6c86e1aa886d86bc82f158bfc16922587709e1fa403b7ec6befb22687809e148ed639555f09b591314a8036219ac7efa6da286c221610fde47c4bc112f6f53290968e914d85e1f60ed2a10a4e77ee52be30cb232569356d370992a21ad6f5592090a4575d1", 0xcf, 0x7}, {&(0x7f0000000700)="51ad6eba39d3e497e4ecd33096ec728472b0fb6a51", 0x15, 0x3b}, {&(0x7f0000000740)="7234f826b2068d4ca460e7c89c078bcf28b2291e2c42382eddbad155d0e6cddac31a7ec438e4e553dd80069167e098933554f5a2c46f1b78767789a74b34671c182c6cad5f7b8ea584746c28567af0deff8776666062467308af98e10612805cc98abd5aef4d1876c769025be4324dec584279b0a794a5563a965921", 0x7c, 0x9}, {&(0x7f00000007c0)="1e58e6e83c8c16de0e64c20b46ac5b3b0353bba9431cba36ae83236faa81d8bbc9e3e73f7a6a7859e79e0440620912a559085a82a4cf4b74be1637b584f06142a6f1744b702446af54797b823b1c7df7cb9315a3981063251901fc5ad3a1aba41f50895b923f5c9736d67fd28429ec8f5018c6e1574fde56baf9e039aabb0ee41021d128bc60e77f5880a2395ba80a6af599098fa528d6161822bf8e56314148fec1e0e217ccfb4615c74b8288891c5c3de45d361d88482720540fd841d96f2bae4383bf8dbef2e9dbde1c0bab05bd9f19237351f6c3ea35df9a613a27449e40bf8ed73d724ab67f58d23c04a9c84fb47131f8", 0xf3, 0x79a2}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="eab5bc05c07d4da4e00c830ad43fdf1f707c0c0cc1ccc4933fdbcfc869d52776dfd4b4872ffaee2ea82b124f4e1324f1d865bcef11d3c0eaed102cfed16c48b53b64ad260f7c0b02f7d31a4f88e488c3e4a6e8f0d9502c9e6805202ea8fca92536183dd3cb3c9c43f63bfec78d0a576ecf6fc396317fe9fe", 0x78, 0xbe}, {&(0x7f0000001940)="acd783ddd9b1ee45f50793eadc332f848edee713cf80bd3211daf0c54f806fc6c2df0dc26c8b8e2ba055c1ab9eacbd59addb55da9e50c73eec47540b90ad4510f01eb3a6d7467a0063820a48a4bfc36cd97410de1e8fbcf25adcc8fd6943fd5fba8843f575d65ddcccf63aff3c584055e80edda08fa3b74939ccda92ffb3d75d2a1e667df9ced5012179a218e31f2ee5cb435d7679b2cb7179df88707d26d608d3d72665c2a07606748d61f21f926b2aa75654e4767b1b32595b4de94e604fb47959ba7760710b747d5f9aea2c61354b1195b1e2b7c548106bd65884fc239ea442988b5c4f5df96f1bcdf365ae7363f7df6fdeab5dc0f354a6b55bec2f76e48de89c785c2390dc4b4031cb4ab88136bc4439f76fb2b1ecfea9b2cae51fc1a41f8d21c538ffda15038ae1489c2d4b87b80b071caa2ce3033a8c32543c0c9a482ee72dd1268624c5beb5940c87fe39708ce76f22eeadff0b0c914a95fc8eedcaba2977f16103453b36f9175bb717d0a721bd3e243b1a447a189b5e58f7aea0dd7fafb6495c925a44fe7d687c5f14d454a2150495ff87c26cc31cc6f8c144f483cf3c864bea36fcc8a7006eef122149ddb28b31cd05f4e0d8518af44186354708cca0d49bb1f480f6c453d01c355453e68db5b33ad5e45fabe1497642d094a54cea0717562e305ca5549476aa97631b931bb14e5a5820e29dd43ee336c98d255237ab669ed9998c681f66f5036f10214f4949d7ae4c1c0e7eec783f0337936dbd9a6a6a49737bb4a8c019f93bae6ee2a54b087efb16659e421a23b88944465281a0f5dfd2584770d93e3954bf5e947b6ab7f27d5e5010852d30594578020e59561c636a4dfca09b45001424347130bd725899108ac0e2c0784d10e9ddab3786966a01cb0091c7a8701b6d5c0af6a36cf98a5b0591e7ac5a983145d2740c0c59e444c0c8aa6c4602c3d045260e9c8108605c434d656979f3ef2284c96c59551ea8983bcf2743dc52bda547c5f37ddf769cf1db7e742a54abca2f912e631be92bb011ab1b3033a4ba60cd5bec8e26f0c38a172e648dcfe1fbce1e331de627be3a2367f2d8b31cf997e81162a0d5555cf950fa8e004a1454b5bec17ab4df52cf60d5c8a3034f0ebe2782fb4b122a2f98c8b9ce301c4d0139c4c51396717d37d20d87e8e393da4a735e0d5ee7171d38b8a94a610fd38a30183ac47ff49440eed5780852536ada82e1ecd16d62248f318445169a565bdaffae8c9aeeb3de0a5333d4dcff7a5f488a9af8c3022e59860af7bf3ea2711d752d74cae3fd4ec1991791ec9ae1b82c2c180c72194ec5515a72457ce5ccb4e3b7586c510e541ada239c8a4bc389d434ae68afb429e83ae0818329fd3f66d6600b4187576b58049fbca21dbcf54ca724da078599a948980d8d77f03dcdc515411bb8f6117d7d9353aed31b7492c79e794ec4cca9a3cf8d232f07709cedaf99c0dea8fcd2e87306a3270b9c64c5f1ce29b13f954b7a129297e934a5b6ed8a7cddd9346d6909cc728ee3bfd4e4b3c0e5864a7d5dde185a894108e053662839373decfb2c10334b411ee0ab5e0be1f6c7adad24bc80592b75f703511024c2512a02b6f6905fd849ad655c239e41df80049fce56b3564db3e8ee8d7936d91fe47d7575ae28dd12e7bab89ecd5d786034814376bc9d4d081c510e202d92fba38c5f167d3c9e39a273933e5468cb9b98493701e057f3b15222794f4c5359fca45c9a5ff5902927023ad2178cb909c0674131d7f1d2eaf873d8b50e96600e17475052390c86621ecaef1a0c1999d0d5828e8ec0ae62bab9e2c3a3a2f02fdb7bd0d61403e3c8b7bbcc2899f97d85261934287ec003bafbb9773038f92106813955a16f425405ea607a0b40f5b2d35f56c798a6ac107deece3765b901b4d4825ffce12573552b792cfd4c777068c71b76ce1b11eb59e692152295ec17733ca4ae056ff612c201d97a42d4e0544ad3b1e5ed65557910751e125b235cd794f5eb570f0f9c52a0071a786ae32465256086bec1027858c0e80c353bfaffd8f15776a7da6f080c748ef762cdfcb092fdf5a69a4df7f739995e286fa70497236fd8aee135eea412008ee48da0060184a2802736fb1ebce3ea9088ed293094592283794862d85ea704659ccdf5c19a4f25274ca9f8ff7c7e5118f87b6c8f41747f5f15b6a1367246181ab3c90efd9dc73e7a7b9e05a50bc36c927de1a406081a7ca78366800b8889028b1266127bd0f49c3fc27786fdc54a4ad99e93a81319cd6ca3102d1bdddac264078f6b4bcbb867d5cf4814269a5a743722d51cfb8b6fa778d963082667dbf09356b87b882839132310a16a9fd398a751574c538cd46bc989f0899e6f69422ead7ede28deceb13f9669da9e18f596e7d0fee633d2f3242d4678c7aff7f8406553ecf940817d19df834f62589da11db530300f518d42f4b4e40d1a69ec78f9ae2f29be00b8546af4460e198d623a8e7368b3e4314088f58ffdd959461a79943191126e9bd5e4e932267ffcd97de41cd464a1b2a4e947cfbb7db722ef355816f9baef519beeffcd95dd4afbae00d937529e0ccc06ec874cea1a98761ffb9f05005496ba7f1c761e94d48667eba7b1e2795bec84853fc78a6655ab560ac8d836d1d0acf86982c32033663d7892bcaa9e88241fc0712eef6da997b04b19ea3b9e3d3cefdea1449484ed2d9ef39831a428dfaa8f0f2facc1225a19a44af60b0f16edad3bb7c75fcdc91e9ce9465037161653ac9c4c168d97cf661319c8d6803d69ec13492ae47f4a648df461ef95ca09e3994be6021bd66d958c1c27fd68c793b4dfb70aab52266d973f8796f207ce41f209234e3c1924142cfee93266299dff8d2f7b832b4e1565ed1af084971b4992d2541a9e48a996d4bcda8a9d26d64985f090635b0480a19adaccb1235270e62d91af58e25ef8a086233d6d8b2c319da5eb37e1829a6c0cee0cef6a42ce723db883ef91dd83e4b0b0cf40174ecfcac40659e6dff7b97a47da17af8ea1544f0a445688eac92764f8c3379f927cf31ac82ef0b7a3d8e9ce6eccb6ac23124f50bef5fe0ad0bad182a84daf0195b10573a3b92e2a6bbdf621ab7cb6be99dc1cd0f4d05960c74ccf60db789a36c2ad17612d12d87b5a3b0898e145ffa4365c2def71dab1a10ee865266feff2dc67576916fda6f977ef04618b440f80b89dbd919d3c603b0537045d38269237202f11356171116f9f8802761be8d654c268c3d07e1e33e65d2e62b6fe423a923493b7338f1489f8264114dec927afb43f2aecf5c378673b21c173ad91c2964fbed9cb8d3ee8e0dbc1d917e3174d0a7a694b86198f6b2c1853eac6b4dbf4017e0ac8c489e9ecd2e91402ff7959c89ae2f6bf14274caee0dbbd88929ca3c117959467b0918aa7203e10773b651664c65815e98d2bf3f3ff818ec36fded656bbb7d1459a314bf0c3f653a18b39edf8c6e18488fc9cac2586338917ef4235e935e30b69f0e6e4a82ba22a0cbfb55223fbab01733b3fd30ccc9afc9b1aad37874fee97558175182a1018ee91ec89aabaf4dc1f7b5bf09aba2686a406ff330d4c66699a5de7b49cac534de841eeccbd05f0b0d40975616c7887651b3bd51803b3b83c68db309a50bc871ff9a658463548a7c88795834dfe98f723430c4330b537bc3cd0662855bc572c47f22b6dc5d3ff59d5d654ccd35b80daeafe0f1530072b7909649bb1afb78ef95b94d61615ca40e21c6e8e60dfd27cbe2604b34aa90f2d85756d93e6ea71d29e713f198c123e3d9be346b7ba2177b739d097f3d634059c8703c6a116bec898df3662115edbebc462aa2113130c6f0373b28830246fea9dc807f9d257c760b37e6d1381d169891000e471adbe40f029feb38cf33424ad155a9a3e7e66550802fc833ed584e91b033efc12a9a5d2340e291ae8a8626e31f76af671d080ce9354e951f161fd21df8a0325037679b8a86d05b31535114ea735a027738120d78f7f5003bf57446dfa49b25d72c409200c2b6e282ee20c7eb6243a832fdfff994ba5916f13476ece74c4b874da8ef8c5921d93327ef789a5ec65377a04e8892e446def7a7200863018dd803b71286c2fceeb755689f68d155804d316b026c2f0f35c74e467199214d0bfe1c49f5988aa63d80dc032b2c61ed4d48c5abd1144f80a5792fbaaaed7ed810f17f14e4cbaa52af4b1322128c639d0ed436c73e69cfcf942ed88b587a97e388480bec60efaa475418e3cf5a51e742aa0a5944c213e48e711680f2ac8594a88746e7084cca95a4908848b46adb45b3fd7ba0f41acdbf1c2f7057cbc73e25067f8d9ee7e6e6d2df41a887268e0a3320b146d0e8ff45d5e60d40f2fc0d5ea6372a3e1a19aaec1f4e35b194d9eda047bf44a3849b2f339224a1c435cb91a6bb639aa015afe8bcf9954722b3576137b7c1bdb2e52d2c2439471e56a7b746dc347abdc160c847a49f6a6ccd20bb6471989e4d11ae817a2c3bdeb550a6ffce23dc25effcc5bac3473c088eb80b7f1ab49474c8cfcb22bc7af45028f1f00eca077991e2ea963ae8ae5a079e541910abfdfdf19fa187b8cfffc723423504609383e907ab30ab1fad4c56f78b768f23bff30b9abbdfaed52adf86b7614b3cd5582b85cb1c684ec4c0643b6ff21e1ff0301fc5ee7107734119b8b72f3283ee69da5899f1fa181dc2254b94bf436aa8dace0e3cdee30ffd2c0d635cee072879bf43a4a2d430bf9debc4d344e875f879c23f5f99879cd3e1f200104c9f7e0de572222c3207e32464af358c66d3074372c051c899dada3a1732b7f5963ee3dc31d9673345a061e0032c94c7aeb02779980b085bc6b7c4c03898da552d975f7cf9163fab413d2962e8cac21c2cfe95a7e38510861f3e79982fc3aabcebf651a5a94ff5f79be0b0401d640238d416295c29ef7764564ff55a9ae4b38b82a0e695fb49290f0f8bd9a3689a4f92fca5daa7ada3c964d96944ec9bbd7bcc4b9ccec9cd00bcd1400798d829947da575b4384d4e6801ca08c313e2042fe91ff4d0e921c8baedaef7d6dfe01c681cc40b567a55b600f63de598d630df4c2bf51b28de2bf5f14565f1b526fefc6e0ba7aab106faf7c4113ae75cee8a04500fa951c5fef6fb2647c40810ce73dc3ecc95c4dd17b6c2505d77d03f7394287f7cf49886535f0f3a0e86cf09586921fe299ac4d7d77b02cfe3aa63f6f742d8f2626aadbc011a65a559be82e0e5eee9e374f9935358f456e6c6775a95d0be0e080e6430deb2cb63853bdbf9b9ee9f381870a4422319150d1a77bdc94993a57d49983b8ff27cd11360bbabdf14015622d29952e5ef6e07416fbab1ad4c9d7824e2b67b61b1f681976bd7a59ab9561a975ef4b7d4da44ca48e7b5415608d7540ad61f72059eb6384c086f8b6bfbbdba2cfcce33278325024274b8db90978867a8dc67d3e75d9b7eb65984df4590c981408c9882eca6af6d4fb5f450f0ad94c5d4173d926f1bfc33c05fff96f603b52d4ed4c43b0953d41ef72b360da2792841c4e5e773b4f76106109cb8f779da4781664dcb01a3ebf10c29dd483b55b21955953f518678cc00413a5664867e94b6852e9dd5b74313b47adca4f4e3362fb4c7e0e9f3c19901614e768902f88f4dca455d439475474812259bc55dc5b6c3f3f5d1f00e16d3360f4aee644dcd6e2b39a6c2020146fba76c04dc1bcc8263a3d449ef0d27b6ea356c672d810b0bfed6bf7642f6fee369f759ea06b7f1f6d4044185de420bd0ae367ffe1a4edf51221658e4c80d1ef3983eead02", 0x1000, 0xffffffff0}], 0x800000, &(0x7f0000002a40)={[{@numtail='nonumtail=0'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'tls\x00'}}, {@audit='audit'}, {@audit='audit'}, {@appraise_type='appraise_type=imasig'}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x6, &(0x7f0000000040)) r4 = inotify_init1(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000002a80)={@local}, &(0x7f0000002ac0)=0x14) fcntl$getownex(r4, 0x24, &(0x7f000045fff8)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x400000, 0x0) [ 667.989905] ? zap_class+0x640/0x640 [ 667.993655] ? path_lookupat.isra.43+0xc00/0xc00 [ 667.998432] ? unwind_get_return_address+0x61/0xa0 [ 668.003385] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 668.008776] ? expand_files.part.8+0x571/0x9a0 [ 668.008802] ? find_held_lock+0x36/0x1c0 [ 668.008831] ? __alloc_fd+0x347/0x6e0 [ 668.008847] ? lock_downgrade+0x900/0x900 [ 668.008869] ? getname+0x19/0x20 [ 668.021322] ? kasan_check_read+0x11/0x20 [ 668.021341] ? do_raw_spin_unlock+0xa7/0x330 [ 668.021359] ? do_raw_spin_trylock+0x270/0x270 11:02:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xc00e0000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 668.021377] ? __lock_is_held+0xb5/0x140 [ 668.046078] ? __check_object_size+0xb1/0x782 [ 668.050736] ? _raw_spin_unlock+0x2c/0x50 [ 668.054901] ? __alloc_fd+0x347/0x6e0 [ 668.054941] do_filp_open+0x255/0x380 [ 668.054966] ? may_open_dev+0x100/0x100 [ 668.062587] ? get_unused_fd_flags+0x122/0x1a0 [ 668.062607] ? __alloc_fd+0x6e0/0x6e0 [ 668.062645] ? do_syscall_64+0x6be/0x820 [ 668.079194] do_sys_open+0x568/0x700 [ 668.082928] ? filp_open+0x80/0x80 [ 668.086498] ? trace_hardirqs_off_caller+0x310/0x310 [ 668.091624] __x64_sys_open+0x7e/0xc0 [ 668.095436] do_syscall_64+0x1b9/0x820 [ 668.099332] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 668.104705] ? syscall_return_slowpath+0x5e0/0x5e0 [ 668.109643] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 668.114495] ? trace_hardirqs_on_caller+0x310/0x310 [ 668.119523] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 668.124545] ? prepare_exit_to_usermode+0x291/0x3b0 [ 668.129573] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 668.134560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.139753] RIP: 0033:0x4111a1 [ 668.142953] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 668.161865] RSP: 002b:00007f995f41d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 668.169587] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 668.176869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f41d850 [ 668.184152] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 11:02:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@empty, 0x0}, &(0x7f0000000140)=0x14) bind$packet(r1, &(0x7f0000000180)={0x11, 0xf7, r2}, 0x14) [ 668.191429] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f41e6d4 [ 668.198702] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 11:02:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 668.345155] FAT-fs (loop3): Unrecognized mount option "smackfsfloor=tls" or missing value 11:02:16 executing program 1 (fault-call:2 fault-nth:7): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, 0x20}}, 0x0) 11:02:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf0ffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:16 executing program 3: r0 = memfd_create(&(0x7f00000000c0)=',%\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc058534b, &(0x7f0000000000)={0x800000000016, @time={0x0, 0x989680}}) timer_create(0x6, &(0x7f0000000080)={0x0, 0x30, 0x6}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {r4, r5+10000000}}, 0x0) 11:02:16 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) 11:02:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x544}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000180)="7a7347ee30fdff0b78c86955899f0b29c46d24b842d4fa9060a5cc6b9c67e6f32b705d5766de5049a6fc711ca4beae68b5697bdd2388242222f109ee48fe4ad76d49e25f827581ceb055793589a76e72b5d6ab5db63974e3e6f5820f5249f96fbaaeb813308c7f2b64a11f7105118599b6a099b0b6f3c2deb8d6e3391687878c7d50fb39a439f3f2343cf4cf9e29b6ba3f9c671f67f2dca623f0f2cfcdfb069c83b50d87b7aab72cb47c88c9a4152bcdcd1674d449f47ead7636ec13055c9afa") ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") accept4(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x80800) accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x800) unshare(0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000240)) [ 668.677698] FAULT_INJECTION: forcing a failure. [ 668.677698] name failslab, interval 1, probability 0, space 0, times 0 [ 668.707880] CPU: 1 PID: 7098 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 668.714844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.724232] Call Trace: [ 668.724272] dump_stack+0x244/0x39d [ 668.724300] ? dump_stack_print_info.cold.1+0x20/0x20 [ 668.724320] ? finish_wait+0x25d/0x430 [ 668.724348] should_fail.cold.4+0xa/0x17 [ 668.724371] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 668.724397] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 668.724454] ? open_wait+0x7f9/0xa20 [ 668.724485] ? sg_poll+0x5c0/0x5c0 [ 668.761698] ? zap_class+0x640/0x640 [ 668.765437] ? mark_held_locks+0x130/0x130 [ 668.769766] ? socket_match.isra.4+0x60/0x740 [ 668.769787] ? finish_wait+0x430/0x430 [ 668.778208] ? perf_trace_sched_process_exec+0x860/0x860 [ 668.783678] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 668.788807] ? __might_sleep+0x95/0x190 [ 668.788834] __should_failslab+0x124/0x180 [ 668.788855] should_failslab+0x9/0x14 [ 668.800862] kmem_cache_alloc_trace+0x4b/0x750 [ 668.805475] sg_open+0x56f/0x1330 [ 668.808958] ? sg_build_reserve+0x1c0/0x1c0 [ 668.813383] ? m_show+0x5d0/0x5d0 [ 668.816857] ? chrdev_open+0xde/0x710 [ 668.820672] ? lock_downgrade+0x900/0x900 [ 668.820699] ? kasan_check_read+0x11/0x20 [ 668.820717] ? do_raw_spin_unlock+0xa7/0x330 [ 668.820738] ? do_raw_spin_trylock+0x270/0x270 [ 668.829033] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 668.829051] ? refcount_inc_checked+0x29/0x70 [ 668.829081] ? sg_build_reserve+0x1c0/0x1c0 [ 668.852400] chrdev_open+0x25a/0x710 [ 668.856147] ? apparmor_capable+0x6c0/0x6c0 [ 668.860497] ? cdev_put.part.0+0x50/0x50 [ 668.864583] ? errseq_sample+0xe5/0x130 [ 668.868607] do_dentry_open+0x499/0x1250 [ 668.872709] ? cdev_put.part.0+0x50/0x50 11:02:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x40030000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 668.876792] ? chown_common+0x730/0x730 [ 668.880781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.886330] ? security_inode_permission+0xd2/0x100 [ 668.886354] ? inode_permission+0xb2/0x560 [ 668.886382] vfs_open+0xa0/0xd0 [ 668.886402] path_openat+0x12bc/0x5150 [ 668.895662] ? lock_is_held_type+0x210/0x210 [ 668.895677] ? unwind_dump+0x190/0x190 [ 668.895716] ? path_lookupat.isra.43+0xc00/0xc00 [ 668.895735] ? unwind_get_return_address+0x61/0xa0 [ 668.920864] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 668.925897] ? expand_files.part.8+0x571/0x9a0 [ 668.930497] ? find_held_lock+0x36/0x1c0 [ 668.934586] ? __alloc_fd+0x347/0x6e0 [ 668.938417] ? lock_downgrade+0x900/0x900 [ 668.942576] ? getname+0x19/0x20 [ 668.945983] ? kasan_check_read+0x11/0x20 [ 668.950158] ? do_raw_spin_unlock+0xa7/0x330 [ 668.954585] ? do_raw_spin_trylock+0x270/0x270 [ 668.959194] ? __lock_is_held+0xb5/0x140 [ 668.963273] ? __check_object_size+0xb1/0x782 [ 668.967796] ? _raw_spin_unlock+0x2c/0x50 [ 668.971968] ? __alloc_fd+0x347/0x6e0 [ 668.975805] do_filp_open+0x255/0x380 [ 668.979632] ? may_open_dev+0x100/0x100 [ 668.983658] ? get_unused_fd_flags+0x122/0x1a0 [ 668.988262] ? __alloc_fd+0x6e0/0x6e0 [ 668.992093] ? do_syscall_64+0x6be/0x820 [ 668.996186] do_sys_open+0x568/0x700 [ 668.999938] ? filp_open+0x80/0x80 [ 669.003499] ? trace_hardirqs_off_caller+0x310/0x310 [ 669.008643] __x64_sys_open+0x7e/0xc0 [ 669.012462] do_syscall_64+0x1b9/0x820 [ 669.016363] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 669.021745] ? syscall_return_slowpath+0x5e0/0x5e0 [ 669.026691] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 669.031562] ? trace_hardirqs_on_caller+0x310/0x310 [ 669.036603] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 669.041672] ? prepare_exit_to_usermode+0x291/0x3b0 [ 669.046716] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 669.051590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.056805] RIP: 0033:0x4111a1 [ 669.060014] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 11:02:17 executing program 1 (fault-call:2 fault-nth:8): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80800, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'bcsf0\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xf, 0x5, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xffffffc5, 0x1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48) 11:02:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xd00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x20}}, 0x0) 11:02:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x44, 0x50200) [ 669.078935] RSP: 002b:00007f995f41d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 669.086666] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 669.093949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f41d850 [ 669.101231] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 669.108514] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f41e6d4 [ 669.115815] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 11:02:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xff00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x20}}, 0x0) 11:02:17 executing program 0: pipe(&(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:17 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x315) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xf4f, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000340)) fchown(r2, r3, r4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r2, 0x18) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local, [0x4]}], 0x10) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000380)={{0x1, 0x5, 0x0, 0x3989639b, 0x8, 0x5}, 0x20, 0xe8f, 0x0, 0x7, 0xfffffffffffffffe, "b7d08920c98aac5bbc63e6048aee6050ffe40e36f4bd9cca7792b38335e3042056a80061d2114f4e25fd3c863d11670339cb4fa2559179ea514c433842dae6475b954334ded5d3fed809489c3c2421cdf95430b4d85f427c402b62b6b2c4c30e4c81182a07ac57cfa021111b5914075ae03709bf6103f69d15bb376252f8cd9e"}) [ 669.296995] FAULT_INJECTION: forcing a failure. [ 669.296995] name failslab, interval 1, probability 0, space 0, times 0 [ 669.340034] CPU: 1 PID: 7138 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 669.347011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.347019] Call Trace: [ 669.347045] dump_stack+0x244/0x39d [ 669.347072] ? dump_stack_print_info.cold.1+0x20/0x20 [ 669.347092] ? finish_wait+0x25d/0x430 [ 669.347121] should_fail.cold.4+0xa/0x17 [ 669.347153] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 669.347180] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 669.347197] ? open_wait+0x7f9/0xa20 [ 669.347224] ? sg_poll+0x5c0/0x5c0 [ 669.362831] ? zap_class+0x640/0x640 [ 669.397536] ? mark_held_locks+0x130/0x130 [ 669.401887] ? unhash_ol_stateid+0x2a0/0x6f0 [ 669.406320] ? finish_wait+0x430/0x430 [ 669.410243] ? perf_trace_sched_process_exec+0x860/0x860 [ 669.415735] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 669.420871] ? __might_sleep+0x95/0x190 [ 669.424880] __should_failslab+0x124/0x180 [ 669.429149] should_failslab+0x9/0x14 [ 669.432966] kmem_cache_alloc_trace+0x4b/0x750 11:02:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 669.437581] sg_open+0x56f/0x1330 [ 669.441072] ? sg_build_reserve+0x1c0/0x1c0 [ 669.445419] ? m_show+0x5d0/0x5d0 [ 669.448897] ? chrdev_open+0xde/0x710 [ 669.452713] ? lock_downgrade+0x900/0x900 [ 669.456891] ? kasan_check_read+0x11/0x20 [ 669.461053] ? do_raw_spin_unlock+0xa7/0x330 [ 669.465478] ? do_raw_spin_trylock+0x270/0x270 [ 669.470079] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 669.475643] ? refcount_inc_checked+0x29/0x70 [ 669.480170] ? sg_build_reserve+0x1c0/0x1c0 [ 669.484512] chrdev_open+0x25a/0x710 [ 669.488246] ? apparmor_capable+0x6c0/0x6c0 [ 669.492586] ? cdev_put.part.0+0x50/0x50 [ 669.496682] ? errseq_sample+0xe5/0x130 [ 669.500690] do_dentry_open+0x499/0x1250 [ 669.504772] ? cdev_put.part.0+0x50/0x50 [ 669.508857] ? chown_common+0x730/0x730 [ 669.512852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.518408] ? security_inode_permission+0xd2/0x100 [ 669.523445] ? inode_permission+0xb2/0x560 [ 669.527710] vfs_open+0xa0/0xd0 [ 669.531003] path_openat+0x12bc/0x5150 [ 669.534910] ? lock_is_held_type+0x210/0x210 11:02:17 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 669.539329] ? unwind_dump+0x190/0x190 [ 669.543252] ? path_lookupat.isra.43+0xc00/0xc00 [ 669.548023] ? unwind_get_return_address+0x61/0xa0 [ 669.552966] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 669.557997] ? expand_files.part.8+0x571/0x9a0 [ 669.562644] ? find_held_lock+0x36/0x1c0 [ 669.566742] ? __alloc_fd+0x347/0x6e0 [ 669.570566] ? lock_downgrade+0x900/0x900 [ 669.574731] ? getname+0x19/0x20 [ 669.578124] ? kasan_check_read+0x11/0x20 [ 669.582297] ? do_raw_spin_unlock+0xa7/0x330 [ 669.586730] ? do_raw_spin_trylock+0x270/0x270 [ 669.591358] ? __lock_is_held+0xb5/0x140 [ 669.595441] ? __check_object_size+0xb1/0x782 [ 669.599977] ? _raw_spin_unlock+0x2c/0x50 [ 669.604153] ? __alloc_fd+0x347/0x6e0 [ 669.608024] do_filp_open+0x255/0x380 [ 669.611859] ? may_open_dev+0x100/0x100 [ 669.615879] ? get_unused_fd_flags+0x122/0x1a0 [ 669.620478] ? __alloc_fd+0x6e0/0x6e0 [ 669.624303] ? do_syscall_64+0x6be/0x820 [ 669.628389] do_sys_open+0x568/0x700 [ 669.632131] ? filp_open+0x80/0x80 [ 669.635701] ? trace_hardirqs_off_caller+0x310/0x310 [ 669.640836] __x64_sys_open+0x7e/0xc0 [ 669.644663] do_syscall_64+0x1b9/0x820 [ 669.648573] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 669.653952] ? syscall_return_slowpath+0x5e0/0x5e0 [ 669.658903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 669.663767] ? trace_hardirqs_on_caller+0x310/0x310 [ 669.668807] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 669.673842] ? prepare_exit_to_usermode+0x291/0x3b0 [ 669.678899] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 669.683771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.688976] RIP: 0033:0x4111a1 [ 669.692189] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 669.711112] RSP: 002b:00007f995f41d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 669.718850] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 669.726129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f41d850 [ 669.733416] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 11:02:17 executing program 1 (fault-call:2 fault-nth:9): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x9000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 669.739902] IPVS: ftp: loaded support on port[0] = 21 [ 669.740692] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f41e6d4 [ 669.740704] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 11:02:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}}, 0x20}}, 0x0) 11:02:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @local}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', r1}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000100)=""/114, &(0x7f0000000180)=0x72) ioctl(r0, 0x20, &(0x7f0000000280)="153f6234488dd25d766070") socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0x2, @ipv4={[], [], @broadcast}, 0x2f878a28}, {0xa, 0x4e22, 0x200, @loopback, 0x3}, 0x9, [0x7f, 0x2, 0x100000000, 0x1ff, 0x3, 0x80000000, 0x8, 0x5]}, 0x5c) unshare(0x42000400) 11:02:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xb000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 669.915590] FAULT_INJECTION: forcing a failure. [ 669.915590] name failslab, interval 1, probability 0, space 0, times 0 [ 669.929665] IPVS: ftp: loaded support on port[0] = 21 [ 669.947133] CPU: 0 PID: 7170 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 669.954087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.954096] Call Trace: [ 669.954122] dump_stack+0x244/0x39d [ 669.954149] ? dump_stack_print_info.cold.1+0x20/0x20 [ 669.974918] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 669.974950] should_fail.cold.4+0xa/0x17 [ 669.984289] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 669.984309] ? kernel_text_address+0x79/0xf0 [ 669.984328] ? __kernel_text_address+0xd/0x40 [ 669.993876] ? unwind_get_return_address+0x61/0xa0 [ 669.993896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 669.993917] ? check_preemption_disabled+0x48/0x280 [ 670.003382] ? debug_smp_processor_id+0x1c/0x20 [ 670.003399] ? perf_trace_lock+0x14d/0x7a0 [ 670.003422] ? lock_is_held_type+0x210/0x210 [ 670.013976] ? save_stack+0x43/0xd0 [ 670.022897] ? kmem_cache_alloc_trace+0x152/0x750 [ 670.022916] ? chrdev_open+0x25a/0x710 [ 670.022933] ? do_dentry_open+0x499/0x1250 [ 670.022953] ? vfs_open+0xa0/0xd0 [ 670.030988] ? path_openat+0x12bc/0x5150 [ 670.031005] ? do_filp_open+0x255/0x380 [ 670.031021] ? do_sys_open+0x568/0x700 [ 670.031042] ? __x64_sys_open+0x7e/0xc0 [ 670.044005] ? zap_class+0x640/0x640 [ 670.044050] __should_failslab+0x124/0x180 [ 670.055526] should_failslab+0x9/0x14 [ 670.055543] __kmalloc+0x63/0x760 [ 670.055568] ? mark_held_locks+0xc7/0x130 [ 670.071369] ? sg_build_indirect.isra.15+0x11f/0x9f0 [ 670.071394] sg_build_indirect.isra.15+0x11f/0x9f0 [ 670.071416] ? do_raw_write_lock+0x14f/0x310 [ 670.082826] ? trace_hardirqs_off_caller+0x310/0x310 [ 670.082847] ? init_wait_entry+0x1c0/0x1c0 [ 670.082869] sg_build_reserve+0xdd/0x1c0 [ 670.082889] sg_open+0xaef/0x1330 [ 670.092933] ? sg_build_reserve+0x1c0/0x1c0 [ 670.092956] ? m_show+0x5d0/0x5d0 [ 670.092976] ? chrdev_open+0xde/0x710 [ 670.102486] ? lock_downgrade+0x900/0x900 [ 670.102514] ? kasan_check_read+0x11/0x20 [ 670.102537] ? do_raw_spin_trylock+0x270/0x270 [ 670.102559] ? refcount_inc_checked+0x29/0x70 [ 670.102583] ? sg_build_reserve+0x1c0/0x1c0 [ 670.111069] chrdev_open+0x25a/0x710 [ 670.111089] ? apparmor_capable+0x6c0/0x6c0 [ 670.111110] ? cdev_put.part.0+0x50/0x50 [ 670.111131] ? errseq_sample+0xe5/0x130 [ 670.118922] do_dentry_open+0x499/0x1250 [ 670.118942] ? cdev_put.part.0+0x50/0x50 [ 670.118963] ? chown_common+0x730/0x730 [ 670.118981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.119000] ? security_inode_permission+0xd2/0x100 [ 670.119020] ? inode_permission+0xb2/0x560 [ 670.126289] vfs_open+0xa0/0xd0 [ 670.126315] path_openat+0x12bc/0x5150 [ 670.134601] ? lock_is_held_type+0x210/0x210 [ 670.134627] ? unwind_dump+0x190/0x190 [ 670.134672] ? path_lookupat.isra.43+0xc00/0xc00 [ 670.143755] ? unwind_get_return_address+0x61/0xa0 11:02:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xd000000}}, 0x20}}, 0x0) [ 670.143773] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 670.143793] ? expand_files.part.8+0x571/0x9a0 [ 670.143815] ? find_held_lock+0x36/0x1c0 [ 670.151853] ? __alloc_fd+0x347/0x6e0 [ 670.151873] ? lock_downgrade+0x900/0x900 [ 670.151893] ? getname+0x19/0x20 [ 670.160282] ? kasan_check_read+0x11/0x20 [ 670.160300] ? do_raw_spin_unlock+0xa7/0x330 [ 670.160317] ? do_raw_spin_trylock+0x270/0x270 [ 670.160333] ? __lock_is_held+0xb5/0x140 [ 670.160350] ? __check_object_size+0xb1/0x782 11:02:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xd00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 670.160378] ? _raw_spin_unlock+0x2c/0x50 [ 670.168408] ? __alloc_fd+0x347/0x6e0 [ 670.168445] do_filp_open+0x255/0x380 [ 670.168465] ? may_open_dev+0x100/0x100 [ 670.176510] ? get_unused_fd_flags+0x122/0x1a0 [ 670.176533] ? __alloc_fd+0x6e0/0x6e0 [ 670.176558] ? do_syscall_64+0x6be/0x820 [ 670.187111] do_sys_open+0x568/0x700 [ 670.187136] ? filp_open+0x80/0x80 [ 670.187156] ? trace_hardirqs_off_caller+0x310/0x310 [ 670.187182] __x64_sys_open+0x7e/0xc0 [ 670.187208] do_syscall_64+0x1b9/0x820 [ 670.194723] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 11:02:18 executing program 1 (fault-call:2 fault-nth:10): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 670.194745] ? syscall_return_slowpath+0x5e0/0x5e0 [ 670.194761] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 670.194780] ? trace_hardirqs_on_caller+0x310/0x310 [ 670.206956] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 670.206977] ? prepare_exit_to_usermode+0x291/0x3b0 [ 670.207002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 670.207030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.207044] RIP: 0033:0x4111a1 [ 670.207060] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 670.207067] RSP: 002b:00007f995f41d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 670.207083] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 670.207091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f41d850 [ 670.207101] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 670.207116] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f41e6d4 [ 670.221799] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 11:02:18 executing program 3: prctl$intptr(0x2000000000000012, 0x0) 11:02:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x700}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 670.528127] FAULT_INJECTION: forcing a failure. [ 670.528127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 670.567514] CPU: 1 PID: 7192 Comm: syz-executor1 Not tainted 4.19.0+ #302 [ 670.574519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.583898] Call Trace: [ 670.583927] dump_stack+0x244/0x39d [ 670.583953] ? dump_stack_print_info.cold.1+0x20/0x20 [ 670.583980] ? is_bpf_text_address+0xac/0x170 [ 670.584005] should_fail.cold.4+0xa/0x17 [ 670.595422] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 670.609073] ? rcu_softirq_qs+0x20/0x20 [ 670.609093] ? rcu_softirq_qs+0x20/0x20 [ 670.609107] ? unwind_dump+0x190/0x190 [ 670.609136] ? is_bpf_text_address+0xd3/0x170 [ 670.609162] ? kernel_text_address+0x79/0xf0 [ 670.617109] ? __kernel_text_address+0xd/0x40 [ 670.617127] ? unwind_get_return_address+0x61/0xa0 [ 670.617155] ? __save_stack_trace+0x8d/0xf0 [ 670.617190] ? save_stack+0xa9/0xd0 [ 670.617207] ? save_stack+0x43/0xd0 [ 670.617221] ? kasan_kmalloc+0xc7/0xe0 [ 670.617241] ? __kmalloc+0x14e/0x760 [ 670.630046] ? sg_build_indirect.isra.15+0x11f/0x9f0 [ 670.630061] ? sg_build_reserve+0xdd/0x1c0 [ 670.630074] ? sg_open+0xaef/0x1330 [ 670.630091] ? chrdev_open+0x25a/0x710 [ 670.630113] ? do_dentry_open+0x499/0x1250 [ 670.639539] ? vfs_open+0xa0/0xd0 [ 670.639555] ? path_openat+0x12bc/0x5150 [ 670.639571] ? do_filp_open+0x255/0x380 [ 670.639587] ? do_sys_open+0x568/0x700 [ 670.639602] ? __x64_sys_open+0x7e/0xc0 [ 670.639631] ? do_syscall_64+0x1b9/0x820 [ 670.639656] __alloc_pages_nodemask+0x34b/0xde0 [ 670.639679] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 670.647639] ? zap_class+0x640/0x640 [ 670.655164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.655184] ? check_preemption_disabled+0x48/0x280 [ 670.655211] ? __lock_is_held+0xb5/0x140 [ 670.655241] ? rcu_read_lock_sched_held+0x14f/0x180 [ 670.664044] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 670.664070] alloc_pages_current+0x173/0x350 [ 670.664096] sg_build_indirect.isra.15+0x3cd/0x9f0 [ 670.664112] ? do_raw_write_lock+0x14f/0x310 [ 670.664140] sg_build_reserve+0xdd/0x1c0 [ 670.671991] sg_open+0xaef/0x1330 [ 670.672019] ? sg_build_reserve+0x1c0/0x1c0 [ 670.672041] ? m_show+0x5d0/0x5d0 [ 670.672057] ? chrdev_open+0xde/0x710 [ 670.672076] ? lock_downgrade+0x900/0x900 [ 670.680201] ? kasan_check_read+0x11/0x20 [ 670.680224] ? do_raw_spin_trylock+0x270/0x270 [ 670.680249] ? refcount_inc_checked+0x29/0x70 [ 670.680271] ? sg_build_reserve+0x1c0/0x1c0 [ 670.688201] chrdev_open+0x25a/0x710 [ 670.688219] ? apparmor_capable+0x6c0/0x6c0 [ 670.688239] ? cdev_put.part.0+0x50/0x50 [ 670.688260] ? errseq_sample+0xe5/0x130 [ 670.688301] do_dentry_open+0x499/0x1250 [ 670.696155] ? cdev_put.part.0+0x50/0x50 [ 670.696180] ? chown_common+0x730/0x730 [ 670.696198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 670.696221] ? security_inode_permission+0xd2/0x100 [ 670.704251] ? inode_permission+0xb2/0x560 [ 670.704279] vfs_open+0xa0/0xd0 [ 670.704305] path_openat+0x12bc/0x5150 [ 670.723231] ? lock_is_held_type+0x210/0x210 [ 670.723247] ? unwind_dump+0x190/0x190 [ 670.723284] ? path_lookupat.isra.43+0xc00/0xc00 [ 670.732351] ? unwind_get_return_address+0x61/0xa0 [ 670.732370] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 670.732391] ? expand_files.part.8+0x571/0x9a0 [ 670.732416] ? find_held_lock+0x36/0x1c0 [ 670.742978] ? __alloc_fd+0x347/0x6e0 [ 670.742998] ? lock_downgrade+0x900/0x900 [ 670.743013] ? getname+0x19/0x20 [ 670.743037] ? kasan_check_read+0x11/0x20 [ 670.743061] ? do_raw_spin_unlock+0xa7/0x330 [ 670.751349] IPVS: ftp: loaded support on port[0] = 21 [ 670.752411] ? do_raw_spin_trylock+0x270/0x270 [ 670.752428] ? __lock_is_held+0xb5/0x140 [ 670.752445] ? __check_object_size+0xb1/0x782 [ 670.752472] ? _raw_spin_unlock+0x2c/0x50 [ 670.764390] ? __alloc_fd+0x347/0x6e0 [ 670.764429] do_filp_open+0x255/0x380 [ 670.764448] ? may_open_dev+0x100/0x100 [ 670.772238] ? get_unused_fd_flags+0x122/0x1a0 [ 670.772258] ? __alloc_fd+0x6e0/0x6e0 [ 670.772279] ? do_syscall_64+0x6be/0x820 [ 670.780227] do_sys_open+0x568/0x700 [ 670.780252] ? filp_open+0x80/0x80 [ 670.780278] ? trace_hardirqs_off_caller+0x310/0x310 [ 670.789019] __x64_sys_open+0x7e/0xc0 [ 670.789042] do_syscall_64+0x1b9/0x820 [ 670.789061] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 670.789080] ? syscall_return_slowpath+0x5e0/0x5e0 [ 670.789095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 670.789113] ? trace_hardirqs_on_caller+0x310/0x310 [ 670.789134] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 670.797960] ? prepare_exit_to_usermode+0x291/0x3b0 [ 670.797986] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 670.798014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.798027] RIP: 0033:0x4111a1 [ 670.798044] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 670.798059] RSP: 002b:00007f995f41d7a0 EFLAGS: 00000293 [ 670.806083] ORIG_RAX: 0000000000000002 [ 670.806094] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 670.806103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f995f41d850 [ 670.806112] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 670.806122] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f995f41e6d4 [ 670.806132] R13: 00000000004c4d12 R14: 00000000004d8100 R15: 0000000000000005 [ 671.349272] device bridge_slave_1 left promiscuous mode [ 671.354835] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.408165] device bridge_slave_0 left promiscuous mode [ 671.413699] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.549267] team0 (unregistering): Port device team_slave_1 removed [ 671.577758] team0 (unregistering): Port device team_slave_0 removed [ 671.591968] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 671.644298] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 671.759519] bond0 (unregistering): Released all slaves [ 672.420436] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.427378] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.443649] device bridge_slave_0 entered promiscuous mode [ 672.557394] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.563874] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.583528] device bridge_slave_1 entered promiscuous mode [ 672.695962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 672.817015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 673.098958] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 673.198071] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 673.537035] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 673.544599] team0: Port device team_slave_0 added [ 673.621415] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 673.629070] team0: Port device team_slave_1 added [ 673.676195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 673.728350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 673.847257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 673.854433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 673.866063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 673.933462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 673.940755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 673.952548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.469432] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.475859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.482671] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.489112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.497519] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 674.897092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 675.576644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.675656] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 675.771916] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 675.778273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 675.785290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 675.880306] 8021q: adding VLAN 0 to HW filter on device team0 11:02:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, 0x20}}, 0x0) 11:02:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xffffffa6}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000200)={"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"}) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) getdents(r0, &(0x7f0000000040)=""/124, 0x7c) 11:02:24 executing program 1 (fault-call:2 fault-nth:11): r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x80) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x0, 0x4, &(0x7f0000000080)=0xfffffffffffffff8}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xa000000}}, 0x20}}, 0x0) 11:02:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:24 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1, 0x0, 0x3, 0x5}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x20000) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0xaeeb, 0x4) 11:02:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:24 executing program 3: r0 = epoll_create1(0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) openat$vnet(0xffffffffffffff9c, 0xffffffffffffffff, 0x2, 0x0) 11:02:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x600000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xf000000}}, 0x20}}, 0x0) 11:02:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x44050000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='//ev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:25 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x20}}, 0x0) 11:02:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) r2 = getpgid(0xffffffffffffffff) setpgid(r1, r2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20000000000) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0xc000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3}) 11:02:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x7}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/.ev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xcd76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:25 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) connect(r0, &(0x7f00000003c0)=@ethernet={0x6, @broadcast}, 0x80) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f00000002c0)={0xffffffffffff0001, 0x38a, 0xc0c}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x81, @mcast1, 0x7}}, 0xfffffffffffffffd, 0x7}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="adf0ffef00000000000000000000"], 0x12) r5 = socket(0x1b, 0x4, 0x80000001) unshare(0x400) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x0, r5, 0x5883, 0x80000001}) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) fgetxattr(r2, &(0x7f0000000300)=@known='trusted.overlay.nlink\x00', &(0x7f0000000340)=""/114, 0x72) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000200)={r6, 0x2}) 11:02:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xa00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}}, 0x20}}, 0x0) 11:02:25 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x4, 0x0, 0x5, 0x4, 0x2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r0, 0x35c2f8a16ae2760f, 0x1, 0x4, &(0x7f00000001c0)=[0x0], 0x1}, 0x20) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x80000000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0xd9, 0x9, 0x1000, "0f043df2b6a0332ff74027cb9f3ad9c53aac4075f5894433a6829e1da73539c669cc2abc3fccf82484f8153498efd85d374eb8daf74a68a29cd13b8b217d866ae61d88d508e393e4400d378dc6b37b70e32198f65bf70c0cba94f4e9012985d5de8ba91214e4c9db870cf3fe374feb9256eb68b085d53ec0b6a80e4ef3f25f4385fae459b48e386fb86956b6ada5b5bd3a2a5cbded81aa99f1bceadc9bdaf88ae78956878aaaa96eaf28b792f836fa6b29f69d753e186aa2e336bc12f4b136709bfa35a995e297ca497c6464e90c311b52e613df90274757f5"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000340)={0x84, 0x9, 0x100, "539e1679454d181f600cd71a24832d4fb2b25e42401d61cba1d0f1584f19a1ad29465d9c07f4a0832c1caea7fd03e5533641ac22a174aeaececdc3249830c72d1d153f4cb081755e1bb0d84e9199624b162f0bb712aa12e1d074ef172b25493852c1b2e967d73ccabfb603b86bc4a6e680e51fca77f3c04a0923959c538804f3fd4f1d08"}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000400)={'veth0_to_team\x00', {0x2, 0x4e24, @local}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x1, 0x0) recvfrom(r0, &(0x7f0000000480)=""/151, 0x97, 0x2000, &(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x3, 0x2, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0xa}, 0x1}}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xc8) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000005c0)={0x57, 0x36, 0x1, {0x1, 0x401}, {0x2d, 0xffffffff}, @const={0x2c4478e4, {0x2, 0x7, 0x7fffffff, 0xff}}}) fcntl$notify(r2, 0x402, 0x8) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x0, 0x80) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)={0x2, {{0xa, 0x4e24, 0x8000, @empty, 0x4}}, 0x1, 0x6, [{{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0xd}, 0x8000}}, {{0xa, 0x4e24, 0x7, @remote, 0x1}}, {{0xa, 0x4e24, 0x5, @mcast1, 0x7}}, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x1d}, 0x1000}}, {{0xa, 0x4e20, 0x3ff, @remote, 0x3}}, {{0xa, 0x4e20, 0xe82, @local, 0x1}}]}, 0x390) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000a00)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000a40)) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000a80)={0x7fffffff, 0xb606}) fcntl$setflags(r0, 0x2, 0x1) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000ac0)={0x81, 0x1, 0xd17, 0x2, 0x6, 0x7}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b00)=0x0) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000b40)='ns/mnt\x00') ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000b80)={0x10000, 0x80000001, 0x17ea, 0x0, 0x5b1c, 0x1, 0x4bef, 0x1, 0x8, 0x8}) fremovexattr(r5, &(0x7f0000000bc0)=@random={'security.', 'selinux\\@\x00'}) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000c00)={'team0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}) 11:02:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev//g#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}, 0x20}}, 0x0) 11:02:25 executing program 3: sched_setaffinity(0x0, 0xffffffffffffffb1, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r1, &(0x7f0000000840)=@rc={0x1f, {0x9, 0xa08, 0x8001, 0xdf6, 0x2, 0x81}, 0x8c23}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2000000000004) r3 = socket$inet(0x2, 0x4000000000000001, 0x7fff) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000008c0)=0x2000000000fff, 0x4) sendto$inet(r3, &(0x7f0000000680)="66ea14f6affab601a747f50fb7c61cd897ceb015e8ab5999f59ef38808ffffffff00000000b6c741a9fa5666869b6dcb007e0a03f3c5f7f4bcbbc9a8de5d26726a63d6d4da552b23fef87d2ed1bcd7854e6dca353b5bc7f5f8c8b8799310979956ccce81b67615d355a136", 0x6b, 0x0, &(0x7f0000001180)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r4 = dup3(r3, r2, 0x80000) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000005c0)={0x8, 0x4000000000000, 0x60000000000}) sendto$inet(r3, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000240)={{0x0, 0x0, 0x5, 0x3, 0x1f}, 0xc26, 0x9, 0x4}) shutdown(r3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000400)={{0x3, 0x3, 0x800000332, 0x3, 0x21}, 0x9, 0x3fb, 0xffffffffffffff80}) r5 = gettid() capset(&(0x7f0000000340)={0x20080522, r5}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={'lo\x00', {0x2, 0x4e22, @remote}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r7, 0x4068aea3, &(0x7f0000000600)={0x8f, 0x0, [0xfffffffffffffffe]}) write$eventfd(r4, &(0x7f0000000580)=0xfffffffffffffbff, 0x8) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f00000003c0)=0x78) wait4(r5, &(0x7f0000000000), 0x8000000a, &(0x7f0000000700)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000380)) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x6751}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', r4}, 0x10) 11:02:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xff00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) ptrace$cont(0x7, r1, 0x5bb, 0x2) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0xedae51177a1351c1, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read'}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}], [{@smackfsdef={'smackfsdef', 0x3d, 'user'}}]}}) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, {0x2, 0x8000, 0x1, 0xfffffffffffffff7, 0x4, 0x1}}, 0x8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x18) r6 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/.g#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xc3ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}}, 0x20}}, 0x0) 11:02:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xff00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) unshare(0xa00) r3 = accept(r1, &(0x7f00000006c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000740)=0x80) connect$netlink(r3, &(0x7f0000000780)=@unspec, 0xc) socketpair(0x9, 0x0, 0x7fff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000000180)=0x6) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, 0x20}}, 0x0) 11:02:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xf00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000080)=""/4096) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3) 11:02:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)="2f6465762f736723ff", 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xa6ffffff}}, 0x20}}, 0x0) 11:02:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x7}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000180)={0x8, 0x2}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x7, 0x4) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x8000000000f08b}) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000140)=0xec16) 11:02:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x800, @empty, 0x7ff}, 0x1c) unshare(0x20010000) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xd00}}, 0x20}}, 0x0) 11:02:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xb}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:26 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x301000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x3f, "4206cbfc59c8b16db8625a761f324bb2b57161304e564d76f0c6ed8d9fb8c24619048baca9534bad04b266443398e29083a1c5e0aec7b155b1524a44ef6301"}, &(0x7f0000000140)=0x47) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0x1f}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={r3, @in6, 0x9, 0x0, 0x2000000000000, 0x200, 0x81}, 0x98) 11:02:26 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000040)=""/123, 0x7b, 0x20, &(0x7f00000000c0)={0xa, 0x4e22, 0x1ff, @empty, 0xd819}, 0x1c) r1 = open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200402}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4004040) unshare(0x400) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcf, &(0x7f0000000100)="a09d697cf8d0a0c4747e8d5c352a9d70c27217f57d205ec49d0029c9ebecbad230eddad68bd764f4c5492668ab4d5c81d73cf69b24f4f8d1c5285ee7bd0fea825983b6fafbc69fed77c0e2ec154d2f2c41", 0x51) [ 678.447923] device bridge_slave_1 left promiscuous mode [ 678.453644] bridge0: port 2(bridge_slave_1) entered disabled state 11:02:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffa6}}, 0x20}}, 0x0) 11:02:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:26 executing program 3: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040), 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = memfd_create(&(0x7f0000000100)='bdev$-\x00', 0x0) sched_getattr(r0, &(0x7f0000000140), 0x30, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r3, 0xffffffffffffff7f, 0x3) close(r1) [ 678.570550] IPVS: ftp: loaded support on port[0] = 21 [ 678.598508] device bridge_slave_0 left promiscuous mode [ 678.604096] bridge0: port 1(bridge_slave_0) entered disabled state 11:02:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x1c000800) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) [ 678.698950] team0 (unregistering): Port device team_slave_1 removed [ 678.712429] team0 (unregistering): Port device team_slave_0 removed [ 678.725103] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 678.784272] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 678.846204] bond0 (unregistering): Released all slaves [ 679.737339] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.743843] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.751785] device bridge_slave_0 entered promiscuous mode [ 679.805050] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.811718] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.819741] device bridge_slave_1 entered promiscuous mode [ 679.868428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 679.919053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 680.072602] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 680.125548] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 680.361779] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 680.369156] team0: Port device team_slave_0 added [ 680.397332] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 680.404514] team0: Port device team_slave_1 added [ 680.436026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.466819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.516957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 680.524199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 680.541931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 680.582713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 680.589977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 680.598485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 680.918433] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.924818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.931527] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.937904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.945403] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 680.957097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 681.927290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.021035] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 682.118804] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 682.124949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 682.132808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 682.226788] 8021q: adding VLAN 0 to HW filter on device team0 11:02:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x76cd000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:30 executing program 3: r0 = socket$inet6(0xa, 0x1040000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_NMI(r1, 0xae9a) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970365f767469300000000000000006"], 0x34}}, 0x0) 11:02:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xec0}}, 0x20}}, 0x0) 11:02:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:30 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x8, 0x0, 0x7}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x4e21, @local}}) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x500000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x30043) r3 = geteuid() r4 = getegid() write$P9_RGETATTR(r2, &(0x7f0000000100)={0xa0, 0x19, 0x2, {0x804, {0x1, 0x3, 0x3}, 0xa, r3, r4, 0xe9d, 0x7fff, 0x1, 0x9, 0x20, 0x101, 0xa7d, 0x2, 0x53787dfb, 0x7fffffff, 0x9, 0x6, 0xffffffffffffff8c, 0xffff, 0x4}}, 0xa0) unshare(0x400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = syz_open_pts(r5, 0x80000) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xe000000000000000, 0x3}]}) 11:02:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}}, 0x20}}, 0x0) 11:02:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xfff, 0x2000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)=""/126) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0xffffffa5, &(0x7f0000000240)={@random="fd63804a1785", @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 11:02:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xc3ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}, 0x20}}, 0x0) 11:02:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1000000001000, &(0x7f0000000100)="9ecdf8ac48e9e8e88ac52b15603f000000040000400088bd6c5d89c31cc70bb41a1001765a66178b3d389bc8e2e76990db31464f4435177ceb504c3ee1ec46764d36e34aac73658b7dd28a415c0efcd21b05b05380035724c05b8c76a357476455b280d8b98964ea9682123a844df6869b21fc84dc236a5d1736f340cccc27b74c3a9bf6e7079e522d98ef520c0607823474bf55b99d8ecb55047a685db90aa7a805a99af218e5e9c7dad02798d4e9f4bc617d1a6d376a349e5db696150125f70cf03c49aa7733f042cc455a5ad9d054363e7be1664f0817467c69c923b83b1cbe8a35170cdd2c9d7f0d460649475fe8529f6c") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000200)=""/248, &(0x7f0000000040)=0xf8) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000640)={r2, 0x1, 0x6}, 0x10) 11:02:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x700000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000140)={'nat\x00'}, &(0x7f0000000000)=0x24) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x40096100, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) recvmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000180)=@sco, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x401}, 0x10120) setxattr$trusted_overlay_nlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L+', 0x80003}, 0x28, 0x2) 11:02:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 683.282800] QAT: failed to copy from user cfg_data. 11:02:31 executing program 3: setxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000001580)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000002c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000280)="eb", &(0x7f0000000400)}, 0x20) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/158, 0x9e}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000140)=""/14, 0xe}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000200)=""/117, 0x75}], 0x5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001700)={r0, &(0x7f00000002c0), &(0x7f0000001600)=""/227}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200), &(0x7f0000001440)}, 0x20) 11:02:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}, 0x20}}, 0x0) 11:02:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x900000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x9000000}}, 0x20}}, 0x0) 11:02:31 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x210080) r1 = inotify_init() epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.stat\x00', 0x0, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b0000000600000000040000000000000005f0ffffffffff13dd491870636d4323a9475144237000000000000000000000000000000036b8cdc1f3d4d50acc99f86ce7"], 0x3b) r3 = gettid() getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(r4, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000240)=0xc) 11:02:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x9b) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x20}}, 0x0) 11:02:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x44050000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}}, 0x20}}, 0x0) 11:02:31 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x5ec, 0x0, 0x10001, 0xfadb}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000000c0)={r2, 0x1000}) r3 = socket$packet(0x11, 0x2002, 0x300) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) unshare(0x10000000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xa6ffffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffd, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x2000000053, 0x0, 0xfffffffffffffdc8, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, 0xffffffffffffffff, &(0x7f0000000380)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000480)}) 11:02:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x9effffff}}, 0x20}}, 0x0) 11:02:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xf0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:32 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000000005) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000000)=0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000680), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::66:.ullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)="50f073656c696e75786367726f757000") 11:02:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x600}}, 0x20}}, 0x0) 11:02:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xa00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)="2f6465762f736723fe", 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 684.302453] libceph: parse_ips bad ip '::66:.ullb' 11:02:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair(0x10, 0x0, 0x7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000002) inotify_rm_watch(r1, r2) r3 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4100, 0x0) utimensat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x2710}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x40}, 0x4) [ 684.339272] device bridge_slave_1 left promiscuous mode [ 684.344960] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.368766] IPVS: ftp: loaded support on port[0] = 21 11:02:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xc00e}}, 0x20}}, 0x0) [ 684.390232] libceph: parse_ips bad ip '::66:.ullb' 11:02:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)="2f6465762f73672302", 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 684.418558] device bridge_slave_0 left promiscuous mode [ 684.426493] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.526755] team0 (unregistering): Port device team_slave_1 removed [ 684.539858] team0 (unregistering): Port device team_slave_0 removed [ 684.552996] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 684.602178] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 684.694440] bond0 (unregistering): Released all slaves [ 685.698028] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.704509] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.712596] device bridge_slave_0 entered promiscuous mode [ 685.762838] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.769403] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.777476] device bridge_slave_1 entered promiscuous mode [ 685.827221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 685.873902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 686.018670] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 686.072006] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 686.257241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 686.264391] team0: Port device team_slave_0 added [ 686.295362] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 686.302939] team0: Port device team_slave_1 added [ 686.350180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 686.400820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 686.430105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 686.437787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 686.445723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 686.492990] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 686.500258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 686.517392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 686.803955] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.810351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.817059] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.823411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.830949] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 686.847058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 687.833680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.932900] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 688.028086] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 688.034362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 688.042014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 688.141738] 8021q: adding VLAN 0 to HW filter on device team0 11:02:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x76cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)="2f6465762f73672304", 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)="2f6465762f73672302", 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) 11:02:36 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x20}}, 0x0) 11:02:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = gettid() capget(&(0x7f0000000140)={0x399f1736, r2}, &(0x7f0000000100)={0x0, 0x3ff, 0x760b4d24, 0x2, 0x7f, 0x10000}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x181800, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xad7) 11:02:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x4}) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = gettid() capget(&(0x7f0000000140)={0x399f1736, r2}, &(0x7f0000000100)={0x0, 0x3ff, 0x760b4d24, 0x2, 0x7f, 0x10000}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x181800, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xad7) 11:02:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xa6ffffff00000000}}, 0x20}}, 0x0) 11:02:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x76cd0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x9, 0x7, 0x6674, 0x6, 0x5}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="4c113e080001fbc2bea11afac9be00bc71437f35d6450260f01688"], &(0x7f0000000200)=0xa) unshare(0x400) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r4 = accept4$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x80000) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @remote}, &(0x7f0000000100)=0xc) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'security\x00', 0x2e, "7cfdb6f5aeb6b177e2784d3a9afa2394e57fae29b7ecc6aac84e3671dba927453a2867cddf3a372860c98a4dcc5b"}, &(0x7f0000000340)=0x52) 11:02:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x40) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)={0x0, 0x0, @ioapic={0x4, 0x7f, 0xf47, 0x7, 0x0, [{0xbe1, 0x5, 0xe137, [], 0x2}, {0x7, 0x546c, 0xfff, [], 0x80000000}, {0x10000, 0x80000000, 0x100000001, [], 0x4}, {0x21, 0x6, 0x226}, {0xc1, 0x9afd, 0xd0}, {0x4, 0x5a, 0x20, [], 0x8}, {0x5, 0x5708, 0x200, [], 0xf5}, {0x67e4, 0x1f, 0xa4, [], 0x5638}, {0x3, 0xa000000000}, {0xfffffffffffffffc, 0x6, 0x7fffffff, [], 0x1}, {0x4b8, 0x1, 0x1, [], 0xffffffff}, {0x100000001, 0xffffffff, 0x29a7, [], 0x5}, {0x8, 0x4, 0x80000001, [], 0xffffffffffff1644}, {0xe0d2, 0x6f, 0x77a6, [], 0x5fd}, {0x8, 0x8, 0x2, [], 0x3}, {0x8, 0xff, 0x1, [], 0x4}, {0x9, 0x37, 0x1000, [], 0x6}, {0xff, 0x81, 0x80000000, [], 0x7}, {0x6, 0x1f, 0x200, [], 0x200}, {0x7, 0x1, 0x7, [], 0x5}, {0x1, 0x8, 0xc5d, [], 0x8}, {0x401, 0x3, 0x1ff, [], 0xfb}, {0x1ff, 0x6, 0x7f, [], 0x100000000}, {0x52a, 0x12, 0xff, [], 0x2}]}}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x5}) 11:02:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x5000000}}, 0x20}}, 0x0) 11:02:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r2, @in={{0x2, 0x4e23}}}, &(0x7f0000000200)=0x84) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xb00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x6000000}}, 0x20}}, 0x0) 11:02:37 executing program 3: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7f}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x458, 0x0, 0x0, 0x118, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000000), {[{{@arp={@dev={0xac, 0x14, 0x14, 0xb}, @multicast2, 0xffffffff, 0xffffff00, @mac=@remote, {[0xff, 0x0, 0xff, 0xff]}, @mac=@dev={[], 0x19}, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0x1f, 0x12, 0x1d, 0x8, 0x6, 0x6, 'veth1_to_bridge\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x40}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) 11:02:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xf000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:37 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000eb0e0cfb5f4d1e5bbd0e84f3be00"], &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000002c0)={r1, 0xe00, 0x10}, &(0x7f0000000300)=0x18) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234488dd25d7660709211fc584385bd60fb0e3243a71cd29d72954f45311af7003311703aae886f78522d2a7f1bde69a5d426fd6e8043dc26490eb3b49b2274e6587bd90e57ec10de3385f46aeb309fbb25e378aa68e658f3784a52b7d920edbaf70b0693bd5ea95dc732ea9a71b7cd369ce3e559873b33bc5dec122f2770571be4e17d8f9afd94012b9541edb9dc9c2d3fe0db0ab6a5a0") r3 = socket$packet(0x11, 0x2, 0x300) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x4, &(0x7f0000fff000/0x1000)=nil, 0x4) unshare(0x14000000) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xff00}}, 0x20}}, 0x0) 11:02:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xff00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:37 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x602000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180)={0x3}, 0x4) r2 = accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0xeb}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000a68000)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}}}, &(0x7f000044fffc)=0xa0) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)) 11:02:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}}, 0x20}}, 0x0) 11:02:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) flock(r0, 0x4) unshare(0x8000000) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11:02:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)="2f6465762f73672305", 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xc00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x69e}}, 0x20}}, 0x0) [ 690.128867] *** Guest State *** [ 690.132738] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 690.160376] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 690.170217] CR3 = 0x0000000000000000 11:02:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)="2f6465762f736723f6", 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 690.174451] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 690.180964] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 690.187544] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 690.195247] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 690.204850] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 690.213810] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 11:02:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) signalfd4(r1, &(0x7f0000000040)={0x81}, 0x8, 0x80000) [ 690.250558] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 11:02:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xf0}}, 0x20}}, 0x0) [ 690.299907] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 690.322538] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 11:02:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 690.375610] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 690.403964] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 690.412856] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 690.425310] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 690.515528] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 690.529258] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 690.542537] Interruptibility = 00000000 ActivityState = 00000000 [ 690.551044] *** Host State *** [ 690.554559] RIP = 0xffffffff811fa264 RSP = 0xffff8801d8f0f390 [ 690.560682] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 690.568091] FSBase=00007f1978724700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 690.576138] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 690.582469] CR0=0000000080050033 CR3=00000001cf6ab000 CR4=00000000001426e0 [ 690.589917] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87c01360 [ 690.597393] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 690.603737] *** Control State *** [ 690.608594] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 690.615904] EntryControls=0000d1ff ExitControls=002fefff [ 690.621914] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 690.629737] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 690.636717] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 690.644173] reason=80000021 qualification=0000000000000000 [ 690.650717] IDTVectoring: info=00000000 errcode=00000000 [ 690.656342] TSC Offset = 0xfffffe8be3d125e7 [ 690.661741] TPR Threshold = 0x00 [ 690.665390] EPT pointer = 0x00000001c822b01e [ 690.737207] *** Guest State *** [ 690.740570] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 690.749614] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 690.758878] CR3 = 0x0000000000000000 [ 690.768967] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 690.775057] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 690.781207] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 690.788004] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 690.796030] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 690.796051] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 690.796073] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 690.812204] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 690.812226] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 690.812246] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 690.828301] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 690.828317] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 690.828338] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 690.828349] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 690.828361] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 690.828371] Interruptibility = 00000000 ActivityState = 00000000 [ 690.828375] *** Host State *** [ 690.828392] RIP = 0xffffffff811fa264 RSP = 0xffff88018009f390 [ 690.844563] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 690.860517] FSBase=00007f1978703700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 690.860532] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 690.860549] CR0=0000000080050033 CR3=00000001cf6ab000 CR4=00000000001426e0 [ 690.860566] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87c01360 11:02:39 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) listen(r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000003c0)) getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff}, 0xb) init_module(&(0x7f00000002c0)='$$\x00', 0x3, &(0x7f0000000300)="4c65746831812d2900") ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000440)) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0xacdbf90f7b4ecd63, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) lseek(0xffffffffffffffff, 0x0, 0x0) gettid() 11:02:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xd000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xf00}}, 0x20}}, 0x0) 11:02:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7f, 0x220000) connect$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x0, 0x3, 0x7, 0xfa5e, 0x8, "170daac6424d8138cf22be7e4479b86c3e9913e77e3c15e4f46f97582bb1431a9b4d04951d40f62bee12807fffbf577c738ef56773ae396847f1730b44dcfa", 0x29}, 0x60) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000200)={0xffffffff, 0x1, 0x8}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) accept4$llc(r1, 0x0, &(0x7f0000000180), 0x80000) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x7, {0x101}}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) unshare(0x400) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) ioctl$TIOCSCTTY(r2, 0x540e, 0x800) 11:02:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 690.860585] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 690.875158] *** Control State *** [ 690.875171] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 690.875180] EntryControls=0000d1ff ExitControls=002fefff [ 690.875204] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 690.889053] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 690.889065] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 690.889074] reason=80000021 qualification=0000000000000000 [ 690.889083] IDTVectoring: info=00000000 errcode=00000000 11:02:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 690.889090] TSC Offset = 0xfffffe8be3d125e7 [ 690.889097] TPR Threshold = 0x00 [ 690.889108] EPT pointer = 0x00000001c822b01e 11:02:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xa00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)="2f6465762f7367230e", 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}, 0x20}}, 0x0) [ 691.132499] audit: type=1804 audit(1540465359.206:55): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir071488819/syzkaller.yR9mTc/1422/bus" dev="sda1" ino=17085 res=1 [ 691.167439] device bridge_slave_1 left promiscuous mode [ 691.173297] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.232229] device bridge_slave_0 left promiscuous mode [ 691.239233] bridge0: port 1(bridge_slave_0) entered disabled state 11:02:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000040), 0x4) 11:02:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)="2f6465762f736723ff", 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 691.389326] team0 (unregistering): Port device team_slave_1 removed [ 691.402960] team0 (unregistering): Port device team_slave_0 removed [ 691.421905] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 691.465293] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 691.527269] bond0 (unregistering): Released all slaves [ 691.870755] audit: type=1804 audit(1540465359.946:56): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir071488819/syzkaller.yR9mTc/1422/bus" dev="sda1" ino=17085 res=1 [ 691.896507] audit: type=1804 audit(1540465359.966:57): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir071488819/syzkaller.yR9mTc/1422/bus" dev="sda1" ino=17085 res=1 [ 692.807341] IPVS: ftp: loaded support on port[0] = 21 11:02:40 executing program 3: mknod(&(0x7f0000000040)='./bus\x00', 0x7dfb43ab957cc694, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) truncate(&(0x7f0000000080)='./bus\x00', 0x0) 11:02:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xd00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x9e06000000000000}}, 0x20}}, 0x0) [ 693.450031] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.456584] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.463973] device bridge_slave_0 entered promiscuous mode [ 693.494574] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.501976] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.509301] device bridge_slave_1 entered promiscuous mode [ 693.538806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 693.569206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 693.654828] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 693.686810] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 693.822771] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 693.830232] team0: Port device team_slave_0 added [ 693.859105] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 693.866405] team0: Port device team_slave_1 added [ 693.896027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 693.926407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 693.957805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 693.991135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 694.274059] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.280493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.287245] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.293728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.322343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.420401] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 695.521554] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 695.528040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 695.535058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 695.636030] 8021q: adding VLAN 0 to HW filter on device team0 11:02:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x76cd0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:44 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x80, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140)=0x8, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x2) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000080)={0x9, 0x5, 0xf282}) 11:02:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000}}, 0x20}}, 0x0) 11:02:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x500}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xf6ffffff00000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x800) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x80, @time={0x0, 0x989680}, 0x5, {0xffffffff, 0x1ff}, 0x1, 0x3, 0xfe2a}) listen(r0, 0x400000000f3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x7, @ipv4={[], [], @broadcast}, 0x7}], 0xfffffdb3) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x3, 0xcc70c21f7f9bd8a6) 11:02:44 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x80000000000001}, 0x18) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x81, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x1, &(0x7f0000000000), 0x142}}], 0x2, 0x0) r1 = socket(0x4, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x4, 0x8000, 0x0, 0x6, 0x401]}, 0xe) 11:02:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x7fff) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xd}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x9e06}}, 0x20}}, 0x0) 11:02:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfeffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xffffffa6}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x700}}, 0x20}}, 0x0) 11:02:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:44 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x3ffffffffffff2b, 0x0, &(0x7f0000003280)) r0 = memfd_create(&(0x7f0000000000)=')[vboxnet1GPLkeyring\x00', 0x4) statx(r0, &(0x7f0000000200)='./file0\x00', 0x4900, 0x20, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') open$dir(&(0x7f0000000040)='./file0\x00', 0x80800, 0x0) preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) 11:02:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x181000, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18, 0x0, 0x2, {0x1b}}, 0x18) finit_module(r0, &(0x7f0000000040)='F[{\\@user}\x00', 0x1) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x10, &(0x7f00000001c0)={'trans=unix,', {[{@uname={'uname', 0x3d, '/dev/dsp\x00'}}, {@cache_mmap='cache=mmap'}, {@access_client='access=client'}, {@access_any='access=any'}, {@cachetag={'cachetag', 0x3d, ':em1wlan0)'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'F[{\\@user}\x00'}}, {@audit='audit'}]}}) r2 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x5000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x20}}, 0x0) 11:02:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xc3ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfffffffe, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x20}}, 0x0) 11:02:45 executing program 3: r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x174, 0xffffffffffff51b6}) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00") 11:02:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x800000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x2, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x2a2a}, 0x8) unshare(0x400) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=""/43, &(0x7f00000000c0)=0x2b) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x200000000000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}, 0x20}}, 0x0) 11:02:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:45 executing program 3: mmap(&(0x7f0000a47000/0x1000)=nil, 0x1000, 0x0, 0x2000004208972, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x1020000000a) clone(0x0, &(0x7f0000000000), &(0x7f0000000ffc), &(0x7f0000000ffc), &(0x7f0000000000)) 11:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x20}}, 0x0) 11:02:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/hci\x00') ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000080)) getsockname$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, &(0x7f0000000100)=0x10) 11:02:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xffffffff00000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xc000000}}, 0x20}}, 0x0) 11:02:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:45 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d66646c7266646e6f3d495714ba45c6c1546a38d48c78ea21952778e0283dbe73d1f64147", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x1}, 0xb) write$P9_RREADDIR(r1, &(0x7f0000000780)={0x30, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0xd, './file0/file0'}]}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) open(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) 11:02:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xe00000000000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x9, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x8003, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xff000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 697.719149] 9pnet: Could not find request transport: fdlrfdno=IWºEÆÁTj8ÔŒxê!•'xà(=¾sÑöAG0x0000000000000003 [ 697.759195] 9pnet: Could not find request transport: fdlrfdno=IWºEÆÁTj8ÔŒxê!•'xà(=¾sÑöAG0x0000000000000005 11:02:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}}, 0x20}}, 0x0) 11:02:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x2000000) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) semget(0x3, 0x0, 0x3) socket$inet(0x2, 0x800, 0x5) 11:02:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x500000000000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:46 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46730002000000000000000000020003004d0a0fa311bc0000000000004000000000000000f401000000000000ffff0000030038000100ffff0000d9ba0500007001000000400000000000000005000000000000000180000000000000010000000000"], 0x66) sendfile(r0, r0, &(0x7f0000000080), 0x10001) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 11:02:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x544}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xc00e000000000000}}, 0x20}}, 0x0) [ 698.041621] device bridge_slave_1 left promiscuous mode [ 698.057764] bridge0: port 2(bridge_slave_1) entered disabled state 11:02:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x100000000000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 698.150028] device bridge_slave_0 left promiscuous mode [ 698.158029] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.209344] IPVS: ftp: loaded support on port[0] = 21 11:02:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x4000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 698.255666] team0 (unregistering): Port device team_slave_1 removed [ 698.275916] team0 (unregistering): Port device team_slave_0 removed [ 698.308487] bond0 (unregistering): Releasing backup interface bond_slave_1 11:02:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x1000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 698.365503] bond0 (unregistering): Releasing backup interface bond_slave_0 11:02:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xe, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfffffff6, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 698.501342] bond0 (unregistering): Released all slaves [ 699.637037] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.643547] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.651800] device bridge_slave_0 entered promiscuous mode [ 699.704053] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.711050] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.719019] device bridge_slave_1 entered promiscuous mode [ 699.769735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 699.822700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 699.979349] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 700.034308] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 700.233266] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 700.241060] team0: Port device team_slave_0 added [ 700.284989] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 700.292581] team0: Port device team_slave_1 added [ 700.322771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 700.355419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 700.386132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 700.393904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 700.402438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 700.451126] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 700.458670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 700.472784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 700.785463] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.791982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.798752] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.805224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.812749] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 701.667241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 701.880006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.980962] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 702.092412] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 702.098686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 702.107430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 702.205151] 8021q: adding VLAN 0 to HW filter on device team0 11:02:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000040)=0x8001, 0x8001, 0x2) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0) 11:02:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xa6ffffff00000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000440)='-^user\')\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x12, 0x0, 0x0, "7a6532345642fde9fc8343aa4b0fa11ddf7c7bfb58357f27af1edb6526dbd422f46fa775f96a36662b03bfc5b90fe984823e18fb0cc278e5b2c3d862df964c7e", "d8998a735f75c2486206c123175ef3744433c9a9576caae927be7167ddc35d4ca9b2c7e1f0f2828a34d0ff1f5f14a7520addc6ccd015dbbc75fe36fc187a0739", "310b04609fcd84b85f8d0f0d77d596200400"}) 11:02:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}, 0x20}}, 0x0) 11:02:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x76cd000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) r2 = open(&(0x7f0000000180)='./file0\x00', 0x420300, 0x80) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x100c) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@generic={0x3, 0xe2, 0x6}) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4b174aa0, 0x0) write$P9_RSTATFS(r2, &(0x7f0000000200)={0x43, 0x9, 0x2, {0x7f, 0x800, 0x1ff, 0x4, 0x8a34, 0x1, 0x7fff, 0x1, 0x7ff}}, 0x43) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000140)={0xfffffffffffffffb, 0x4, r4, 0x4a9, r5, 0x0, 0x8, 0x3}) 11:02:51 executing program 3: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000340)={'veth0_to_team\x00'}) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={@ipv4={[], [], @multicast2}}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000040), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x200000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 11:02:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfeffffff00000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x300000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}, 0x20}}, 0x0) 11:02:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xc00000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x1, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) 11:02:51 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d7, @loopback}, 0x1c) 11:02:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x500, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0x20}}, 0x0) 11:02:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) prctl$setptracer(0x59616d61, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f00000000c0)={0x2, 0x5}) 11:02:51 executing program 3: dup(0xffffffffffffff9c) socket$inet6(0xa, 0x7ffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000500)='em0nodeveth1lo\x00', 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffffffe) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000000c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f00004aaffc)=0xffffffffffff7fff, 0x4) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000200)={[0x4, 0x2000], 0x800, 0x40, 0xb0}) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)={0x1ff}) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) 11:02:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x4405000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xc3ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xff000000}}, 0x20}}, 0x0) 11:02:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x2, 0x300) unshare(0x400) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x3b4a, 0xffffffff, 0x7, 0xffff, 0xffffffffffffffff, 0x3, 0x3, 0xfff, 0x16, 0x40, 0x16, 0x0, 0x5, 0x38, 0x2, 0x1f4b, 0x400, 0x7ff}, [{0x70000003, 0x6, 0x1, 0x6, 0xbe2, 0x7, 0x7f, 0x200}, {0x60000000, 0x0, 0xfffffffffffffffe, 0x100, 0x9, 0x764b, 0x8, 0x8}], "612475394722f9211d33c64a4c657184c5e816a8d1507dfb42451db79150d540c590c4e97a04c70339cf5c3cc743e4ced712cd5a4ea757dc2e8fbb63d02e77047e0a87f61bbe47fc97a4c47e95fb0680ac524a96775b3002cc8163c127539032353ffaecd4edabb3a02fc3eb866207715be0d18080da5c1f87115d5fa79fad77b31d8fb64d96e55f20bc052d5b965590f50cc03c7a6bc39a671585d740de"}, 0x14e) 11:02:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x400000000000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xc00}}, 0x20}}, 0x0) 11:02:52 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d7, @loopback}, 0x1c) 11:02:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:52 executing program 3: 11:02:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x20}}, 0x0) 11:02:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x8000000000000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r2, 0x402c542b, &(0x7f0000000040)) 11:02:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xf6ffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xec0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}}, 0x20}}, 0x0) 11:02:52 executing program 3: 11:02:52 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[], 0xa2}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x800000000008, &(0x7f00000001c0), 0x525) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="02120000020000000000648598b8471164516afb47e802a7baba76cc19bf72d02ad0afd25fac40783318f58ae63571b087890d3dcb91defbf399503d159b7349f6ae58baabcd76db87ad117cff42fb4ff693d35a039c8fcddc6ebbc71864d64d719c1d098cd30e8c4ac0eae765abc1cc44115aecf02beb58278d1ad6fc4b7a781c7ab12cbcdc2f34dba5016e9193c02bb9d63a60d466be8b94e1adf220c4895a898a80e4894369d0dd581326aa2f86ae29d50e1a6bca90c31e9f022793705882bc6f09c47a71a10dff792d145b832835448b72cbf62e35d193649bccbedb559b"], 0xe0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 11:02:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0xcd76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x2200) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000580)) r3 = dup2(r1, r1) msgget(0xffffffffffffffff, 0x2a0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000480)) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000680)=""/104, &(0x7f0000000040)=0x68) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="6cfd0729aaf99e3390e25e8160ae06ed97102a0698b4641c554f5eb681f207d57263bc556aa461d090350e5d093de1f6f342ba5c83f09576fda07605439e2d48442477dedb4f442e8c2e7617c869e66dc740cd65e8b65bb49311a3b127b1ef"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000000400)=0x8) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r5, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="160000006f010001000000"], 0xb) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000340)={0x5}, 0x1) write$P9_RSTAT(r5, &(0x7f0000000700)={0x56, 0x7d, 0x1, {0x0, 0x4f, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1, '(', 0x5, 'rfdno', 0x5, 'rfdno', 0x11, 'vboxnet1trustedlo'}}, 0x56) write$P9_RGETATTR(r5, &(0x7f0000000540)={0xa0}, 0xa0) write$P9_RLERROR(r5, &(0x7f0000000080)={0x1a, 0x7, 0x1, {0x11, 'vboxnet1trustedlo'}}, 0x1a) write$P9_RWRITE(r5, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r5, &(0x7f0000000800)={0xa0, 0x19, 0x0, {0x0, {0x3}, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}}, 0xa0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000440)={0x43, 0x9, 0x1}, 0x43) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 11:02:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xe00, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x3000000}}, 0x20}}, 0x0) 11:02:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0xac10c8ba7b7daf7d}, 0x7) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) 11:02:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xb00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x9e060000}}, 0x20}}, 0x0) [ 704.851104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:02:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x76cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x1000000000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 705.005311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:02:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="69d49f4727b65c0a6494ca151a659e83", 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) 11:02:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x2000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}, 0x20}}, 0x0) 11:02:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0xac10c8ba7b7daf7d}, 0x7) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) 11:02:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xe000000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0xb3dc}, 0x8) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000200)={0x1000000000000000, 0x7}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={0x0, 0x7}, &(0x7f0000000580)=0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) chmod(&(0x7f0000000300)='./file0\x00', 0x41) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x8000, 0x4}, 0x10) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:02:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xa00}}, 0x20}}, 0x0) 11:02:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x1b}}, 0x0) 11:02:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xfeffffff00000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0xfffffdef}}, 0x0) [ 706.581418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:02:55 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0xac10c8ba7b7daf7d}, 0x7) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) 11:02:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x500000000000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0xc0}}, 0x0) 11:02:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x76cd0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:55 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffff5f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000240)="95704cf5c5220dc6df5acf10a768785bf93b534c834942e65d", 0x19}], 0x1, 0xd) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000003c0)={0x1, 0x0, [{0x100, 0x3, 0x0, 0x0, @irqchip={0x9a}}]}) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000180)={0x8001, 0x200, 0x7f, 0x400}) getuid() ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0x5, 0x5, 0x8}) 11:02:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20002420}}, 0x0) 11:02:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x700}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x1000000000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 707.203073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:02:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x600000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x10}}, 0x0) 11:02:55 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0xac10c8ba7b7daf7d}, 0x7) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) 11:02:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xffffffff00000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x33fe0}}, 0x0) 11:02:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xc3ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:02:55 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffff5f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000240)="95704cf5c5220dc6df5acf10a768785bf93b534c834942e65d", 0x19}], 0x1, 0xd) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000003c0)={0x1, 0x0, [{0x100, 0x3, 0x0, 0x0, @irqchip={0x9a}}]}) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000180)={0x8001, 0x200, 0x7f, 0x400}) getuid() ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0x5, 0x5, 0x8}) 11:02:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x400300}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x400000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0xf}}, 0x0) 11:02:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x1000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 708.015929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 708.168417] IPVS: ftp: loaded support on port[0] = 21 11:02:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:02:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0xec0}}, 0x0) 11:02:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa5) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10200, 0x80) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x1ff, &(0x7f0000000080)=0x2) socket$nl_generic(0xa, 0x5, 0x84) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) prctl$seccomp(0x16, 0x4f2e4665357bc44b, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x8000, 0x7, 0x10000, 0x9}, {0xe22, 0x1f, 0x7, 0x5}, {0x0, 0x7199fc88, 0xfff, 0x4}, {0xdf97, 0xfffffffffffffffe, 0x0, 0x2}, {0xd6d, 0x0, 0x200, 0x6}, {0x8, 0xcf, 0x0, 0x8}]}) 11:02:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xfffffffe) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:02:56 executing program 3: r0 = socket$inet6(0xa, 0x4, 0xa8d9b4280) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x400906e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) [ 708.787402] device bridge_slave_1 left promiscuous mode [ 708.792979] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.858984] device bridge_slave_0 left promiscuous mode [ 708.864467] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.950791] team0 (unregistering): Port device team_slave_1 removed [ 708.962628] team0 (unregistering): Port device team_slave_0 removed [ 708.974821] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 709.040987] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 709.121895] bond0 (unregistering): Released all slaves [ 709.757085] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.763621] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.771709] device bridge_slave_0 entered promiscuous mode [ 709.823583] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.830197] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.838108] device bridge_slave_1 entered promiscuous mode [ 709.887928] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 709.937915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 710.083432] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 710.135256] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 710.229564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 710.236452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 710.391146] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 710.399124] team0: Port device team_slave_0 added [ 710.446346] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 710.454094] team0: Port device team_slave_1 added [ 710.503989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 710.555547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 710.606332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 710.613621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 710.632011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 710.661565] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 710.668715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 710.676605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 711.064775] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.071197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.077922] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.084279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.092130] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 711.187328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 712.125170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.220286] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 712.316852] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 712.323704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 712.331208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 712.424764] 8021q: adding VLAN 0 to HW filter on device team0 11:03:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x7ffff000}}, 0x0) 11:03:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:01 executing program 3: perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1820000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6fff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x21) 11:03:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 11:03:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x8}, 0x0) [ 713.075258] input: syz0 as /devices/virtual/input/input15 11:03:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x200000000000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 713.140174] input: syz0 as /devices/virtual/input/input16 11:03:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0xffffff1f}, 0x0) 11:03:01 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xffffffffffffff7f, 0xfffffffffffffff8) mbind(&(0x7f00003da000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, &(0x7f0000000100), 0x73, 0x3) move_pages(0x0, 0x9, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), &(0x7f00000001c0), 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)) 11:03:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 11:03:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x2}, 0x0) 11:03:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 713.436148] input: syz0 as /devices/virtual/input/input17 11:03:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x400000000000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 11:03:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xa6ffffff00000000}, 0x0) 11:03:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 713.676492] input: syz0 as /devices/virtual/input/input18 11:03:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:02 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x7fff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_buf(r1, 0x0, 0x11, &(0x7f0000000040), 0x0) ioctl(r0, 0x8912, &(0x7f0000000400)="153f6234488dd25d766070") getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400000073095d0bd611965ab4f9e433a9f4f96d55cdb04d79c0426c5f695ddbc4ac44b9825577299d670f21a4715a2b600c4199badbaaf8e703385598ba50f4cd56dc18f6720700000056be3a24af9bc6059dcdbc04492f9b885bafe7a0615d598adf1fc296f803a9ff59dfdd72242e1400000000000000000000000000"], &(0x7f00000000c0)=0xffffff57) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x24, 0x400, 0x5, 0x8, 0x1, 0x7, 0x401, 0x1, r2}, &(0x7f0000000140)=0x20) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000180)=""/176, &(0x7f0000000300)=0xb0) getsockopt$inet_int(r3, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000080)=0x8bf8) socket$inet_udplite(0x2, 0x2, 0x88) 11:03:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x700000000000000}, 0x0) 11:03:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 11:03:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x4000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x76cd000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 714.149748] input: syz0 as /devices/virtual/input/input19 11:03:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x9000000}, 0x0) 11:03:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xd00}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x500) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:02 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x8004510b, &(0x7f000084dfff)) 11:03:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') 11:03:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000005, 0x8000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006916000000000000bf6700000000000057060006000002000000070600bf050000000000001f65000000000007000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd430100000000009500000000009500000000000000000000000000510d22ee382ac80f50bb928c78017e5b1e76c4afa2003859577ca5c2287a687209642ab0c7176645d1985d23e13c90da0fbe0580bfd71ae50000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11:03:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xb00000000000000}, 0x0) 11:03:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xa}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 714.454031] input: syz0 as /devices/virtual/input/input20 11:03:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xfffffff6) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:02 executing program 3: ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xfff, 0x2, 0x7}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x2, 0x2, 0x4}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getegid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c001244865d1fa3f3188a5d95175d370a228ebba294241f46f63d0a5b51586a319e5c719c9743bf9762b540100e12237a394a25ca1aa0e807cedd2bfc0d30eea22c868bbd8acaf1f509833630c3c3f8deb4602177892744ba848df40afdfb3b799f855f01e3e75d957d94dc38c1a115f063384bb0eceea44df480b9be32898b3640dce331991edc01084c0e9dbaa0bf6bd72be3f87862f6bf8bc76699d4d7a3fd08"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000)=0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 11:03:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf000000}, 0x0) 11:03:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xe00) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 714.723890] input: syz0 as /devices/virtual/input/input21 11:03:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x400300}, 0x0) 11:03:03 executing program 3: ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xfff, 0x2, 0x7}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x2, 0x2, 0x4}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getegid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c001244865d1fa3f3188a5d95175d370a228ebba294241f46f63d0a5b51586a319e5c719c9743bf9762b540100e12237a394a25ca1aa0e807cedd2bfc0d30eea22c868bbd8acaf1f509833630c3c3f8deb4602177892744ba848df40afdfb3b799f855f01e3e75d957d94dc38c1a115f063384bb0eceea44df480b9be32898b3640dce331991edc01084c0e9dbaa0bf6bd72be3f87862f6bf8bc76699d4d7a3fd08"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000)=0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 11:03:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xf}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x100000000000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 715.001869] input: syz0 as /devices/virtual/input/input22 11:03:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xc00e0000}, 0x0) 11:03:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:03 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x600202, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0x40003, 0x0, [0x7, 0x80000000, 0x2, 0x6, 0x7, 0x800, 0x5, 0x1]}) dup3(r1, r0, 0x80000) setxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xd79, 0x400) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x1, 0x8, 0x2, 0x4}, 0x3, 0x8, 0x1}) 11:03:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xe00000000000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 715.254006] input: syz0 as /devices/virtual/input/input23 11:03:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x2000000}, 0x0) [ 715.377836] device bridge_slave_1 left promiscuous mode [ 715.383415] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.450578] device bridge_slave_0 left promiscuous mode [ 715.459374] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.481644] IPVS: ftp: loaded support on port[0] = 21 [ 715.555099] team0 (unregistering): Port device team_slave_1 removed [ 715.568656] team0 (unregistering): Port device team_slave_0 removed [ 715.580479] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 715.651382] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 715.752100] bond0 (unregistering): Released all slaves [ 716.566116] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.573076] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.580651] device bridge_slave_0 entered promiscuous mode [ 716.628944] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.635411] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.642958] device bridge_slave_1 entered promiscuous mode [ 716.692193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 716.738982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 716.889477] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 716.940889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 716.991470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 717.007802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 717.183632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 717.191602] team0: Port device team_slave_0 added [ 717.237803] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 717.244947] team0: Port device team_slave_1 added [ 717.275534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 717.306640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 717.355862] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 717.363124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 717.375187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 717.416299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 717.423546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 717.432969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 717.749279] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.755643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.762343] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.768737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.776093] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 717.827102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 718.788337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.885081] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 718.987970] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 718.994121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 719.002580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 719.096824] 8021q: adding VLAN 0 to HW filter on device team0 11:03:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xcd76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xfeffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:07 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffe, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) lseek(r0, 0x400000000, 0x6) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) setpriority(0x2, r1, 0x40000000000003ff) socket$inet6_dccp(0xa, 0x6, 0x0) 11:03:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xa6ffffff}, 0x0) 11:03:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 719.736045] input: syz0 as /devices/virtual/input/input24 11:03:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xe000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xa, @rand_addr=0x3f000000}]}}}]}, 0x38}}, 0x0) 11:03:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf0ffffff00000000}, 0x0) 11:03:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x76cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 719.988811] netlink: 'syz-executor3': attribute type 10 has an invalid length. 11:03:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xff00000000000000}, 0x0) 11:03:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="2f657865000000783b02ad004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x4, 0x1000000000000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18}, 0x20) getrlimit(0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) 11:03:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 720.234934] input: syz0 as /devices/virtual/input/input26 11:03:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x7000000}, 0x0) 11:03:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:08 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x40010, r0, 0x40) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101000, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000300)=0x81, 0x4) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x4, r2, &(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz'}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000380)="d6a48c80709e8fec1a35bd469226b4e10cc226b4cced45a10c999a71631d2eab59e3f2f43771352ec460fda8d00f82b982648cb3c23961a2876ea4d5cd569ddffa38c229189799", &(0x7f0000000400)="bedf5a66072088407e3758b6a19244d318aafc44013472f6b32c4dee2de01aeaf57692a0b3a2a972b9141f7a7835b89b576aeec3d85290bdc20d56a3395cd079126ca35666b7f0dbce3054e692f13254e14bc108e6ce4685a5cd3044acdcfd3aae87", 0x1}, 0x20) r3 = socket(0x1, 0x5, 0xfffffffffffffff8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd}, &(0x7f0000000340)=0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000280)={[{0x0, 0x3, 0x7fff, 0x188f68ae, 0x4, 0xc5, 0x5, 0x6, 0x0, 0x5c, 0xfffffffffffffbff, 0x401}, {0x2, 0x4, 0x9, 0x4, 0x8, 0x2, 0x1ff, 0x3, 0x6, 0x1a75, 0x101, 0x330, 0x3}, {0x100000000, 0x8000, 0x800, 0x3253, 0x1, 0x0, 0x2, 0x955, 0xce, 0x7, 0x9, 0x1, 0x9}], 0x5}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r4}, &(0x7f0000000000)=0x8) 11:03:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x8000000000000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x9e060000}, 0x0) [ 720.582163] input: syz0 as /devices/virtual/input/input27 11:03:08 executing program 3: r0 = socket(0x10, 0x802, 0x0) getpeername$packet(r0, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001dc0)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001e00)={@remote, @local, @empty, 0x5, 0xffffffff80000000, 0x9, 0x500, 0x3, 0x42400000, r1}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x14, &(0x7f0000caaffb), &(0x7f0000000440)=0xfe8f) 11:03:08 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xf6ffffff00000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x300}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xd000000}, 0x0) [ 720.860457] input: syz0 as /devices/virtual/input/input28 11:03:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:09 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = gettid() r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @empty, 0x6}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={r3, 0xffffffff, 0x30, 0x9b, 0x6}, &(0x7f0000000180)=0x18) r4 = getpgrp(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000001c0)=[{0x0, 0xab}, {0x2, 0x20}, {0x3, 0x10000}, {0xc, 0x1}, {0x8, 0x101}, {0x4, 0x7fff}, {0x2, 0xf6}, {0x2, 0x938}], 0x8) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8001) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r0, &(0x7f0000000040)) 11:03:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x34000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x2000000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:09 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 11:03:09 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='t0\x00\x00\x00') 11:03:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0xc00e000000000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x3000000}, 0x0) 11:03:09 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 11:03:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 721.238128] device bridge_slave_1 left promiscuous mode [ 721.243686] bridge0: port 2(bridge_slave_1) entered disabled state 11:03:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xf6ffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 721.288977] device bridge_slave_0 left promiscuous mode [ 721.305385] bridge0: port 1(bridge_slave_0) entered disabled state 11:03:09 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 721.402928] IPVS: ftp: loaded support on port[0] = 21 [ 721.439701] team0 (unregistering): Port device team_slave_1 removed [ 721.464953] team0 (unregistering): Port device team_slave_0 removed [ 721.481100] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 721.521996] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 721.604038] bond0 (unregistering): Released all slaves [ 722.499770] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.506237] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.513780] device bridge_slave_0 entered promiscuous mode [ 722.564548] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.571086] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.579163] device bridge_slave_1 entered promiscuous mode [ 722.627037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 722.674844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 722.824527] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 722.875976] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 722.927904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 722.935199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 723.126050] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 723.134160] team0: Port device team_slave_0 added [ 723.183176] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 723.191193] team0: Port device team_slave_1 added [ 723.219944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 723.252259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 723.300267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 723.307522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 723.317921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 723.366320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 723.373503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 723.382940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 723.705431] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.711818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.718520] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.724893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.732223] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 723.739155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 724.743881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.840481] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 724.937955] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 724.944075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 724.951316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 725.048800] 8021q: adding VLAN 0 to HW filter on device team0 11:03:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xe) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = socket$inet(0x10, 0x3, 0xc) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) 11:03:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xa}, 0x0) 11:03:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 725.706635] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 11:03:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000140)={0x10, 0x7, 0x1, {0x7, "0677f50625c4e5"}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000100)) semget$private(0x0, 0x1, 0x2) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) dup3(r1, r0, 0x0) delete_module(&(0x7f00000000c0)="0677f50625c4e5", 0x800) [ 725.763674] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 11:03:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xa000000}, 0x0) 11:03:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xffffff7f}, 0x0) [ 725.978901] input: syz0 as /devices/virtual/input/input30 11:03:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) get_robust_list(r2, &(0x7f0000000140)=&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r3, 0x3, &(0x7f0000000280)={0x3c}) dup3(r1, r0, 0x0) r4 = add_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)="1c3c619a82ad02aa270a086d74882d0513419b07c44645f17e5e4df6ff8edf0c2a998fd446907bbf6b19b61dea6a8f324c952070fb261a891601871c6f395fc974152665f09620ce90276aeb64b14a4d443de5f99ab27fd8d58d428e8bad01e964ff4055b86010d2c531d43e7ec9f9390c074e0a2daf6c1b5cb5cd2b1ce6fca478b7044c812b72ecb476c31c2ff4372a366df046e18c530e3641d8f79773ec52a4ca258d3200188d0c686b9ada0deccd1ea05a5b9e31c8157a4b7a5b8bea0613da61f99cff685c97a4aa9a32c51b0e82fa659aeedd23153ad4dc93fd047d45f3e6ea32902626f88dfdd653abcaa718", 0xef, 0xfffffffffffffff8) r5 = add_key(&(0x7f0000000440)='logon\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x1}, r5) 11:03:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0xc3ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:14 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2001, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x0, &(0x7f00000000c0)={0x200, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @rand_addr=0x8}}}, 0x108) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa060000460000282000000000849078ac141400ac1423bb0e00a17800004000000000000000000000000000636996448e2c235a4f6cbcaebf18f7ed865669627d574bb30326178e03fc203be139811ce3c611889b1f35ca6f52621659f28d50ad8fce805feb89a0ec3ec3c8fab7e5010000000000003c78a5884be2b6c36f03f2be096889ec64dbf37c06148f0020916ec494d359588117ff57c64578d125f663555f4f0774fbf2f522e6780d24d3052014e10493ecaf5ca9ca5c6a832e3152f5236a80b784f951d4"], &(0x7f0000000040)={0x1, 0x1}) 11:03:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x8000000}, 0x0) 11:03:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:14 executing program 3: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xc0000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={r1, 0x80000, r2}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) [ 726.263120] input: syz0 as /devices/virtual/input/input31 11:03:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000)={0x200}, &(0x7f0000000080), &(0x7f0000000100)={r2, r3+30000000}, 0x8) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r4, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xb00}, 0x0) 11:03:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xaa, 0x40) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f000042d000)=ANY=[@ANYBLOB="0002020100009c148856d0279e8600000000000000000001"], 0x18) ioctl$RTC_WIE_ON(r1, 0x700f) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="000000feffffff00"], 0x8) 11:03:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xc3ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 726.492232] input: syz0 as /devices/virtual/input/input32 11:03:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x2) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x100, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000140)) iopl(0x9) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000000c0)={0x55, 0x14, [0x9, 0x20, 0x4, 0xaab2, 0x6]}) 11:03:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xc3ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 726.733511] input: syz0 as /devices/virtual/input/input33 11:03:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf0ffff}, 0x0) 11:03:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 726.903624] QAT: Invalid ioctl 11:03:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xcd76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3f, 0x200000) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x300000000000000}, 0x0) [ 727.031222] input: syz0 as /devices/virtual/input/input34 [ 727.087597] QAT: Invalid ioctl 11:03:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x280040, 0x1) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@local}, &(0x7f0000000080)=0xc) r1 = socket$inet(0x2, 0x80002, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0xd6f, 0x5, 0x401, 0x6, 0x0, 0x200}) sendto$inet(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x14000000, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 11:03:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) tee(r1, r0, 0x0, 0xa) dup3(r1, r0, 0x0) [ 727.234581] input: syz0 as /devices/virtual/input/input35 11:03:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x900000000000000}, 0x0) 11:03:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x51) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="000775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:03:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xffffffa6}, 0x0) 11:03:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:15 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003440)=[{&(0x7f0000000200)="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", 0x1f0, 0x10}]) r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1, 0x4000) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x400, 0x7, 0x7ae, 0x7fffffff}) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000080)=0x9) 11:03:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 727.712009] input: syz0 as /devices/virtual/input/input37 [ 727.748522] device bridge_slave_1 left promiscuous mode [ 727.754330] bridge0: port 2(bridge_slave_1) entered disabled state 11:03:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x5000000}, 0x0) 11:03:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000100)={0x7b, 0x0, [0xc0000084]}) r6 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r6, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 727.819030] device bridge_slave_0 left promiscuous mode [ 727.825977] Dev loop3: unable to read RDB block 1 [ 727.832012] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.849163] loop3: unable to read partition table 11:03:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 727.889951] loop3: partition table beyond EOD, truncated [ 727.918709] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 11:03:16 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8001, 0x60400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xc, 0x80, 0xfffffffffffffff7, 0x8001, 0x10, r0, 0x2b}, 0x2c) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) [ 728.001062] input: syz0 as /devices/virtual/input/input38 [ 728.009301] team0 (unregistering): Port device team_slave_1 removed [ 728.049299] IPVS: ftp: loaded support on port[0] = 21 [ 728.056208] team0 (unregistering): Port device team_slave_0 removed 11:03:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 728.097881] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 728.145789] input: syz0 as /devices/virtual/input/input39 [ 728.160658] bond0 (unregistering): Releasing backup interface bond_slave_0 11:03:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 728.258065] bond0 (unregistering): Released all slaves [ 728.284572] input: syz0 as /devices/virtual/input/input40 11:03:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xfffffff0}, 0x0) [ 729.305657] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.312874] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.320911] device bridge_slave_0 entered promiscuous mode [ 729.372471] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.379670] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.389001] device bridge_slave_1 entered promiscuous mode [ 729.439233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 729.490575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 729.647509] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 729.700940] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 729.884520] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 729.892363] team0: Port device team_slave_0 added [ 729.938620] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 729.946253] team0: Port device team_slave_1 added [ 729.994731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 730.028917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 730.060881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 730.068211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 730.076146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 730.123146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 730.130436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 730.148272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 730.444867] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.451288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.457996] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.464349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.472325] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 731.417028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 731.503899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.608991] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 731.708327] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 731.714480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 731.721983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 731.818353] 8021q: adding VLAN 0 to HW filter on device team0 11:03:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000002c0)={0x2, 'team_slave_0\x00', 0x3}, 0x18) dup3(r0, r0, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="035301cb970ebbb66e5679a8d6a133", 0xf, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, r4) 11:03:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x113, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x2}}, 0x18) 11:03:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x5}, 0x0) [ 732.483027] input: syz0 as /devices/virtual/input/input41 11:03:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:20 executing program 3: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0xa000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0xc5, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0x10001, 0x5, 0x3f, 0x7, 0x8, 0x0, 0x5, 0x0, 0x6, 0x3, 0x1, 0x400, 0x2cb, 0x40}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000380)="153f6234488dd25d766070") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x13) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0xd0dd0000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr, [0x800000000000000]}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 11:03:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xffffff7f00000000}, 0x0) 11:03:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf}, 0x0) [ 732.743159] input: syz0 as /devices/virtual/input/input42 11:03:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 11:03:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xc000000}, 0x0) 11:03:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x76cd0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8, 0x6000000000000000, 0x7}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setns(r1, 0x10000000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) r4 = dup3(r1, r0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000080)={r4, 0x3, 0x0, "a2f972a688747c216077bf9c4d85fc88a2dd277ebc3f7a2b90fb6f1c55fb8d59dbc1423d00b4745cce5b0770ef37bacea350f7b8c67cce9766b9415cc2a6364f8277071da14ed59c55b8a85210d12a3858c3a8a383574ded573911fb31359f0bc1099dbc72c03a9db8ab83f93ea5e48cb9ca3bc9d43b443f37bd6bb1661f23536bb9202de87e0a602f265bc62902141f0a515ad648385d90a1af4ec9f0cf73bc43ae51800857d8a3d6bb3735369d5fef9a3d5bb3675ef24d1d851460c2c31d62c854f140fa3ead8b84636d97"}) 11:03:21 executing program 3: r0 = socket$kcm(0x29, 0x10000000002, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000002c0)={{0x4, 0x3, 0xe61, 0x6, 'syz0\x00', 0x7f}, 0x5, 0x1, 0x80, r2, 0x6, 0x8, 'syz1\x00', &(0x7f0000000180)=['em0-bdevtrusted\x00', "c96367726f757073656c6600", "6367726f75707365637572697479766d6e657431f000", '-\x00', ',\x00', '\x00'], 0x37, [], [0x4, 0x6, 0x5, 0x1]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r3) socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x2c01, @ipv4={[0x11], [], @dev}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="e0", 0x1}], 0x1, &(0x7f00000002c0)}, 0xfc) 11:03:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xf9a, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x11}, 0x101}, {0xa, 0x4e23, 0x3, @local, 0x3}, 0x699, [0x1, 0x7ff, 0x3fff800000000000, 0x0, 0x960a, 0x4, 0x8, 0x629]}, 0x5c) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x100000001, 0x40400) ioctl$sock_bt_hci(r2, 0xc00448db, &(0x7f0000000280)="ec129e9f99d1e6e45022b09b7c64b4c13decfda26b21a3753ddfdc48607791bab052f73da6f719f2729421b523d73fd3df13bb804833790825e959103dfc88306d0d7c43e5b70f1a6b932f0b723fd8349c9f56661248eb5a113cbbc0184da8119bb846481e1b466f0a2a8d1a883b6025bb057428afa7a42ef8c98fc00774528a4389c2f7") ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'lo\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="41000003012124050000006b724020002fa4abecae16de263ad8bfbea74fc7e4bb1085fe4663f6a5308483b94762afbc143c68c1291904f1fa6698e2236d52d6729a74d37fc1293afb85623d5bd9ce96550f841a15bbe9e4d864a439beb28402f606dc26e17d040c4f7f7e6eb288ea404284a1a9ebe72f375476b7256143d0a24d80d3fabfaf964fc7d81efddfae0053917d02532afa80db516afe93000000"]}) close(r3) ioctl(r3, 0x3, &(0x7f0000000340)="9f15e5fe0338e89f0ebf634cd44a54dca2ad581fb5881214b1cc3da7711dae30abf3a7a850bd8722ec4bed18a719415d09902b4dea63067fef55064ef5d9550e21008acefaffb179358a889d2130eca62c3b3e97c024e96a6a7f21215104b3aadfa5698a2062aa276f699132c8e49d8be5118be9ac55691597201d4e957ce4dc377f222bff422871e5d71d7b21f91ba323005c688ef6f80d481bce338bfcbe52943be6e78d6c4b633a69f81cf0ce98ade34da590f2e1a0655d3a6c6011d6e6004506dbf2a482439b7eb0b0d9c6fa73acbc2eeccdf3f7ee82201d85058f0fd0e6f2c694499be86502012890") close(r1) 11:03:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x700}, 0x0) 11:03:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:21 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) fsetxattr$security_ima(r2, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "05eaa45f0d0e9f7482d5a50f0451720ea668e4c1"}, 0x15, 0x3) rt_sigqueueinfo(r3, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 733.557911] FAULT_INJECTION: forcing a failure. [ 733.557911] name failslab, interval 1, probability 0, space 0, times 0 [ 733.625162] CPU: 1 PID: 11535 Comm: syz-executor0 Not tainted 4.19.0+ #302 [ 733.632256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.641630] Call Trace: [ 733.644248] dump_stack+0x244/0x39d [ 733.647893] ? dump_stack_print_info.cold.1+0x20/0x20 [ 733.653109] ? debug_smp_processor_id+0x1c/0x20 [ 733.657805] ? perf_trace_lock+0x14d/0x7a0 [ 733.662071] should_fail.cold.4+0xa/0x17 [ 733.666152] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 733.671334] ? mark_held_locks+0x130/0x130 11:03:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:21 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xc00}, 0x0) [ 733.675599] ? lock_is_held_type+0x210/0x210 [ 733.680019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 733.685568] ? check_preemption_disabled+0x48/0x280 [ 733.690595] ? zap_class+0x640/0x640 [ 733.694337] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 733.699893] ? check_preemption_disabled+0x48/0x280 [ 733.704938] ? find_held_lock+0x36/0x1c0 [ 733.709025] ? __lock_is_held+0xb5/0x140 [ 733.713151] ? perf_trace_sched_process_exec+0x860/0x860 [ 733.718630] ? lock_is_held_type+0x210/0x210 [ 733.723070] __should_failslab+0x124/0x180 [ 733.727327] should_failslab+0x9/0x14 [ 733.731145] __kmalloc+0x2d4/0x760 [ 733.734792] ? input_mt_init_slots+0xe5/0x4a0 [ 733.739314] input_mt_init_slots+0xe5/0x4a0 [ 733.743695] uinput_ioctl_handler.isra.10+0x2049/0x2540 [ 733.749083] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 733.754474] ? __fget+0x4d1/0x740 [ 733.757955] ? ksys_dup3+0x680/0x680 [ 733.761697] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 733.766648] uinput_ioctl+0x4c/0x60 [ 733.770296] ? uinput_compat_ioctl+0x90/0x90 11:03:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x40030000000000}, 0x0) [ 733.774725] do_vfs_ioctl+0x1de/0x1720 [ 733.778636] ? ioctl_preallocate+0x300/0x300 [ 733.783059] ? __fget_light+0x2e9/0x430 [ 733.787049] ? fget_raw+0x20/0x20 [ 733.790522] ? __sb_end_write+0xd9/0x110 [ 733.795106] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 733.800664] ? fput+0x130/0x1a0 [ 733.803963] ? do_syscall_64+0x9a/0x820 [ 733.807952] ? do_syscall_64+0x9a/0x820 [ 733.811939] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 733.816552] ? security_file_ioctl+0x94/0xc0 [ 733.820987] ksys_ioctl+0xa9/0xd0 11:03:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 733.824461] __x64_sys_ioctl+0x73/0xb0 [ 733.828369] do_syscall_64+0x1b9/0x820 [ 733.832328] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 733.837727] ? syscall_return_slowpath+0x5e0/0x5e0 [ 733.842687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 733.847559] ? trace_hardirqs_on_caller+0x310/0x310 [ 733.852589] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 733.857626] ? prepare_exit_to_usermode+0x291/0x3b0 [ 733.862678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 733.867548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 733.872750] RIP: 0033:0x457569 [ 733.875956] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 733.894890] RSP: 002b:00007f47ef85cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.902633] RAX: ffffffffffffffda RBX: 00007f47ef85cc90 RCX: 0000000000457569 [ 733.909925] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 733.917206] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 11:03:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) truncate(&(0x7f0000000040)='./file1\x00', 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x186) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r3, 0x1b, &(0x7f0000000000)) dup3(r1, r0, 0x0) fsync(r1) 11:03:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000150001000000000000000002090000", @ANYRES32=r1, @ANYBLOB="08000200e0000002"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000100)={0xffffffffffffff01, 0x6b, 0x3}) 11:03:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 733.924486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47ef85d6d4 [ 733.931770] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 11:03:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x2}, 0x0) 11:03:22 executing program 0 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:22 executing program 3: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYBLOB="006400405d6a32de37c9073711caf10ca2ca36ea4994b5eae6e93151660a9e26906faf41c93be58523a50add5786669abebd4924ef0f06ae689410375c2bdadcc1ff379fb137bbbfaaac71675c1cf61e09"], &(0x7f0000000700)=0x1) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x3f, 0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000001ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) bind$inet(r1, &(0x7f0000000400)={0x2, 0x2004e25, @remote}, 0x8abb0a022360233c) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000eaa8dd7b982103077fe94e781219960e54ecbd85b388921da8aa686a7c5df3ebc782f69d05000000008d1c09e51775065a37f17513"]}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x2000000000001, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f00000001c0)=0xfffffffffffffee5) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='cubic\x00', 0x6) bind$inet6(r4, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mlockall(0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000700)='highspeed\x00', 0xfffffffffffffec1) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000003c0)=""/192, &(0x7f0000000340)=0xc0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) r5 = fcntl$dupfd(r4, 0x406, r4) write$FUSE_WRITE(r5, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x2, {0xffffffffffffac7d}}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r4, 0x29, 0x1f, &(0x7f00000004c0)={@remote}, &(0x7f0000000480)=0x10) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2}) 11:03:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x10001, 0x2800) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x10001, 0x4) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0x7, 0xfffffffffffffffd, 0x458f}) r4 = semget$private(0x0, 0x4, 0xc0) semctl$GETVAL(r4, 0x3, 0xc, &(0x7f0000000100)=""/143) dup3(r1, r0, 0x0) 11:03:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x6}, 0x0) [ 734.359497] FAULT_INJECTION: forcing a failure. [ 734.359497] name failslab, interval 1, probability 0, space 0, times 0 [ 734.393353] CPU: 0 PID: 11602 Comm: syz-executor0 Not tainted 4.19.0+ #302 [ 734.400431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.409799] Call Trace: [ 734.412417] dump_stack+0x244/0x39d [ 734.416078] ? dump_stack_print_info.cold.1+0x20/0x20 [ 734.421313] ? debug_smp_processor_id+0x1c/0x20 [ 734.426016] ? perf_trace_lock+0x14d/0x7a0 [ 734.430287] should_fail.cold.4+0xa/0x17 [ 734.434371] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 734.439493] ? __save_stack_trace+0x8d/0xf0 [ 734.439543] ? zap_class+0x640/0x640 [ 734.439564] ? save_stack+0xa9/0xd0 [ 734.439590] ? find_held_lock+0x36/0x1c0 [ 734.439612] ? __lock_is_held+0xb5/0x140 [ 734.459480] ? send_pcc_cmd+0x668/0xb20 [ 734.463508] ? perf_trace_sched_process_exec+0x860/0x860 [ 734.468992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 734.474560] __should_failslab+0x124/0x180 [ 734.474583] should_failslab+0x9/0x14 [ 734.474598] __kmalloc+0x2d4/0x760 [ 734.474690] ? input_register_device+0x59f/0xce0 [ 734.474717] input_register_device+0x59f/0xce0 [ 734.495623] ? devm_input_allocate_device+0x120/0x120 [ 734.500836] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 734.505869] ? input_mt_init_slots+0xba/0x4a0 [ 734.505897] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 734.505921] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 734.505951] ? __fget+0x4d1/0x740 [ 734.505981] ? ksys_dup3+0x680/0x680 [ 734.522228] IPVS: ftp: loaded support on port[0] = 21 [ 734.524567] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 734.524593] uinput_ioctl+0x4c/0x60 [ 734.524613] ? uinput_compat_ioctl+0x90/0x90 [ 734.538435] do_vfs_ioctl+0x1de/0x1720 [ 734.538464] ? ioctl_preallocate+0x300/0x300 [ 734.538486] ? __fget_light+0x2e9/0x430 11:03:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 734.538506] ? fget_raw+0x20/0x20 [ 734.538529] ? __sb_end_write+0xd9/0x110 [ 734.538553] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 734.538568] ? fput+0x130/0x1a0 [ 734.538589] ? do_syscall_64+0x9a/0x820 [ 734.546616] ? do_syscall_64+0x9a/0x820 [ 734.546636] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 734.546677] ? security_file_ioctl+0x94/0xc0 [ 734.546702] ksys_ioctl+0xa9/0xd0 [ 734.562417] __x64_sys_ioctl+0x73/0xb0 [ 734.562438] do_syscall_64+0x1b9/0x820 [ 734.562481] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 734.562509] ? syscall_return_slowpath+0x5e0/0x5e0 [ 734.572122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 734.572142] ? trace_hardirqs_on_caller+0x310/0x310 [ 734.572174] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 734.572195] ? prepare_exit_to_usermode+0x291/0x3b0 [ 734.572220] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 734.583480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 734.583496] RIP: 0033:0x457569 11:03:22 executing program 0 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 734.583513] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 734.583523] RSP: 002b:00007f47ef85cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.583543] RAX: ffffffffffffffda RBX: 00007f47ef85cc90 RCX: 0000000000457569 [ 734.583554] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 734.583565] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 734.583575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47ef85d6d4 [ 734.583586] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 11:03:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x9e06000000000000}, 0x0) [ 734.755539] FAULT_INJECTION: forcing a failure. [ 734.755539] name failslab, interval 1, probability 0, space 0, times 0 [ 734.768588] CPU: 1 PID: 11613 Comm: syz-executor0 Not tainted 4.19.0+ #302 [ 734.775629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.784992] Call Trace: [ 734.787606] dump_stack+0x244/0x39d [ 734.791259] ? dump_stack_print_info.cold.1+0x20/0x20 [ 734.796478] ? debug_smp_processor_id+0x1c/0x20 [ 734.801178] ? perf_trace_lock+0x14d/0x7a0 11:03:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 734.805435] should_fail.cold.4+0xa/0x17 [ 734.809511] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 734.809535] ? is_bpf_text_address+0xd3/0x170 [ 734.809554] ? kernel_text_address+0x79/0xf0 [ 734.809572] ? __kernel_text_address+0xd/0x40 [ 734.809590] ? zap_class+0x640/0x640 [ 734.831807] ? __save_stack_trace+0x8d/0xf0 [ 734.836152] ? find_held_lock+0x36/0x1c0 [ 734.836185] ? __lock_is_held+0xb5/0x140 [ 734.836224] ? perf_trace_sched_process_exec+0x860/0x860 [ 734.849769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 734.855325] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 734.860812] __should_failslab+0x124/0x180 [ 734.865064] should_failslab+0x9/0x14 [ 734.868884] kmem_cache_alloc_trace+0x2d7/0x750 [ 734.868902] ? check_preemption_disabled+0x48/0x280 [ 734.868923] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 734.869024] device_add+0xecb/0x17b0 [ 734.869054] ? get_device_parent.isra.25+0x5a0/0x5a0 [ 734.893071] ? rcu_read_lock_sched_held+0x14f/0x180 [ 734.898107] ? __kmalloc+0x5e4/0x760 [ 734.901859] ? input_register_device+0x59f/0xce0 [ 734.906665] input_register_device+0x728/0xce0 [ 734.911275] ? devm_input_allocate_device+0x120/0x120 [ 734.916489] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 734.921523] ? input_mt_init_slots+0xba/0x4a0 [ 734.926047] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 734.931350] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 734.936746] ? __fget+0x4d1/0x740 [ 734.940233] ? ksys_dup3+0x680/0x680 [ 734.943991] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 734.948947] uinput_ioctl+0x4c/0x60 [ 734.952595] ? uinput_compat_ioctl+0x90/0x90 [ 734.957023] do_vfs_ioctl+0x1de/0x1720 [ 734.960925] ? ioctl_preallocate+0x300/0x300 [ 734.965357] ? __fget_light+0x2e9/0x430 [ 734.969324] ? fget_raw+0x20/0x20 [ 734.972771] ? __sb_end_write+0xd9/0x110 [ 734.976828] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 734.982357] ? fput+0x130/0x1a0 [ 734.985654] ? do_syscall_64+0x9a/0x820 [ 734.989636] ? do_syscall_64+0x9a/0x820 [ 734.993602] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 734.998185] ? security_file_ioctl+0x94/0xc0 [ 735.002597] ksys_ioctl+0xa9/0xd0 [ 735.006049] __x64_sys_ioctl+0x73/0xb0 [ 735.009943] do_syscall_64+0x1b9/0x820 [ 735.013838] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 735.019209] ? syscall_return_slowpath+0x5e0/0x5e0 [ 735.024143] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.028978] ? trace_hardirqs_on_caller+0x310/0x310 [ 735.034000] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 735.039032] ? prepare_exit_to_usermode+0x291/0x3b0 [ 735.044063] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.048940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 735.054136] RIP: 0033:0x457569 [ 735.057320] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 735.076219] RSP: 002b:00007f47ef85cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.083953] RAX: ffffffffffffffda RBX: 00007f47ef85cc90 RCX: 0000000000457569 [ 735.091232] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 735.098499] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 735.105773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47ef85d6d4 [ 735.113039] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 11:03:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:23 executing program 0 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 735.268579] device bridge_slave_1 left promiscuous mode [ 735.274137] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.302893] FAULT_INJECTION: forcing a failure. [ 735.302893] name failslab, interval 1, probability 0, space 0, times 0 [ 735.328853] CPU: 1 PID: 11628 Comm: syz-executor0 Not tainted 4.19.0+ #302 [ 735.335906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.345286] Call Trace: [ 735.347911] dump_stack+0x244/0x39d [ 735.351569] ? dump_stack_print_info.cold.1+0x20/0x20 [ 735.356789] ? debug_smp_processor_id+0x1c/0x20 [ 735.361485] ? perf_trace_lock+0x14d/0x7a0 [ 735.365755] should_fail.cold.4+0xa/0x17 [ 735.369854] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 735.374979] ? debug_smp_processor_id+0x1c/0x20 [ 735.379674] ? perf_trace_lock_acquire+0x15b/0x800 [ 735.384628] ? lock_is_held_type+0x210/0x210 [ 735.389064] ? zap_class+0x640/0x640 [ 735.392808] ? find_held_lock+0x36/0x1c0 [ 735.396893] ? __lock_is_held+0xb5/0x140 [ 735.401130] ? perf_trace_sched_process_exec+0x860/0x860 [ 735.406633] __should_failslab+0x124/0x180 [ 735.410895] should_failslab+0x9/0x14 [ 735.414711] __kmalloc_track_caller+0x2d0/0x750 [ 735.419395] ? trace_hardirqs_off_caller+0x310/0x310 [ 735.424517] ? kstrdup_const+0x66/0x80 [ 735.428418] kstrdup+0x39/0x70 [ 735.431628] kstrdup_const+0x66/0x80 [ 735.435372] __kernfs_new_node+0xe8/0x8d0 [ 735.439542] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 735.444333] ? tick_nohz_tick_stopped+0x1a/0x90 [ 735.449012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 735.454572] ? irq_work_queue+0x36/0x1d0 [ 735.458645] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 735.464263] ? wake_up_klogd+0x11a/0x180 [ 735.468341] ? console_device+0xc0/0xc0 [ 735.472326] ? vprintk_emit+0x322/0x930 [ 735.476311] ? __down_trylock_console_sem+0x151/0x1f0 [ 735.481529] ? vprintk_emit+0x268/0x930 [ 735.485521] ? wake_up_klogd+0x180/0x180 [ 735.489592] ? __mutex_lock+0x85e/0x16f0 [ 735.493661] ? kernel_text_address+0x79/0xf0 [ 735.498087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 735.503648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 735.509224] kernfs_new_node+0x95/0x120 [ 735.513249] kernfs_create_dir_ns+0x4d/0x160 [ 735.517703] sysfs_create_dir_ns+0x19b/0x340 [ 735.522133] ? sysfs_create_mount_point+0xa0/0xa0 [ 735.526991] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 735.531774] ? class_dir_child_ns_type+0xd/0x60 [ 735.536462] kobject_add_internal.cold.11+0x116/0x6af [ 735.541675] ? kobj_ns_type_registered+0x60/0x60 [ 735.546447] ? lock_downgrade+0x900/0x900 [ 735.550611] ? refcount_add_not_zero_checked+0x330/0x330 [ 735.556086] ? kasan_check_read+0x11/0x20 [ 735.560251] kobject_add+0x13f/0x1b0 [ 735.563983] ? kset_create_and_add+0x190/0x190 [ 735.568590] ? mutex_unlock+0xd/0x10 [ 735.572326] device_add+0x3cf/0x17b0 [ 735.576067] ? get_device_parent.isra.25+0x5a0/0x5a0 [ 735.581187] ? rcu_read_lock_sched_held+0x14f/0x180 [ 735.586224] ? __kmalloc+0x5e4/0x760 [ 735.589957] ? input_register_device+0x59f/0xce0 [ 735.594735] input_register_device+0x728/0xce0 [ 735.599340] ? devm_input_allocate_device+0x120/0x120 [ 735.604545] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 735.609569] ? input_mt_init_slots+0xba/0x4a0 [ 735.614084] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 735.619385] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 735.624774] ? __fget+0x4d1/0x740 [ 735.628258] ? ksys_dup3+0x680/0x680 [ 735.632006] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 735.636956] uinput_ioctl+0x4c/0x60 [ 735.640599] ? uinput_compat_ioctl+0x90/0x90 [ 735.645019] do_vfs_ioctl+0x1de/0x1720 [ 735.648939] ? ioctl_preallocate+0x300/0x300 [ 735.653366] ? __fget_light+0x2e9/0x430 [ 735.657354] ? fget_raw+0x20/0x20 [ 735.660821] ? __sb_end_write+0xd9/0x110 [ 735.664901] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 735.670452] ? fput+0x130/0x1a0 [ 735.673748] ? do_syscall_64+0x9a/0x820 [ 735.677732] ? do_syscall_64+0x9a/0x820 [ 735.681716] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 735.686316] ? security_file_ioctl+0x94/0xc0 [ 735.690744] ksys_ioctl+0xa9/0xd0 [ 735.694228] __x64_sys_ioctl+0x73/0xb0 [ 735.698132] do_syscall_64+0x1b9/0x820 [ 735.702034] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 735.707413] ? syscall_return_slowpath+0x5e0/0x5e0 [ 735.712377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.717235] ? trace_hardirqs_on_caller+0x310/0x310 [ 735.722266] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 735.727296] ? prepare_exit_to_usermode+0x291/0x3b0 [ 735.732421] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.737299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 735.742495] RIP: 0033:0x457569 [ 735.745700] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 735.764621] RSP: 002b:00007f47ef85cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.772355] RAX: ffffffffffffffda RBX: 00007f47ef85cc90 RCX: 0000000000457569 [ 735.779639] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 735.786921] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 735.794685] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47ef85d6d4 [ 735.801978] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 [ 735.813158] kobject_add_internal failed for input47 (error: -12 parent: input) [ 735.820999] device bridge_slave_0 left promiscuous mode 11:03:23 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x10001}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) unshare(0x400) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000780)=""/153) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2000}, 0x4) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x80000000) getdents64(0xffffffffffffffff, &(0x7f0000000380)=""/79, 0x4f) clock_gettime(0x0, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$TIOCSBRK(r3, 0x5427) io_setup(0x0, &(0x7f0000000300)) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x8, 0x40000) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000580)=ANY=[]) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000b80)={0x1f, {0x0, 0x10000, 0x0, 0x0, 0x6, 0x5}}, 0x8) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000004c0)=0x120) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) setfsgid(0x0) 11:03:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xc00e000000000000}, 0x0) [ 735.826514] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.974056] team0 (unregistering): Port device team_slave_1 removed [ 736.000142] team0 (unregistering): Port device team_slave_0 removed [ 736.014796] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 736.073367] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 736.164782] bond0 (unregistering): Released all slaves [ 736.962095] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.968664] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.976190] device bridge_slave_0 entered promiscuous mode [ 737.028443] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.035045] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.043616] device bridge_slave_1 entered promiscuous mode [ 737.091063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 737.140321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 737.303520] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 737.354109] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 737.405711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 737.413146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 737.600812] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 737.608592] team0: Port device team_slave_0 added [ 737.658216] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 737.665815] team0: Port device team_slave_1 added [ 737.695950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 737.731651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 737.774106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 737.781394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 737.793788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 737.830594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 737.837825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 737.845933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 738.192991] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.199374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.205958] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.212374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.219729] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 738.237308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 739.245147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.344582] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 739.446448] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 739.452766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 739.460172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 739.553616] 8021q: adding VLAN 0 to HW filter on device team0 11:03:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:28 executing program 0 (fault-call:4 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x400000000000000}, 0x0) 11:03:28 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000b4b000/0x3000)=nil, &(0x7f000049a000/0x3000)=nil, 0x3000, 0x1}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, &(0x7f00000001c0)=""/17, 0x11}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) close(r1) [ 740.179335] FAULT_INJECTION: forcing a failure. [ 740.179335] name failslab, interval 1, probability 0, space 0, times 0 [ 740.228626] CPU: 0 PID: 11913 Comm: syz-executor0 Not tainted 4.19.0+ #302 [ 740.235714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.245077] Call Trace: [ 740.247700] dump_stack+0x244/0x39d [ 740.251363] ? dump_stack_print_info.cold.1+0x20/0x20 [ 740.256573] ? debug_smp_processor_id+0x1c/0x20 [ 740.261261] ? perf_trace_lock+0x14d/0x7a0 [ 740.265520] should_fail.cold.4+0xa/0x17 [ 740.269616] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 740.274744] ? kasan_kmalloc+0xc7/0xe0 11:03:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x76cd000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 740.278645] ? __kmalloc_track_caller+0x14a/0x750 [ 740.283518] ? kstrdup+0x39/0x70 [ 740.286892] ? kstrdup_const+0x66/0x80 [ 740.290800] ? __kernfs_new_node+0xe8/0x8d0 [ 740.295138] ? kernfs_new_node+0x95/0x120 [ 740.299306] ? device_add+0x3cf/0x17b0 [ 740.303203] ? input_register_device+0x728/0xce0 [ 740.303221] ? uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 740.303236] ? uinput_ioctl+0x4c/0x60 [ 740.303254] ? do_vfs_ioctl+0x1de/0x1720 [ 740.303275] ? ksys_ioctl+0xa9/0xd0 [ 740.317272] ? zap_class+0x640/0x640 11:03:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xfffff000}, 0x0) [ 740.317288] ? find_held_lock+0x36/0x1c0 [ 740.317313] ? find_held_lock+0x36/0x1c0 [ 740.317335] ? __lock_is_held+0xb5/0x140 [ 740.317371] ? perf_trace_sched_process_exec+0x860/0x860 [ 740.346380] __should_failslab+0x124/0x180 [ 740.346402] should_failslab+0x9/0x14 [ 740.346418] kmem_cache_alloc+0x2be/0x730 [ 740.346437] ? kstrdup+0x59/0x70 [ 740.361983] __kernfs_new_node+0x127/0x8d0 [ 740.366238] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 740.371013] ? tick_nohz_tick_stopped+0x1a/0x90 [ 740.375705] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 740.381255] ? irq_work_queue+0x36/0x1d0 [ 740.381274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 740.381293] ? wake_up_klogd+0x11a/0x180 [ 740.381310] ? console_device+0xc0/0xc0 [ 740.381330] ? vprintk_emit+0x322/0x930 [ 740.402922] ? __down_trylock_console_sem+0x151/0x1f0 [ 740.408133] ? vprintk_emit+0x268/0x930 [ 740.412129] ? wake_up_klogd+0x180/0x180 [ 740.416206] ? __mutex_lock+0x85e/0x16f0 [ 740.420280] ? kernel_text_address+0x79/0xf0 [ 740.424711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 740.430281] kernfs_new_node+0x95/0x120 [ 740.434278] kernfs_create_dir_ns+0x4d/0x160 [ 740.438716] sysfs_create_dir_ns+0x19b/0x340 [ 740.443149] ? sysfs_create_mount_point+0xa0/0xa0 [ 740.448008] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 740.452793] ? class_dir_child_ns_type+0xd/0x60 [ 740.457491] kobject_add_internal.cold.11+0x116/0x6af [ 740.462712] ? kobj_ns_type_registered+0x60/0x60 [ 740.467494] ? lock_downgrade+0x900/0x900 [ 740.471683] ? refcount_add_not_zero_checked+0x330/0x330 11:03:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x9effffff}, 0x0) [ 740.477157] ? kasan_check_read+0x11/0x20 [ 740.481333] kobject_add+0x13f/0x1b0 [ 740.485065] ? kset_create_and_add+0x190/0x190 [ 740.489683] ? mutex_unlock+0xd/0x10 [ 740.489710] device_add+0x3cf/0x17b0 [ 740.497140] ? get_device_parent.isra.25+0x5a0/0x5a0 [ 740.497159] ? rcu_read_lock_sched_held+0x14f/0x180 [ 740.497175] ? __kmalloc+0x5e4/0x760 [ 740.497201] ? input_register_device+0x59f/0xce0 [ 740.497224] input_register_device+0x728/0xce0 [ 740.520432] ? devm_input_allocate_device+0x120/0x120 11:03:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x4}, 0x0) [ 740.525641] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 740.530698] ? input_mt_init_slots+0xba/0x4a0 [ 740.535244] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 740.540545] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 740.545932] ? __fget+0x4d1/0x740 [ 740.549409] ? ksys_dup3+0x680/0x680 [ 740.553150] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 740.558100] uinput_ioctl+0x4c/0x60 [ 740.561751] ? uinput_compat_ioctl+0x90/0x90 [ 740.566176] do_vfs_ioctl+0x1de/0x1720 [ 740.570093] ? ioctl_preallocate+0x300/0x300 [ 740.574523] ? __fget_light+0x2e9/0x430 11:03:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x500}, 0x0) [ 740.578524] ? fget_raw+0x20/0x20 [ 740.581994] ? __sb_end_write+0xd9/0x110 [ 740.586075] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 740.591659] ? fput+0x130/0x1a0 [ 740.594979] ? do_syscall_64+0x9a/0x820 [ 740.598970] ? do_syscall_64+0x9a/0x820 [ 740.602962] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 740.607572] ? security_file_ioctl+0x94/0xc0 [ 740.612003] ksys_ioctl+0xa9/0xd0 [ 740.615484] __x64_sys_ioctl+0x73/0xb0 [ 740.619394] do_syscall_64+0x1b9/0x820 [ 740.623305] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 11:03:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xec0}, 0x0) [ 740.628703] ? syscall_return_slowpath+0x5e0/0x5e0 [ 740.633662] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 740.638528] ? trace_hardirqs_on_caller+0x310/0x310 [ 740.643582] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 740.648631] ? prepare_exit_to_usermode+0x291/0x3b0 [ 740.653667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 740.658546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 740.658560] RIP: 0033:0x457569 11:03:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80080) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) r3 = semget(0x1, 0x3, 0x400) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000080)=""/67) dup3(r1, r0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x9, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000240)="0725f35b632f69747e22ef7d4bc392ef680a43adc066d57724a33b4e3edad6f609075a1624423dc534464dc66a") [ 740.658580] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 740.666948] RSP: 002b:00007f47ef85cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.666966] RAX: ffffffffffffffda RBX: 00007f47ef85cc90 RCX: 0000000000457569 [ 740.666976] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 740.666985] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 740.666996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47ef85d6d4 [ 740.667006] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 [ 740.703304] kobject_add_internal failed for input48 (error: -12 parent: input) 11:03:28 executing program 0 (fault-call:4 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000540)="c4c140161666b833000f00d80fc79d04000000440f20c03505000000440f22c00f01c9c4e27913ccb9800000c00f3235000400000f3066b86e000f00d066b8e4008ee80fc7ab42430000", 0x4a}], 0x1, 0x0, &(0x7f0000000280), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)="fc7e8c5ffb1027fae06fb2f38bdb10888837b367d566c4527c8f78402a11aa61882b95357c613c92dc4afcb6454872755dd42ea2e773629b856cea1a71f9781d802593ca65680512b5d17f65c0f9f701e31a616c9d8c15dcf322e1fbbb12d460273cdeb4e37bd8bc152304ac2b081dbf13464c20bbf91f25c747169d54349b97e0f4967db2bab820c858aa3442cd4aec323d43132e98b97b32c7fb96d283b60f0954cdc4a8"}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280)=0x800080, 0x4) r3 = gettid() timer_create(0x2, &(0x7f0000000500)={0x0, 0x2a, 0x5, @tid=r3}, &(0x7f0000000680)) r4 = socket(0x11, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) shmget(0x3, 0x4000, 0x90, &(0x7f0000ffb000/0x4000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r4, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200029bd7000fbdbdf2510000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x2000005, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x96100, 0x0) mknodat(r7, &(0x7f0000000040)='./file0\x00', 0x8, 0x1) 11:03:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xfffffffffffff000}, 0x0) 11:03:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r3, 0x7f, 0x8}, 0xc) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 740.902802] FAULT_INJECTION: forcing a failure. [ 740.902802] name failslab, interval 1, probability 0, space 0, times 0 [ 740.970831] CPU: 1 PID: 11960 Comm: syz-executor0 Not tainted 4.19.0+ #302 [ 740.977879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.987241] Call Trace: [ 740.989855] dump_stack+0x244/0x39d [ 740.993510] ? dump_stack_print_info.cold.1+0x20/0x20 [ 740.998726] ? debug_smp_processor_id+0x1c/0x20 [ 741.003432] ? perf_trace_lock+0x14d/0x7a0 [ 741.007697] should_fail.cold.4+0xa/0x17 [ 741.011778] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 741.016897] ? kernfs_activate+0x8e/0x2c0 [ 741.016929] ? zap_class+0x640/0x640 [ 741.016956] ? find_held_lock+0x36/0x1c0 [ 741.016978] ? __lock_is_held+0xb5/0x140 [ 741.017029] ? perf_trace_sched_process_exec+0x860/0x860 [ 741.024861] ? kasan_check_write+0x14/0x20 [ 741.042640] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 741.047598] __should_failslab+0x124/0x180 [ 741.051853] should_failslab+0x9/0x14 [ 741.055674] kmem_cache_alloc+0x2be/0x730 [ 741.059843] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 741.064883] __kernfs_new_node+0x127/0x8d0 [ 741.069135] ? check_preemption_disabled+0x48/0x280 [ 741.074188] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 741.078964] ? debug_smp_processor_id+0x1c/0x20 [ 741.083646] ? perf_trace_lock+0x14d/0x7a0 [ 741.087896] ? mutex_unlock+0xd/0x10 [ 741.091631] ? kernfs_activate+0x21a/0x2c0 [ 741.095885] ? lock_is_held_type+0x210/0x210 [ 741.100311] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 741.105865] ? kernfs_link_sibling+0x1d2/0x3b0 [ 741.110473] ? zap_class+0x640/0x640 [ 741.114220] ? zap_class+0x640/0x640 [ 741.117946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 741.123527] ? find_held_lock+0x36/0x1c0 [ 741.127609] kernfs_new_node+0x95/0x120 [ 741.131610] __kernfs_create_file+0x5a/0x340 [ 741.136044] sysfs_add_file_mode_ns+0x222/0x530 [ 741.140742] sysfs_create_file_ns+0x1a3/0x270 [ 741.145261] ? sysfs_add_file_mode_ns+0x530/0x530 [ 741.150127] ? __down_interruptible+0x700/0x700 [ 741.154817] ? kobject_add+0x14c/0x1b0 [ 741.158723] ? kset_create_and_add+0x190/0x190 [ 741.163337] device_create_file+0xf4/0x1e0 [ 741.167685] ? acpi_bind_one+0x8e0/0x8e0 [ 741.171768] device_add+0x416/0x17b0 [ 741.175510] ? get_device_parent.isra.25+0x5a0/0x5a0 [ 741.180637] ? rcu_read_lock_sched_held+0x14f/0x180 [ 741.185675] ? __kmalloc+0x5e4/0x760 [ 741.189418] ? input_register_device+0x59f/0xce0 [ 741.194203] input_register_device+0x728/0xce0 [ 741.198810] ? devm_input_allocate_device+0x120/0x120 [ 741.204022] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 741.209051] ? input_mt_init_slots+0xba/0x4a0 [ 741.213576] uinput_ioctl_handler.isra.10+0xb88/0x2540 [ 741.218879] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 741.224276] ? __fget+0x4d1/0x740 [ 741.227761] ? ksys_dup3+0x680/0x680 [ 741.231508] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 741.236458] uinput_ioctl+0x4c/0x60 [ 741.240101] ? uinput_compat_ioctl+0x90/0x90 [ 741.244540] do_vfs_ioctl+0x1de/0x1720 [ 741.248456] ? ioctl_preallocate+0x300/0x300 [ 741.252890] ? __fget_light+0x2e9/0x430 [ 741.256887] ? fget_raw+0x20/0x20 [ 741.260364] ? __sb_end_write+0xd9/0x110 [ 741.264452] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 741.270005] ? fput+0x130/0x1a0 [ 741.273306] ? do_syscall_64+0x9a/0x820 [ 741.277293] ? do_syscall_64+0x9a/0x820 [ 741.281278] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 741.285880] ? security_file_ioctl+0x94/0xc0 [ 741.290311] ksys_ioctl+0xa9/0xd0 [ 741.293790] __x64_sys_ioctl+0x73/0xb0 [ 741.297695] do_syscall_64+0x1b9/0x820 [ 741.301602] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 741.306981] ? syscall_return_slowpath+0x5e0/0x5e0 [ 741.311925] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 741.316790] ? trace_hardirqs_on_caller+0x310/0x310 [ 741.321822] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 741.326858] ? prepare_exit_to_usermode+0x291/0x3b0 [ 741.331905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 741.336773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 741.341967] RIP: 0033:0x457569 [ 741.341985] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 741.341994] RSP: 002b:00007f47ef85cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:03:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xd}, 0x0) [ 741.342012] RAX: ffffffffffffffda RBX: 00007f47ef85cc90 RCX: 0000000000457569 [ 741.342021] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 741.342031] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 741.342046] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47ef85d6d4 [ 741.400893] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 0000000000000004 11:03:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x1f}, 0x1) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x800000000000000}, 0x0) [ 741.634479] IPVS: ftp: loaded support on port[0] = 21 11:03:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 741.762431] device bridge_slave_1 left promiscuous mode [ 741.768199] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.846749] input: syz0 as /devices/virtual/input/input50 [ 741.853993] device bridge_slave_0 left promiscuous mode [ 741.879412] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.006623] team0 (unregistering): Port device team_slave_1 removed [ 742.019716] team0 (unregistering): Port device team_slave_0 removed [ 742.034169] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 742.085086] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 742.175517] bond0 (unregistering): Released all slaves [ 742.355807] device lo left promiscuous mode [ 742.363503] device lo entered promiscuous mode [ 742.518128] device lo left promiscuous mode [ 743.013064] device lo entered promiscuous mode 11:03:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x5) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x6000000}, 0x0) 11:03:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000540)="c4c140161666b833000f00d80fc79d04000000440f20c03505000000440f22c00f01c9c4e27913ccb9800000c00f3235000400000f3066b86e000f00d066b8e4008ee80fc7ab42430000", 0x4a}], 0x1, 0x0, &(0x7f0000000280), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)="fc7e8c5ffb1027fae06fb2f38bdb10888837b367d566c4527c8f78402a11aa61882b95357c613c92dc4afcb6454872755dd42ea2e773629b856cea1a71f9781d802593ca65680512b5d17f65c0f9f701e31a616c9d8c15dcf322e1fbbb12d460273cdeb4e37bd8bc152304ac2b081dbf13464c20bbf91f25c747169d54349b97e0f4967db2bab820c858aa3442cd4aec323d43132e98b97b32c7fb96d283b60f0954cdc4a8"}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280)=0x800080, 0x4) r3 = gettid() timer_create(0x2, &(0x7f0000000500)={0x0, 0x2a, 0x5, @tid=r3}, &(0x7f0000000680)) r4 = socket(0x11, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) shmget(0x3, 0x4000, 0x90, &(0x7f0000ffb000/0x4000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r4, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200029bd7000fbdbdf2510000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x2000005, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x96100, 0x0) mknodat(r7, &(0x7f0000000040)='./file0\x00', 0x8, 0x1) [ 743.781288] device lo left promiscuous mode [ 744.323735] device lo entered promiscuous mode [ 744.579199] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.585740] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.595040] device bridge_slave_0 entered promiscuous mode [ 744.635158] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.641712] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.649159] device bridge_slave_1 entered promiscuous mode [ 744.679057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 744.712391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 744.840084] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 744.872638] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 745.005916] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 745.013391] team0: Port device team_slave_0 added [ 745.042214] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 745.049661] team0: Port device team_slave_1 added [ 745.079262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 745.111541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.145092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.176706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 745.465415] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.471844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.478566] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.484927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.492510] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 746.457175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 746.539307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.638233] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 746.735050] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 746.741265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 746.748812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 746.841881] 8021q: adding VLAN 0 to HW filter on device team0 11:03:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x76cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5507) 11:03:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x4000000}, 0x0) 11:03:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000540)="c4c140161666b833000f00d80fc79d04000000440f20c03505000000440f22c00f01c9c4e27913ccb9800000c00f3235000400000f3066b86e000f00d066b8e4008ee80fc7ab42430000", 0x4a}], 0x1, 0x0, &(0x7f0000000280), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)="fc7e8c5ffb1027fae06fb2f38bdb10888837b367d566c4527c8f78402a11aa61882b95357c613c92dc4afcb6454872755dd42ea2e773629b856cea1a71f9781d802593ca65680512b5d17f65c0f9f701e31a616c9d8c15dcf322e1fbbb12d460273cdeb4e37bd8bc152304ac2b081dbf13464c20bbf91f25c747169d54349b97e0f4967db2bab820c858aa3442cd4aec323d43132e98b97b32c7fb96d283b60f0954cdc4a8"}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280)=0x800080, 0x4) r3 = gettid() timer_create(0x2, &(0x7f0000000500)={0x0, 0x2a, 0x5, @tid=r3}, &(0x7f0000000680)) r4 = socket(0x11, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r5, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) shmget(0x3, 0x4000, 0x90, &(0x7f0000ffb000/0x4000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r4, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200029bd7000fbdbdf2510000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x2000005, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x96100, 0x0) mknodat(r7, &(0x7f0000000040)='./file0\x00', 0x8, 0x1) 11:03:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf0ffffff}, 0x0) 11:03:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5509) 11:03:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl(r2, 0x1, &(0x7f0000000000)="dc5f25ef5220ce54984a0dbf4baadd07f975b376c0ea16a2fbfa94705a08e78254458da59830135817635c538ed8a1bc4772aa9a6ee1aaf0553f") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r3, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x9}, 0x0) 11:03:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x550f) 11:03:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) r3 = dup3(r1, r0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000000)='syz1\x00', 0x1ff) 11:03:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x1000000}, 0x0) [ 748.271849] device lo left promiscuous mode 11:03:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20040, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x3, @empty, 0xd30}, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x7}], 0x38) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x2, 0x9}) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4048ae9b, 0xfffffffffffffffd) dup2(r1, r2) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") 11:03:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 11:03:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xb000000}, 0x0) 11:03:36 executing program 1: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r0, 0x15, &(0x7f0000000280)) [ 748.665328] device lo entered promiscuous mode 11:03:36 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x3}, 0x0) 11:03:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x4008556c) 11:03:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @local}, &(0x7f00000000c0)=0xc) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000001c40), 0xc, &(0x7f0000001c80)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xc11, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'nr0\x00'}]}, 0x44}}, 0x0) 11:03:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) 11:03:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 11:03:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x69e}, 0x0) 11:03:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x8000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = gettid() ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x6, 0x1d, "d0c4878e651225a5a7ba55203e75ab0829960dd8f55b8d22120d3aada04b4e4620dc539ac8c3e910f38677f5a1660a60077bd76b72d1c2a6593b5a9dad932b64", "38296b141478c7f9a849d28c263593455421a9404b612e340c215c117540322a", [0x8a, 0x7ff]}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}]}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/snapshot\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001b00)={0x8, 0x1f, 0x8200, 0x9af, 0xc86, 0x8, 0x54, 0x10001, 0x0}, &(0x7f0000001b40)=0x20) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001b80)={r1, 0x4000000000000}, 0x8) 11:03:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x4004556b) 11:03:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 749.631584] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore 11:03:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x4020940d) [ 749.682909] overlayfs: missing 'lowerdir' 11:03:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xffffff9e}, 0x0) 11:03:37 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) ptrace$setsig(0x4203, r2, 0x6, &(0x7f00000000c0)={0x5, 0x4, 0x20, 0x8}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f00000000c0), 0x0, 0x0) r4 = getpgrp(0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, r4, 0x8ee9, 0x30) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 11:03:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000000)=""/12) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) ioctl$int_in(r0, 0x0, &(0x7f00000001c0)=0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x41, &(0x7f0000000140)={{}, {r4, r5+10000000}}, &(0x7f0000000100)) rt_sigqueueinfo(r2, 0x16, &(0x7f0000000280)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0x725) r6 = dup3(r1, r0, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240), 0x10) 11:03:37 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5563) 11:03:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x200000000000000}, 0x0) 11:03:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:38 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xea76, 0x2000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x401, 0x400, 0x0, 0x9, 0x4000000007f, 0x0, 0x1ff, 0x46c66394, 0x3f, 0x2, 0x1, 0xffffffffffffffff}) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @random="7bcadce1c101", 'teql0\x00'}}, 0x1e) syz_read_part_table(0xbdf5, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="c9", 0x1}]) 11:03:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf000}, 0x0) 11:03:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0xc06855c8) 11:03:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xc}, 0x0) 11:03:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() socketpair(0x10, 0x6, 0xf3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000080)={0x81, 0x80000001, 0x8, 'queue1\x00', 0x4}) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xc3ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xd00000000000000}, 0x0) 11:03:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x40045564) 11:03:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000004c0)={'nr0\x00', 0x9fb7}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_team\x00', 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000004e00)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28}, 0x28) r1 = socket(0xa, 0x4, 0xfffffffffffffffc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x0, 0xfffffffffffffe00, 0xda}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={r2, @in6={{0xa, 0x4e22, 0x8}}}, &(0x7f00000005c0)=0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e24, 0x1, @mcast1, 0x8}}}, &(0x7f0000000480)=0x84) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc4) sendto$inet(r0, &(0x7f0000000340)='T', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) 11:03:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x500000000000000}, 0x0) 11:03:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5502) 11:03:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:41 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x400, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c81, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgrp(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) r6 = getpid() ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r3, &(0x7f0000000040)={r7, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ifreq(r8, 0x8923, &(0x7f0000000000)={'ifb0\x00', @ifru_names='ifb0\x00'}) write$P9_ROPEN(r2, &(0x7f00000001c0)={0x18, 0x71, 0x2, {{0xf, 0x2, 0x4}, 0x80000001}}, 0x18) 11:03:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) eventfd(0x5) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000100)=0xfffffea7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_settime(0x1, &(0x7f0000000000)={0x0, 0x989680}) rt_sigqueueinfo(r3, 0x15, &(0x7f0000000280)) r4 = dup3(r0, r2, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000040)={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 11:03:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf00000000000000}, 0x0) 11:03:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x4004556d) 11:03:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:41 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x76cd0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x406855c9) 11:03:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x600}, 0x0) 11:03:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x400008000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7434, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\\!/}-procvboxnet1\x00') write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) r2 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x200000000, 0x10000000001) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x8, @mcast2, 0x1ff}}, 0x80000000, 0x0, 0x4, 0x0, 0x21}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xfffffffffffffff7}, 0x8) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = dup2(r5, r6) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8}, 0x10) semget$private(0x0, 0x4, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000540)) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000400), 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000380)={r4, 0xfffffffffffffff9}, 0x8) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000480)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', r7}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000700)={&(0x7f0000000600), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="07000000000200000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000e0010000000300000000030000e3e1a302183bfa75be00a14442d882d2315b7cba4c9406160ee8373014cdae99ed48671874c635bc6c63b2a0d8b7e5c36c08713ea05b01f605c9"], 0x80}, 0x1, 0x0, 0x0, 0x24044005}, 0x4000) statx(r2, &(0x7f0000000500)='./file0\x00', 0x6900, 0x7ff, &(0x7f0000000740)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000180)={0x0, 0x4}) syz_kvm_setup_cpu$x86(r9, r8, &(0x7f000000d000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000300)="c4e12dfbf60f3066bad00466edb8210000000f01d9b97b0a0000b80e640000ba000000000f3066baf80cb8f4fbbe86ef66bafc0c66ed66b87a008ec80f01c3410f30660ffa8e08000000", 0x4a}], 0xaaaaaaaaaaaaabc, 0x0, &(0x7f0000000400), 0x1029) 11:03:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5460) 11:03:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 753.722555] Unknown ioctl 19298 [ 753.853571] Unknown ioctl 19298 11:03:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x900}, 0x0) 11:03:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x40045566) 11:03:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x78) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r3, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:42 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x400008000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7434, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\\!/}-procvboxnet1\x00') write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) r2 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x200000000, 0x10000000001) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x8, @mcast2, 0x1ff}}, 0x80000000, 0x0, 0x4, 0x0, 0x21}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xfffffffffffffff7}, 0x8) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = dup2(r5, r6) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8}, 0x10) semget$private(0x0, 0x4, 0x0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000540)) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000400), 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000380)={r4, 0xfffffffffffffff9}, 0x8) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000480)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', r7}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000700)={&(0x7f0000000600), 0x10, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="07000000000200000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000e0010000000300000000030000e3e1a302183bfa75be00a14442d882d2315b7cba4c9406160ee8373014cdae99ed48671874c635bc6c63b2a0d8b7e5c36c08713ea05b01f605c9"], 0x80}, 0x1, 0x0, 0x0, 0x24044005}, 0x4000) statx(r2, &(0x7f0000000500)='./file0\x00', 0x6900, 0x7ff, &(0x7f0000000740)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000180)={0x0, 0x4}) syz_kvm_setup_cpu$x86(r9, r8, &(0x7f000000d000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000300)="c4e12dfbf60f3066bad00466edb8210000000f01d9b97b0a0000b80e640000ba000000000f3066baf80cb8f4fbbe86ef66bafc0c66ed66b87a008ec80f01c3410f30660ffa8e08000000", 0x4a}], 0xaaaaaaaaaaaaabc, 0x0, &(0x7f0000000400), 0x1029) 11:03:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x9e06}, 0x0) 11:03:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x4004556a) [ 754.247814] device bridge_slave_1 left promiscuous mode [ 754.253413] bridge0: port 2(bridge_slave_1) entered disabled state 11:03:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffd) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)=0x2) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$VT_ACTIVATE(r1, 0x5606, 0x9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(0x0, 0x15, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x7fe000000000000, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x80000001, 0x9, 0x1}, &(0x7f0000000240)=0x10) r3 = dup3(r1, r0, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) [ 754.329297] device bridge_slave_0 left promiscuous mode [ 754.334860] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.356086] Unknown ioctl 19298 11:03:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5421) [ 754.495053] team0 (unregistering): Port device team_slave_1 removed [ 754.509587] IPVS: ftp: loaded support on port[0] = 21 [ 754.525490] team0 (unregistering): Port device team_slave_0 removed 11:03:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x40045565) 11:03:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x20, @loopback, 0x2}, 0x1c) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1000000000000a, 0x80000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x2, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x389e63cafcc39927, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_FLAGS={0x8}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) [ 754.547996] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 754.616354] bond0 (unregistering): Releasing backup interface bond_slave_0 11:03:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x8004552d) 11:03:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x40045567) [ 754.702159] bond0 (unregistering): Released all slaves [ 755.756536] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.763216] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.771210] device bridge_slave_0 entered promiscuous mode [ 755.824298] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.831294] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.839388] device bridge_slave_1 entered promiscuous mode [ 755.889724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 755.938782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 756.093877] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 756.153285] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 756.338555] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 756.346067] team0: Port device team_slave_0 added [ 756.378086] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 756.385373] team0: Port device team_slave_1 added [ 756.435532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 756.490297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 756.523532] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 756.530780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 756.538997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 756.570295] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 756.577775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 756.586655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 756.881472] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.887873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.894466] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.900930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.908330] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 757.817062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 757.974659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.072667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 758.168479] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 758.174634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 758.181838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 758.277343] 8021q: adding VLAN 0 to HW filter on device team0 11:03:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xcd76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() rmdir(&(0x7f0000000080)='./file0\x00') ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r0, r0, 0x0) 11:03:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xa00000000000000}, 0x0) 11:03:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x553d) 11:03:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:46 executing program 3: syz_open_pts(0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f002310"], &(0x7f0000000380)=0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000600)={0x2, 0x4e22, @broadcast}, 0x10) listen(r2, 0x0) syz_emit_ethernet(0xbd, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b0074730c00000000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"760000000000000002000000bd6800", 0x43732e5398416f13}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x400, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0x7fffffff) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x500000000000000) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) dup2(r0, r1) socket(0x11, 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f0000000480)="fb9304b0d5f7d2b166454a48b71b4941ca0ae77a5332b1a4eff99bfb417e6c08e71714159eacb05e15cbdd7533fddfbc7cbc1664d403ac54007d08e215275ccbcf1fdf5f6e19bfe11c19b49dd2967af5b10f6027f2583b9cdaf1d2ba849b734dd9b4617c80e7478d4e7197ca12a3fe538e519c4eb469f75522bb0668b545fc51017e63cd178d9cd9e9c6506b5b87a0da6cf8c11f017519ac3c6bb920d734c6d870a8f05004ece00187893ae2f044a7bedb62865bd5432a8bafdddb5974735faa4dd118c14e0e06942b18f6d67b17b7b1b761c8203dad6d110108f87365fb636357d7bfb5303066055fd2", 0xea}, {&(0x7f0000000580)="cdf8f32fd3115d5423fe372c4b2c01ad0697f4961a449363f2644ab92fded569c4f93f8b84ce627b305f9aba43f3918d1be458ff6b9ebd7c90845dba9087a8ec8092277df99f4df5643adc63e43c54aaa2aec107f678a6", 0x57}], 0x2, 0x2) 11:03:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0xc020660b) 11:03:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x8}, 0x0) [ 759.026694] device lo left promiscuous mode 11:03:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5450) 11:03:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 759.089442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 759.098221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:03:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 759.206441] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 759.222933] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 759.230012] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 759.478377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! 11:03:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163881) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000000)) dup3(r1, r0, 0x0) 11:03:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x34000}, 0x0) 11:03:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x40049409) 11:03:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 759.727142] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! 11:03:48 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000004c0), &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000480)) 11:03:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5525) 11:03:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xff000000}, 0x0) 11:03:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_adjtime(0x1, &(0x7f0000000080)={0x8, 0x100000001, 0x40, 0x5a, 0x8000, 0x5, 0x6, 0x0, 0xed, 0x3, 0x3, 0x9, 0x4, 0xff, 0xffffffffffff8001, 0x2, 0xff, 0x1000, 0x3, 0x2, 0x8, 0x6, 0xef1, 0xfffffffffffffff8, 0x2, 0xe2fa}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000001c0)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x550b) 11:03:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xc00e}, 0x0) 11:03:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x1ffffffffffffffe, &(0x7f0000044000)={0x0, 0x26}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf00}, 0x0) 11:03:48 executing program 3: 11:03:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5451) 11:03:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xa00}, 0x0) 11:03:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0xff02) 11:03:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:48 executing program 3: 11:03:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x405c5503) [ 761.327492] device bridge_slave_1 left promiscuous mode [ 761.333031] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.387734] device bridge_slave_0 left promiscuous mode [ 761.393192] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.469947] team0 (unregistering): Port device team_slave_1 removed [ 761.481527] team0 (unregistering): Port device team_slave_0 removed [ 761.492355] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 761.530875] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 761.618929] bond0 (unregistering): Released all slaves [ 763.177036] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! 11:03:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x300}, 0x0) 11:03:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:51 executing program 3: 11:03:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x40045569) 11:03:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:51 executing program 3: 11:03:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0xc0045878) 11:03:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x7}, 0x0) 11:03:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x169b8df9, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:51 executing program 3: 11:03:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x2) [ 763.792562] IPVS: ftp: loaded support on port[0] = 21 11:03:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xd00}, 0x0) 11:03:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:51 executing program 3: r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xb40000000, 0x2}, &(0x7f0000000440)=0x18) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f00000000c0)={'sy.'}, &(0x7f0000000080)='syz', 0xffffffffffffffff) [ 764.501866] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.508386] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.515316] device bridge_slave_0 entered promiscuous mode [ 764.546591] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.553101] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.560592] device bridge_slave_1 entered promiscuous mode [ 764.590165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 764.620319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 764.706236] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 764.739404] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 764.871715] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 764.879141] team0: Port device team_slave_0 added [ 764.908589] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 764.915825] team0: Port device team_slave_1 added [ 764.944207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 764.975965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 765.007651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 765.075613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 765.651261] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.657646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.664274] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.670728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.678741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 766.387179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 766.708229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.808184] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 766.907894] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 766.914032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 766.926056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 767.016130] 8021q: adding VLAN 0 to HW filter on device team0 11:03:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:55 executing program 3: 11:03:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x100000000000000}, 0x0) 11:03:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x40045568) 11:03:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)={0x6, 0x0, [{0x4, 0x29, &(0x7f0000000000)=""/41}, {0x3, 0x94, &(0x7f0000000080)=""/148}, {0x100000, 0xa0, &(0x7f00000002c0)=""/160}, {0x10d000, 0x4, &(0x7f0000000140)=""/4}, {0x3002, 0xb2, &(0x7f0000000380)=""/178}, {0x2000, 0x4f, &(0x7f0000000440)=""/79}]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:55 executing program 3: 11:03:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x600000000000000}, 0x0) 11:03:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5452) 11:03:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x100) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000100)={0x7, 0x80}) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) rt_sigqueueinfo(r3, 0x15, &(0x7f0000000280)) dup3(r0, r1, 0x0) 11:03:55 executing program 3: 11:03:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x4004556e) 11:03:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x9effffff00000000}, 0x0) 11:03:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:56 executing program 3: 11:03:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf0ffffffffffff}, 0x0) 11:03:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x400c55cb) 11:03:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x800000, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) 11:03:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xc3ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:56 executing program 3: 11:03:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xf0}, 0x0) 11:03:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0xc0189436) 11:03:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) dup3(r1, r0, 0x0) 11:03:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:56 executing program 3: 11:03:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xff00}, 0x0) 11:03:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:56 executing program 3: 11:03:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x70b141, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000540)={{&(0x7f0000000600)=""/174, 0xae}, &(0x7f0000000080), 0x10}, 0x20) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000006c0)={0x2, 0x908, {0x55, 0x98d, 0x20, {0x8001, 0x8}, {0x800, 0x7}, @rumble={0x401, 0x6}}, {0x53, 0xfffffffffffffffd, 0x200, {0x9, 0xffffffffffffffc1}, {0x2, 0x6}, @rumble={0x4, 0x6}}}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000800)) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000580)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000740)={0x0, 0x3, 'client0\x00', 0xffffffff80000002, "077a3eb1c5d3a9ad", "4a838d43aa2487d111f06cb938eb557adf59cedecad44f15936426fa0e3e8517", 0x1, 0xf40000000000000}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000840)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000880)) ioctl$TIOCCBRK(r0, 0x5428) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) r3 = dup3(r1, r0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x0, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e24, 0x3, 'nq\x00', 0x2, 0x9, 0x61}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e20, 0x10000, 0x5, 0x6, 0x6}}, 0x44) 11:03:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:56 executing program 3: 11:03:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0xb}, 0x0) [ 768.762336] input: syz0 as /devices/virtual/input/input126 11:03:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x76cd000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 768.869884] input: syz0 as /devices/virtual/input/input127 11:03:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) 11:03:57 executing program 3: 11:03:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xdb, 0x7, 0x13, 0x10, "ecaccd79bda7b359aaf737f71d0c5c57c4a6ea4af4500bb35a1b9f275504da50a5dd27ee0b0190334bf0680c090a71117b0d6a9ef3cb48008964a869fdb430cc", "01c75670815edd39cc2f03ae8a664400e9c6a00d59b78e41b479fd120be9c939", [0x3, 0x5]}) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000540)={0x9, 0x800, {0x53, 0x7, 0x7ff, {0x3, 0x400}, {0x330c000000000, 0x1000}, @ramp={0xffffffff, 0x9, {0x5, 0x8974, 0x9, 0x2}}}, {0x57, 0x4, 0x10001, {0x400, 0x3}, {0x8, 0x3}, @period={0x5f, 0xb28, 0x8, 0x0, 0x1, {0x5, 0x5, 0x8000, 0x3}, 0x4, &(0x7f0000000000)=[0x1000, 0x6b, 0x9, 0x6]}}}) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) write$9p(r1, &(0x7f0000000080)="1d7da47b4491eed300cb1151595734f045dfc58d62299a8942d12b8a5c6b912b9d61404b9faa2ed9fab611325c737cc133da3681f68974d4a2004b7effe12b55802ab1e7836f54b3a1c5c6162c427e30a408447dbf0d50ac96c97ea6a2cd3105c34523281c71e42e198bf69440076f11b827279bba3ecf6954322f0756d6731fc57297d3f7ebd76d679b08d93ebe018aadcd5ce18afecbb657e9a7d6fef4c43e692083a21e5a4edce33ceb6286f93493acdaa45e4f185029d105e69bf2c191587cc5fa741f3bea7e4d1929519ddbadc2b136", 0xd2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:57 executing program 3: 11:03:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x76cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 769.138332] input: syz0 as /devices/virtual/input/input128 11:03:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 11:03:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 769.221144] input: syz0 as /devices/virtual/input/input129 11:03:57 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = gettid() timer_create(0x5, &(0x7f00000000c0)={0x0, 0x39, 0x7, @tid=r1}, &(0x7f0000000100)=0x0) timer_getoverrun(r2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x3c, 0x2, @tid=r1}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_create(0x7, &(0x7f0000000140)={0x0, 0x37, 0x1, @tid=r1}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r1, 0x15, &(0x7f0000000280)) dup3(r0, 0xffffffffffffffff, 0x0) 11:03:57 executing program 3: 11:03:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffff8) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) 11:03:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) 11:03:57 executing program 3: [ 769.533771] input: syz0 as /devices/virtual/input/input130 11:03:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 769.619861] input: syz0 as /devices/virtual/input/input131 11:03:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:57 executing program 3: 11:03:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf000}, 0x0) 11:03:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/bnep\x00') ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000640)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x400000000002f, {0x200000000, 0x0, 0x0, 0x100000}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) signalfd(r1, &(0x7f0000000540)={0x5}, 0x8) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x803, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000700)) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x92, @mcast1, 0x6}], 0x2c) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x602, 0x0) 11:03:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) setuid(r3) 11:03:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:58 executing program 3: [ 769.901301] input: syz0 as /devices/virtual/input/input132 [ 769.988776] input: syz0 as /devices/virtual/input/input133 11:03:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x3}, 0x0) 11:03:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x200000000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="d0ed685ff952976cfe910a879797ccea40333b50f04fc81fc0105c129b60afc4d6ca158c79a5f9ba9a1a7c0a987213baa28d352b96a68960fb8321819490badb940fdb30b6f193e27ab70c9a8ec56887d96f1f0b0e184f6522383426e1369d5090eed3e4e6ddc83939854298095cb66e5f16b08b1b15d38cc079dd29ca0a97797a862e50edd11311f9b90d28206ea9d776fbbf90b68d4ad33d6ef04c75d4e94fc291192b7bb86c73c5e2658e86", 0xad}], 0x1, &(0x7f0000000b00)=[{0x100, 0x1ff, 0x8, "e3e2a2b86f04ae5b8f798cb34f5f51c81dd8400c86e0dc808b1f1a22783a12340cba95f9dc8d8d64d447eee1980b632ddca7d5e53f14a850c0d48839f756c9f9e59afe9ea74e7c6b940996e6a0ad9df70d932b17757f107422f71dc0b798646cdaaac07e63d575fe4484a737df4128366ce867a5cf47f36dee4cae8504e7ff0363cd08ff1c1c510f49d9e26ce8125e97523efd40a3eb7c24f0b1dcd00b2f8e414347f8508bb257e1fae4cd3917e9e4146fa382b0ab76d855b11784c7369feee03e3bc6263c6209683573620150bdaf48fa1fee21688563447571aa9f0c21dea2ee73652cf4ba47ec5737f8"}], 0x100}, 0x1}], 0x1, 0x0) 11:03:58 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00e3"], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @mcast1, 0x1975}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x28, &(0x7f0000000080)}, 0x10) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000a40)=0xe8) r9 = getgid() fstat(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_origin(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='trusted.overlay.origin\x00', &(0x7f0000000c80)='y\x00', 0x2, 0x3) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r11 = getegid() sendmmsg$unix(r3, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000340)="c026507a00285b3c979d1ab9a6550cbc4b236acc624917a1245ab2227b3bc0c41dd798e7ae4812b2902e4737ab3f5d07e8a719f80302b50e6dc2e5cee36e8d5ce62c2ab763172433e78a267ae1484d64bc473f464e9f91f58a9f40a0e9bd9652466559fef46bab3a217348ceee97fef5fd330dcb8b908d1b5b0298d9466ef3bee5c7e33ae86c87ed9514fd500a153cc98996509ecaba5248b51f36ebe8f4", 0x9e}, {&(0x7f0000000400)="bab22dca1b7d0421736548ff447f7149a63b636ac225777fd9b48f9d3169221d089a4d2b5b0e4187c79e3ca273703ac38b6539f453f577aa07e15463f68a59dd957ba6cff37842bee4350873706b2d6562f4c5712d9263568bd9bb56792e261cfcd8c31eb87f9a5721d41eeb978f69e5021a9611a43d20e80d249081b569059203bb79049dc8b66c6e9097518ac8c550da5c7b5b000a5f26a4c77cfbd693b6fad5a44ee810ada22f4f967547c2be2f8e995a", 0xb2}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f00000001c0)="a1313fa5fe56ea463f617f55df135b5ff138cb1bd76d03d0c7498c3be1201c8c96cc5be331350c7450466ce81783974cc31841671d61f0cdd2ec", 0x3a}, {&(0x7f00000005c0)="7179e05b71e91c5c82f6d3f3b3bc4c32293a91599e5318c93524ec260d769f069802ebb97151d1bda6461a4d0eda55cd7d9dc53e1a354823d9217abaf3aaa6856faba35679dd6f6961fe3b42ebf4a2111fbaaeea6eb34051517061192ead5d1bfe962c1029dcaae6b52172c2878401ca73eb487f559342b20106dacb6ba132abf9a2cd35bccdf6b3249c6a89b4194c9a26fa121aa752ef9de6e96ee536cc0859aa28104be3d7658a39e21f13e60b9a0b0aeb7de882", 0xb5}, {&(0x7f0000000680)="c1252edd9b1b10824daa754d14d28a489f8693f892f078b682bd0fba3c8961791c4281d6a846816f7525ff9c1220d84068eeb939ccdc90f65b24b9554c39c973c887963c1697474592de9757233fe62f9a5cc76088e60c94045a898dfda138b3d1cab991224255a769bf36c6d75c067544f1b12d3e84ca5949162e2242ef6462f736c96a5e8d763ed12e037678f1608eb04e05c7038f231c63150e1fb0f09282cec7551162f366788b54251a78126f82f52a181c70f5fe12672612f442a6e206436ddd07b2fa04aa2407cc5c54309e7595bc03873ee34552bec3014fa2", 0xdd}], 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="00000000300000000000000001003433165000001463884d5ebbebe107c88247ea45e6929d5377960f77f732e568b5fe611a7a2c12f7b8acbcb6b46e07f41ed88a73eae4864da4c54bdc7c3f0a1d2b6af87933147f7a57c07c920b765bc8c5a7808d9283fc4ed88a279bb7aaec5a93ab9061c68c25ed47cda8892def427fa9ca2cd2d81891e27674575cf562de3d16760460453f39880560f2da694b98feb2e7a84fd1b4a160179168fc276c2a029ba4e7e0dac29bdc5d5b8b551c2867faf937442e1cbdd11eeeb26091e7968e0264c48f6a339b61334f85d74b70c00f302bf834", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x8804}], 0x1, 0x4000004) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000100)={{0x2, @multicast2, 0x4e21, 0x0, 'nq\x00', 0x2, 0x1000, 0x78}, {@remote, 0x4e23, 0x2, 0xffffffff, 0x9, 0x10000}}, 0x44) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r5, 0x15, &(0x7f0000000280)) dup3(r3, r4, 0x0) 11:03:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 770.144554] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:03:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x7fe, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fff, 0x800) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={r1, 0x10, &(0x7f00000009c0)={&(0x7f0000000980)=""/8, 0x8, 0xffffffffffffffff}}, 0x10) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='bpf\x00', 0x800020, &(0x7f0000000840)={[{@mode={'mode'}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0xe45b}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0xfff}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r2}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/uinput\x00'}}, {@subj_type={'subj_type', 0x3d, 'vmnet0'}}]}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000600)=""/155) fcntl$getown(r1, 0x9) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000006c0)=""/209) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x6}, 0x0) 11:03:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x68, 0x0, &(0x7f00000002c0)=[@increfs, @increfs_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000380)}) 11:03:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580)='/dev/uinput\x00', 0x2004, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) getgroups(0x5, &(0x7f0000000000)=[0xee01, 0x0, 0xee01, 0x0, 0x0]) r2 = getegid() setregid(r1, r2) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffd, 0x8000) ioctl$sock_bt(r3, 0x8907, &(0x7f0000000600)="84d9afa0bb6b99736e48fcc781796e92564e52c999aa482338ee326ceeb2609cb2ca6d485e33211d42e06dc8de1d66906666dac9fbb67b26fe75f4dcbd5f939c901c995fa8dfee45e72c197b44632fcb0320e6bcff4c07a745a8513586b9e8df60428f6d941b88eb4140074289fb3e80d8c3f884eed3ae9b1fcde8e1439d67c44548e4bab98978cac561bbceb82b4d5d51c1bdff50e7fe6146b9990387223814b303a5f8c63bcd90b3904974536e67a9be83843421f9c93187fcba343d95a060059dc940b0a76cf0f15a9cdcba054f73cc75693c5ecd24") 11:03:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xa}, 0x0) [ 770.521814] binder: 13628:13629 BC_INCREFS_DONE node 10 has no pending increfs request 11:03:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xff00000000000000}, 0x0) [ 770.562947] binder: 13628:13629 got reply transaction with no transaction stack [ 770.603093] binder: 13628:13629 transaction failed 29201/-71, size 0-0 line 2762 [ 770.642622] binder: BINDER_SET_CONTEXT_MGR already set [ 770.678753] binder: 13628:13629 ioctl 40046207 0 returned -16 [ 770.711950] binder: 13628:13644 BC_INCREFS_DONE u0000000000000000 no match [ 770.732647] binder: undelivered TRANSACTION_ERROR: 29201 [ 770.734780] binder: 13628:13644 got reply transaction with no transaction stack [ 770.746349] binder: 13628:13644 transaction failed 29201/-71, size 0-0 line 2762 [ 770.755612] binder: undelivered TRANSACTION_ERROR: 29201 11:03:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x5c) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() ioctl$RTC_WIE_ON(r1, 0x700f) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) r3 = dup3(r1, r0, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000000)=""/128) 11:03:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000005b80)='/dev/uinput\x00', 0xffffffffffffffff, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000005b40)) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) recvmmsg(0xffffffffffffffff, &(0x7f00000059c0)=[{{&(0x7f0000000540)=@rc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/150, 0x96}, {&(0x7f00000016c0)=""/146, 0x92}, {&(0x7f0000001780)=""/228, 0xe4}, {&(0x7f0000001880)=""/191, 0xbf}, {&(0x7f0000001940)=""/195, 0xc3}, {&(0x7f0000001a40)=""/202, 0xca}, {&(0x7f0000001b40)=""/138, 0x8a}], 0x8, &(0x7f0000001c80)=""/210, 0xd2, 0x26ef}, 0x3}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/4, 0x4, 0x200}, 0xa5}, {{&(0x7f0000002d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002e00)=""/112, 0x70}, {&(0x7f0000002e80)=""/42, 0x2a}, {&(0x7f0000002ec0)=""/84, 0x54}, {&(0x7f0000002f40)=""/4096, 0x1000}], 0x4, &(0x7f0000003f80)=""/7, 0x7, 0x8}, 0xde8c}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004580)=[{&(0x7f0000004040)=""/246, 0xf6}, {&(0x7f0000004140)=""/114, 0x72}, {&(0x7f00000041c0)=""/54, 0x36}, {&(0x7f0000004200)=""/8, 0x8}, {&(0x7f0000004240)=""/92, 0x5c}, {&(0x7f00000042c0)=""/153, 0x99}, {&(0x7f0000004380)=""/78, 0x4e}, {&(0x7f0000004400)=""/7, 0x7}, {&(0x7f0000004440)=""/156, 0x9c}, {&(0x7f0000004500)=""/70, 0x46}], 0xa, &(0x7f0000004640)=""/26, 0x1a, 0x9}, 0x81}, {{&(0x7f0000004680)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000005880)=[{&(0x7f0000004700)=""/127, 0x7f}, {&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000005780)=""/219, 0xdb}], 0x3, &(0x7f00000058c0)=""/216, 0xd8, 0x3}, 0x7}], 0x5, 0x60, &(0x7f0000005b00)={0x77359400}) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000005bc0)=0x3, 0xd8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000005c00)={0x2a, 0xfffffffffffff85a, 0x4}) 11:03:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) 11:03:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x68, 0x0, &(0x7f00000002c0)=[@increfs, @increfs_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000380)}) 11:03:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff]}, 0x45c) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x1c1040) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x6, 0x2, 0xfffffffffffff82b, 0x1}, 0x8) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:03:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 771.137237] binder: 13658:13663 BC_INCREFS_DONE node 15 has no pending increfs request [ 771.145416] binder: 13658:13663 got reply transaction with no transaction stack [ 771.174334] binder: 13658:13663 transaction failed 29201/-71, size 0-0 line 2762 11:03:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 771.206225] binder: undelivered TRANSACTION_ERROR: 29201 11:03:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x68, 0x0, &(0x7f00000002c0)=[@increfs, @increfs_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000380)}) 11:03:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) mount$9p_xen(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x4000, &(0x7f00000003c0)={'trans=xen,', {[{@posixacl='posixacl'}], [{@smackfsfloor={'smackfsfloor', 0x3d, "5c9e"}}, {@uid_lt={'uid<', r3}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, 'trustednodevselfwlan1proc'}}]}}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x9, &(0x7f0000000080)=[{0x36af, 0x70000000, 0x80000000}, {0x1ff, 0x49d, 0x10001, 0x9}, {0x40, 0x8, 0xffffffff, 0x63ee}, {0xa5f2, 0x8, 0x4, 0x79}, {0x380, 0x7, 0x7fffffff, 0x7fffffff}, {0x3, 0xffffffffffffffff}, {0x6, 0xfffffffffffffff8, 0x9, 0x2}, {0x5, 0x7fffffff, 0x3, 0x80000000}, {0x5, 0x9, 0x5735, 0x9}]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) r4 = dup3(r1, r0, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000440)) [ 771.301076] input: syz0 as /devices/virtual/input/input136 11:03:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:03:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 771.403138] input: syz0 as /devices/virtual/input/input137 [ 771.416575] binder: 13690:13692 BC_INCREFS_DONE node 18 has no pending increfs request [ 771.472863] 9pnet: Could not find request transport: xen 11:03:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x408000) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x100, 0x9136}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) bind$vsock_dgram(r1, &(0x7f0000000540)={0x28, 0x0, 0x2710, @reserved}, 0x10) ioctl$TCSBRK(r1, 0x5409, 0x4) 11:03:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 771.516210] binder: 13690:13692 got reply transaction with no transaction stack [ 771.529704] 9pnet: Could not find request transport: xen [ 771.552470] binder: 13690:13692 transaction failed 29201/-71, size 0-0 line 2762 11:03:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x500}, 0x0) 11:03:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/237) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) msgget$private(0x0, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r3, 0x15, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000002c0)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r4}, 0x8) [ 771.619843] binder: undelivered TRANSACTION_ERROR: 29201 11:03:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 771.685019] input: syz0 as /devices/virtual/input/input138 11:03:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f00000002c0)=[@increfs_done], 0x0, 0x0, &(0x7f0000000380)}) [ 771.761218] input: syz0 as /devices/virtual/input/input139 11:03:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:03:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x600}, 0x0) [ 771.817100] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! 11:03:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000900)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000a00)=0xe8) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0xa, &(0x7f0000000800)=[{&(0x7f00000002c0)="cebded552a892eb6c2b7ae90d2f2609265ddf514d9b7dfabb0cb18d6b23d991657bf1e5db31c81a7e18784f8900935aeae59c7b182744e5174dc48973feae59a02bc9268ad9838d13262ac1c60a1fc3e7d5dffa2eff95753d395dbf71ebdd3cf4aaa3225397d3adaa4e97e56f3ca7604cdf14a180018a501f57ff342c35e4ee7cf6bc215d7b000c72b93d050154269b2b97b09c93220b992ff3c77c6dc7db17432bbcb25bd9eba501b81d50c6b48e8e9fa84d104450ec564a0dbc014e4b9a0f39c51feeebb65dfa714e221029d2511ba46d5d620fde3e027c3b817dec2059f0431c1afb75c", 0xe5, 0x6}, {&(0x7f00000003c0)="ceb1e667eac41c50653b8c1c447da24a7c27ce14b8430d6b5bcd13d23f9a00aba07f400328955c07da920afb5d416c069dbad41ca3e292689cc3917ebc729c360c9b89dc6bc44b78b5b574f6213470052ee05dffb7bea2a8ccdcb2429908222e5e861185fc200eae204fff516f1916579e482fd0ac484797b12b87e1eb8b69e85e58c86f97180e65c35a3f4c587de32e7b13cf71623ac67cf03019d7d232ffc75f43e7b2349d6810edea0a7047432cd675d93971af8f9ff6a0bb8890da30", 0xbe, 0x6}, {&(0x7f0000000140)="d7814bbaab474fc62fa6c21a23a49c178e336cbd8a2a4ed024d981df868291afc45c3c12a1cd", 0x26, 0x80000001}, {&(0x7f00000001c0)="d69a9908305aa9368f4294a7288a87b3284d058fc1bdfb440dde250c339335e7", 0x20, 0xef}, {&(0x7f0000000480)="09529e710f64db7d04a69d5c992abeadfd7564d6db28fb9493c82622fb9e73a8de83bd3a08fd412ed088add51ee5b04ae9f23e73313736b1a7c866d5727a5bd6ce23bbb9b3b58815318ffbb8122e257f79868a1bcd6be043ea7538374f06c2091eaae94afeda95aea15c214e91d638ad04611c26f86f1f2eb676c281440220d4dc757338b0c27eca2aec48f03f828db41aca3eb244deea6ec60615a925bb3cd2f35f8c777218b7cfaf328ef0f80e5b26b627faf09e636a3259fcbac9f485ec3944859a8d9028728e61a63385628c20cec3669cdf2d6d52fc71da33ec13", 0xdd, 0x1}, {&(0x7f0000000580)="ffea2a9be064cc29eaeda87306087025dafeb96ff372c32e7c0e17c6e2eb91541c7c306bd83484516742729c9e1e36571102012d7cf361033b403fa1ce00138ae8956fd16ab3c60a0323622bc0bd45c2da0d2f02de88e554187d7945efa8c0ef5a9922facef82ea1628ebfd97819a0e287c76dcb229cebc8cce56ebf7f25270a5cd194759ff150cb414a6303762448a41e1b7d784009f9e4e00f93ab4a3a6db8afd5dae47a", 0xa5, 0x4}, {&(0x7f0000000640)="44e2a35395b07a3c6cd2b925a2811b95d64929c4c4c9da0a7d742664a8772b55e94bfdd5a743c4ff1746e3ba78dafae6909e8652b80efb8241bfbf150941dd691c7301ad5c018bac55dd97649e395e53cd8bc5e0c7", 0x55, 0x3}, {&(0x7f0000000240)="f683b03c10b0139adf719ab93ad60488b17ac7d84f39d40445622591f1", 0x1d, 0x7ff}, {&(0x7f00000006c0)="05b4f9b893be9f45f10f7cb61297761ffdbcdaa2b1c689b80602d08c4a8c4c32974bfb086c096b73e421b339b2a4bf68e6d0498e357c086e49a3505d8b576bfbdb542541a1513a119a0c73236cc92b168aaf4762447271c0f884f38a926c35e4fb02335865273ec6134c69b5f34287335f50a25f4a4e00eedf18c9905a7c9d88ae9fefe68782ade0049ef25111f179ff9b57081dc5abcc688acc54c801951c6165f630a40d", 0xa5, 0x7}, {&(0x7f0000000780)="814900d396fcb03cf2665c38947590b087fe47acc47ec2d83db1f8044104182916bade90abb170daccb5999eced6e72cee791d0b3d0abfb14e68f6792bedd83256a49b9d2885b2964149ebc9c6fc970ca17d0049297267af947f8eac0822f4610519cd073296dd6b47f565", 0x6b, 0xff}], 0x100004, &(0x7f0000000a40)={[{@gquota='gquota'}, {@qnoenforce='qnoenforce'}, {@largeio='largeio'}, {@noikeep='noikeep'}, {@logbsize={'logbsize', 0x3d, [0x33, 0x6d, 0x35, 0x38, 0x6d, 0x75, 0x35, 0x65, 0x32]}}, {@logdev={'logdev', 0x3d, './file0'}}, {@dax='dax'}, {@mtpt='mtpt'}], [{@obj_role={'obj_role', 0x3d, '/dev/sg#\x00'}}, {@pcr={'pcr', 0x3d, 0x36}}, {@uid_gt={'uid>', r2}}, {@permit_directio='permit_directio'}, {@context={'context', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'eth0ð1eth0vboxnet0[eth1\\wlan0'}}]}) r3 = gettid() ptrace$setsig(0x4203, r3, 0x1, &(0x7f0000000000)={0x23, 0x5, 0x6, 0x7}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) mount$9p_unix(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='9p\x00', 0x2045080, &(0x7f0000000c00)={'trans=unix,', {[{@loose='loose'}, {@noextend='noextend'}]}}) rt_sigqueueinfo(r3, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) [ 771.868476] binder: 13733:13734 BC_INCREFS_DONE node 21 has no pending increfs request 11:04:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x80) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000540)={[0x100001, 0x15002, 0x4000, 0x6000], 0x10001, 0x37, 0x7f}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x1f, 0x5, 0x1) [ 771.909099] binder: 13733:13738 BC_INCREFS_DONE u0000000000000000 no match [ 771.943733] binder: BINDER_SET_CONTEXT_MGR already set [ 771.990050] binder: 13733:13734 ioctl 40046207 0 returned -16 11:04:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x700}, 0x0) [ 772.071858] input: syz0 as /devices/virtual/input/input140 11:04:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)) [ 772.129796] input: syz0 as /devices/virtual/input/input141 11:04:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x300}, 0x0) 11:04:00 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 11:04:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f, {0x0, 0x1}}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) accept4(r1, &(0x7f0000000540)=@xdp, &(0x7f0000000080)=0x80, 0x80000) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:04:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x5}, 0x0) [ 772.422598] input: syz0 as /devices/virtual/input/input142 [ 772.528146] input: syz0 as /devices/virtual/input/input143 [ 772.807577] device bridge_slave_1 left promiscuous mode [ 772.813148] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.867748] device bridge_slave_0 left promiscuous mode [ 772.873292] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.969755] team0 (unregistering): Port device team_slave_1 removed [ 772.980475] team0 (unregistering): Port device team_slave_0 removed [ 772.990873] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 773.031847] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 773.102132] bond0 (unregistering): Released all slaves 11:04:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1000000000000fd) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0x1, 0xff, 0x4, 0x3}) r2 = gettid() pwrite64(r1, &(0x7f00000002c0)="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", 0x1000, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000080)="5b9c82e34061ea17398752c3715803c2c4c347d001d499bccbdc1dded46403883ff09973d0c97795588fcf833ed691f3311b879ce2816232d63e4ec21264d2ca218dceb58e9868189cd3fc376a8efaf05161c4f3c50acb1d03a567db9a9c1c0681d53da6b608d0dfde2272c04d48d634fdf28234d223f595ef681d3b1292") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) clock_nanosleep(0x7, 0x1, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000100)) dup3(r1, r0, 0x0) 11:04:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x4}, 0x0) 11:04:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) setuid(r3) 11:04:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 774.996011] input: syz0 as /devices/virtual/input/input144 11:04:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x700000000000000}, 0x0) 11:04:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 775.068585] input: syz0 as /devices/virtual/input/input145 11:04:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5688a40e0fc8be6fcc399d37012a08"], 0x1) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 11:04:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(r0, r0, 0x0, 0x2) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0xf, &(0x7f0000000280)={0xfffffffffffffffc, 0x0, 0x2000000000000}) dup3(r1, r0, 0x0) 11:04:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x200800, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101000, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x70, 0x2, 0x1, 0x401, 0x4, 0x0, 0x20, 0x4000, 0xb, 0x2, 0x9, 0x59d2, 0x3, 0x4, 0x1ff, 0x2, 0x20, 0x55c, 0x7, 0x2, 0x6, 0x2, 0x957, 0x6, 0x73e4, 0x3, 0x7f, 0x3, 0x20, 0x8, 0x9, 0x6, 0x1, 0x6, 0x800, 0x8, 0x10000, 0x0, 0x3, 0x6, @perf_config_ext={0x1, 0x3}, 0x2200, 0x2, 0x7fff, 0x7, 0xfffffffffffffff7, 0x1f92f268, 0x7}, r1, 0xb, r2, 0x5) 11:04:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x5000000}, 0x0) 11:04:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 775.333568] IPVS: ftp: loaded support on port[0] = 21 [ 775.384383] input: syz0 as /devices/virtual/input/input146 [ 775.441326] input: syz0 as /devices/virtual/input/input147 [ 776.025172] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.031906] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.039128] device bridge_slave_0 entered promiscuous mode [ 776.069559] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.075974] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.083243] device bridge_slave_1 entered promiscuous mode [ 776.112513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 776.142852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 776.226416] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 776.258718] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 776.401656] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 776.408902] team0: Port device team_slave_0 added [ 776.436795] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 776.444055] team0: Port device team_slave_1 added [ 776.473803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 776.504900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 776.534833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 776.566204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 776.846130] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.852553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.859262] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.865614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.884336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.983474] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 778.082850] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 778.089165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 778.096165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 778.195704] 8021q: adding VLAN 0 to HW filter on device team0 11:04:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xd000000}, 0x0) 11:04:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf88], [], [0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r1, &(0x7f0000000600)=@l2, &(0x7f0000000580)=0x80, 0x800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000080)) 11:04:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x200) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0xfffffffffffffff9, &(0x7f0000000240)={0x0, 0x12, 0x8000000000, @thr={&(0x7f0000000080)="262098723603e919e55b1d8d02c54f5cde807c33bee81b1427aab72156b8a7d9c670cbb73dc6105e3e0564939299b0ba2cdcbee98e7991d79222e0f2e702b38c42dae158bc7e7fd5a518fbdb4db8fb2a47fdf9621d855ac0635ae14eb47c7326b933b6e096ad3430d91d8f6559dff43aacaa4025d539411ccbdac202626bec9707eec358177348350b1031206dbe42b6a59348c597afe5e3f63537883942778985359afa671731905cefed6408776cc56fb58a844457fe3a6a7652dfc18228a845b2ef", &(0x7f00000001c0)="88fbc2d424274a11f382cf26568de0c1af4cfd6d662ff55a0d034c6609095f9212a398be361e48d1b10be535b079bd"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x14, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x7}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x4) dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8001, 0x30, 0x5, 0x200}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x7ff}, &(0x7f00000003c0)=0x90) 11:04:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:06 executing program 3: r0 = memfd_create(&(0x7f0000000100)="01002d40a00a5c6b2a30259c7b5569cda18a64a5f28c0555330208664b357d09f67a9e83e95e43f8d9", 0x3) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000349000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="0f07c4c1fd6f620066b820010f00d0660ff97a20360fc7a9f3ffffff65660f72d29f0f21a80f300f004300640f01ca", 0x2f}], 0x1, 0x1c, &(0x7f00000000c0)=[@cr0={0x0, 0x1}], 0x1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x13, r0, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000200)=0x1, 0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="660f3828bf0080dce12664670f013e66b9f609000066b8d41a4d4366ba000000000f300f019800007fbe0f013b66b9c70b000066b80060000066ba000000000f30b200f086b8ee00", 0x48}], 0x1, 0x0, &(0x7f00000003c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) 11:04:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 778.898668] input: syz0 as /devices/virtual/input/input148 11:04:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xa6ffffff}, 0x0) [ 778.950268] input: syz0 as /devices/virtual/input/input149 11:04:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_open_dev$amidi(&(0x7f0000000580)='/dev/amidi#\x00', 0x40, 0x200000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x117}}, 0x20) timer_create(0x1, &(0x7f00000008c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000740)="ca62896cfae4730f3dcd46bc07f8f9bd760023d8556a2c50a05dae1fd6d9ef8dfc9330037e7d9d38951ff9287ae0fc1610c953c71d251da3aa739ecf2e64e52a8d0f5f6d75a88c35fe6b9aac09385beeca2ae8c6e3f1cd78659e272a7da3c0b44d5602a4bb37514e9b5c675c8c8263b0699546f3ea1107", &(0x7f00000007c0)="83b5b6087ea56bb2fcc0d69a92fef3a913bbd456994bdfe5a2f589fe4012580b77aa1d63f8e65206c45e7a6dfd2dfa3df81f8b833bbe6614511fe864f902c9699d3e19af0bd5af9364cc0e8f3a227501aa038cca81accbaf070ad34b99f95f1feda503359023cdfb0bcd66bbdf67c34a04c596ed3c58e016801f2179020c06463a274194b0517e553f75d15a668b1c8ce9280899d0f1ad46dbb7edf884e9566f299ba628c5e586a6d1568c631a9181bf8ebdf420319ca6ad445f0bba0b9c25b38db2ad63d0a63cab091ec8aef1573fdfa5c2fe633513c588211afce66b42a51edb034735a9aed6e0ffeb757cf552"}}, &(0x7f0000000900)=0x0) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000980)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f00000009c0)) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000a80)={0xe, 0xfd45, 0xfa00, @ib_path={&(0x7f0000000600)=[{0x4, 0x0, [0x1, 0x2, 0x200, 0xbc1, 0x4, 0x2, 0x80, 0x6, 0x7fffffff, 0x8001, 0x1, 0x1f, 0x5, 0x0, 0x6, 0x1]}, {0x20, 0x0, [0x5a, 0x0, 0xff, 0x7, 0x1c8, 0x1f, 0xffffffffffffffff, 0x1, 0x800, 0x3, 0x9a74, 0x33945212, 0x10000, 0x6, 0x400]}, {0x12, 0x0, [0x100, 0x101, 0x5, 0x0, 0x0, 0x9, 0x8, 0x5bad7124, 0x100000000, 0x9, 0x2, 0x6, 0x7, 0x7, 0xfffffffffffffffa, 0xa8c]}, {0x1, 0x0, [0xfff, 0x201, 0x8a7, 0xfe, 0x6, 0xfffffffffffffffc, 0x0, 0x6, 0xff, 0x5, 0x9, 0x1ff, 0x8, 0x1, 0xe351, 0x9]}], r2, 0x1, 0x1, 0x120}}, 0xffffff7a) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:04:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 779.239257] input: syz0 as /devices/virtual/input/input150 [ 779.275114] input: syz0 as /devices/virtual/input/input151 11:04:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x76cd000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x401, 0x20080) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:04:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x8, 0x4, 0x5, 0x7fffffff, 0x4, [{0x8001, 0x7, 0x2, 0x0, 0x0, 0x2000}, {0x3, 0xffffffff, 0x2, 0x0, 0x0, 0x1000}, {0x400, 0x1, 0x30b5}, {0x9, 0x100000001, 0x5, 0x0, 0x0, 0x84}]}) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x14}}, 0x0) pwrite64(r0, &(0x7f0000000240)="0fd03f6c7dda467446d6e3719edea252a079699d780823b68a4221b4e7635748aa9e207f2548862737540e9511d192a3fe6cb5b0581a89dac49c8b6fc7f0c751ec271576de4fc78e261cc5b5228cc7a2e8d938ae7647f45d08d3eee22c3445d282fd7b2002bc2c931e3360126fa69eeea62f4c0d07ae2c56de97594c19e7728f8bdd8352c1e9995f2091e4094d47e3179cd6e5e9d0b7a1f9365a241b43e6d8e29cbea29e03b3ace041f9eeb90ce6", 0xae, 0x0) [ 779.508041] input: syz0 as /devices/virtual/input/input152 [ 779.538679] input: syz0 as /devices/virtual/input/input153 11:04:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") dup3(r1, r0, 0x0) 11:04:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x9}, 0x0) 11:04:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xcd76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f37658e17aa4", 0xa9824f69d1376637, 0x10800a}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x200}, &(0x7f0000000040)=0x8) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x2, 0x1, 0x80000001, 0x3ff, 0x8}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0x83, 0x6e9}, 0x90) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) 11:04:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000580)={r2, 0x35}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f, {0x0, 0xfffffffffffffffc, 0xfdae, 0xfffffffffffffffd}}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = dup2(r0, r0) write$P9_RWRITE(r3, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb) 11:04:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 781.936558] input: syz0 as /devices/virtual/input/input154 11:04:10 executing program 3: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x125a00) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xd4, 0x4) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0xffffffffffffffc4, 0x1, 0x0, {0x3f}}, 0x18) 11:04:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xec0}, 0x0) 11:04:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 782.000400] input: syz0 as /devices/virtual/input/input155 11:04:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x2000004, 0x40000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000002c0)={{0x0, 0x2, 0x1, 0x4, 'syz0\x00'}, 0x1, [0x6, 0x8001, 0x0, 0x80, 0x8, 0x3f, 0x5, 0x3, 0x1, 0x68, 0x9, 0xff, 0xffff, 0x8, 0x8, 0xfffffffffffffffd, 0x735b85bf, 0xce02, 0x0, 0x8001, 0x6, 0x6, 0x7, 0xffffffff00000001, 0x8000, 0x10001, 0x5, 0x5, 0x3f65, 0x3, 0x3, 0x9, 0x3, 0x7, 0x9, 0x4b16, 0xbb10, 0x2, 0x5, 0x1, 0x100000001, 0xfffffffffffeffff, 0x370, 0x2, 0x3, 0x100000000, 0x1, 0x58c9, 0x4, 0x9, 0x5c6614de, 0x6, 0x8, 0x9, 0x8, 0x4, 0x0, 0x3, 0x5, 0x8, 0x8, 0x9, 0x8, 0x0, 0x22b1, 0x6c9d, 0x9, 0x5, 0x1, 0x36, 0xfffffffffffffffa, 0x7, 0x1f, 0x3, 0x1ffc00000, 0x7, 0xfffffffffffffff7, 0x1853, 0x8fd, 0x10000, 0x80000000, 0x0, 0x74f2, 0x19, 0x81, 0xe8, 0xb7, 0x5, 0xb4, 0x100000000, 0x7fff, 0x2, 0x4b5a5427, 0xf978, 0x5, 0x2, 0xd4, 0x1b884a61, 0x9, 0x7, 0x80000000, 0xa2, 0x1, 0x2, 0x8, 0x9, 0x6, 0x4, 0x390c, 0x6, 0x400, 0x7fffffff, 0x3, 0x0, 0x0, 0xb523, 0x2, 0x1ff, 0x5, 0x40, 0x0, 0x0, 0x9, 0xc, 0x7, 0x9, 0x2, 0x80], {0x0, 0x989680}}) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x0) timer_getoverrun(r3) 11:04:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) r1 = socket(0x7, 0x1, 0x7) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f, {0x2}}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000600)={'broute\x00', 0x0, 0x4, 0x4f, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000540)=""/79}, &(0x7f0000000080)=0x78) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:04:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x600000000000000}, 0x0) 11:04:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x34000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:10 executing program 3: prctl$setmm(0x23, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") close(r0) fadvise64(r0, 0x0, 0x1, 0x0) 11:04:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x40030000000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) 11:04:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000000)={0x3, 0xfffffffffffffffb}) dup3(r1, r0, 0x0) [ 782.377513] input: syz0 as /devices/virtual/input/input156 [ 782.439338] input: syz0 as /devices/virtual/input/input157 11:04:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x9effffff}, 0x0) 11:04:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:10 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0xa400295c) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 11:04:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x500000000000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:10 executing program 0: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000580)={0x12, 0x10001, 0x9, 0x0, 0x8}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) ioctl$UI_DEV_CREATE(r1, 0x5501) 11:04:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) rt_sigqueueinfo(r2, 0x15, &(0x7f0000000280)) dup3(r1, r0, 0x80000) 11:04:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xffffff9e}, 0x0) 11:04:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x76cd0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0xa6ffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 782.807752] input: syz0 as /devices/virtual/input/input158 11:04:10 executing program 3: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x141003, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200000000007ffff, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000500)={{0x0, 0x1, 0x20, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r3, 0x8, 0x2, 'syz1\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00', ')procproc/[\x00'], 0x59, [], [0x3, 0x0, 0x530, 0x101]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) r6 = dup2(r1, r1) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r5, @loopback, @rand_addr=0x1cb}, 0xc) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') connect$inet6(r6, &(0x7f0000000640)={0xa, 0x4e24, 0x595e, @empty, 0x2d1}, 0x1c) fcntl$notify(r4, 0x402, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000240)=0x4) exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x200000, 0x0) close(r4) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={r8, @in={{0x2, 0x4e21, @multicast1}}, 0x9, 0x7, 0x100000000000008, 0x5, 0x4000000000004}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={r9, 0x4693af02}, 0xffffffffffffff15) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x9, 0x20}, &(0x7f00000000c0)=0xc) sendto$inet(r1, &(0x7f0000fa0fff), 0x0, 0x20020006, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) [ 782.897993] input: syz0 as /devices/virtual/input/input159 11:04:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) fstatfs(r0, &(0x7f0000000000)=""/34) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:04:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0xffffffa6) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0x69e}, 0x0) [ 783.096176] input: syz0 as /devices/virtual/input/input160 [ 783.140799] input: syz0 as /devices/virtual/input/input161 11:04:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x3) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xb}, 0x0) 11:04:11 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x1) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xed3, 0x163882) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r3, 0x15, &(0x7f0000000280)) dup3(r2, r1, 0x0) 11:04:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x44000, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000006c0)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = dup3(r0, r0, 0x80000) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0xfffffffffffffffe) mkdir(&(0x7f0000000540)='./file0\x00', 0x100) write$P9_RCREATE(r2, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x2, 0x1, 0x4}, 0x1}}, 0x18) sendto$inet6(r2, &(0x7f0000000600)="2530e985d993e7be5d724a0f4b5c2aa19b361cf7ea429a310981b46cd5f0cf87cb4079a79fbe84a72e5a50c61ef6d055894bec36e6f4c7627188465006e21483594c183987810cc2277ac7805045b870324e553e42479d96b8c0f95a8a7ac95ae7e5d2221b887bf0c45ab7f85f87d64bbfe31d9e3a32ce73c8b185e7b764d7df244a00437a4c13c81d41a9993c8501b49f38e391bea2a7b50b13da4d594e05a9449086ce5c55641cad6617e6235109c7b3a5ddfac4e5b9e5", 0xb8, 0x1, &(0x7f0000000000)={0xa, 0x4e22, 0xe99, @dev={0xfe, 0x80, [], 0xf}, 0x5}, 0x1c) 11:04:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x400000000000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) [ 783.748540] input: syz0 as /devices/virtual/input/input162 [ 783.835794] input: syz0 as /devices/virtual/input/input163 11:04:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="15000000000000000d000040050000a900000000000000000000004000000000010000000000000025000000fff0ffff04040000000000000a00000006fc4be128264711774b7c1ecc"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008f03000000000000000000000000819b0000"]) 11:04:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xc000000}, 0x0) 11:04:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x8000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 11:04:12 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="d276301d591f7e1220bb4333c43dc29d50737603cf40f3faa1141672f65179fac1acc15187765cffe053c544d3cfb695a0288b734d5d2472f916df2d8ada15b90a4a7013f4f7de220830415cebd6df8e9c91dead7fac5a824aa9b771f5bfc6d3f7cfbc76cb22458ed9d6262d60b8c177a19c2176d2d9f8d92b0572b032a7dcfa345aaf64084d0eb0ce40fbefcdb3fadbdef80d841df1ac", 0x97, 0xfffffffffffffff9) r1 = request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000002c0)='/dev/sg#\x00', 0xfffffffffffffffa) keyctl$reject(0x13, r0, 0x769, 0x1, r1) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000400)) flistxattr(r4, &(0x7f0000000300)=""/199, 0xc7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r5, 0x15, &(0x7f0000000280)) dup3(r3, r2, 0x0) 11:04:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000080)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000640)='trusted.overlay.nlink\x00', &(0x7f0000000680)={'U+', 0x400000004000}, 0x28, 0x1) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00', {0x7, 0x3, 0xe1cb, 0x9}, 0x3ff, [0x0, 0xfffffffffffff86a, 0x0, 0x2, 0x10000, 0x7, 0x8, 0xffffffffffffff01, 0x7, 0x9, 0x6, 0x6, 0x40, 0x9, 0xd68, 0x1, 0xffff, 0x5, 0x40, 0x9, 0x1, 0x3, 0x10001, 0x9, 0x1f, 0x4, 0xdb2, 0x1, 0x10000, 0xa6, 0x200, 0x400, 0x1, 0x714, 0x620, 0x1, 0x92, 0x0, 0x51c, 0x14, 0x2, 0x4ad1126b, 0x1, 0x7, 0x33, 0x0, 0xffffffffffff8001, 0x7fffffff, 0x9, 0x6, 0xffffffff, 0x7, 0x1, 0x5, 0x7, 0x10001, 0x9, 0xff, 0x40, 0x3, 0x8, 0x1000, 0x9, 0x1], [0x100000001, 0x7, 0x3, 0x8000, 0x100, 0x8, 0x7c, 0x1f, 0x81, 0xd0e, 0x7, 0x1f, 0x8000, 0x5, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1b8, 0x3, 0x5, 0x0, 0x9ce8, 0x10001, 0x1ff, 0x1f, 0x2, 0x80, 0x86e, 0x800, 0x7, 0x10001000000, 0x10001, 0x7, 0x1, 0x1, 0x8, 0x6, 0x5, 0x5, 0x5, 0x6d0, 0x7, 0x1c, 0x10000, 0xe9, 0x6, 0x80, 0xfffffffffffffe01, 0x9, 0x5, 0x5, 0x0, 0x4, 0x5, 0x9, 0x6, 0x3ff, 0xffffffffffffff7f, 0x1, 0xffffffffffffff07, 0xfffffffffffffff9, 0x3f], [0x1, 0x80, 0x18, 0x401, 0xffffffffffff7ead, 0x1f, 0x6ec, 0x7ff, 0x400, 0xf0, 0x5, 0x19, 0xfffffffffffffffe, 0x3, 0x47, 0x10d73b91, 0xff, 0x5, 0x4000000000000000, 0x1626c39f, 0x0, 0x4, 0x3d79, 0x8, 0x8, 0x7, 0x0, 0x81, 0x1, 0x1ff, 0x1c, 0x0, 0x8, 0x3f, 0xa8, 0x55b, 0x80, 0x2, 0x2, 0x0, 0xa7, 0x1000, 0x80000001, 0xfff, 0x4, 0x1, 0x2f2e, 0x7, 0x4, 0x0, 0xffff, 0x9, 0x7fff, 0x101, 0x0, 0x5, 0x6, 0x200, 0x40, 0x4, 0x101, 0x4, 0x25, 0x8b54], [0x8001, 0x1000, 0x2, 0x9d, 0x7, 0xffffffffffff711e, 0xfff, 0x81, 0x40, 0x0, 0x8, 0x7, 0xffffffff, 0xfff, 0x2, 0x100000001, 0x3, 0x1, 0x5, 0xb00000000000, 0x0, 0x3, 0x0, 0x1, 0xb853, 0xf985, 0xa1e, 0x5, 0x3, 0x100, 0x8, 0x7e0, 0x800, 0x7, 0x8000, 0x6, 0x6, 0x2, 0x3f, 0x48, 0x7, 0x3ff, 0x5, 0xafb8, 0x3, 0x0, 0x0, 0x3, 0xeeed, 0x2, 0x6, 0x8001, 0x517, 0x100000001, 0x4, 0x3, 0x2, 0x9, 0x31d6, 0x6, 0x80000001, 0xedf, 0x7, 0x800]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000580), &(0x7f0000000600)=0x6) connect$bt_sco(r2, &(0x7f0000000540)={0x1f, {0x8001, 0xfffffffffffffffe, 0x40, 0x9, 0x3611}}, 0x8) ioctl$UI_DEV_CREATE(r0, 0x5501) 11:04:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x353) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0xffffffff131414ac, @local}, r1}}, 0x48) 11:04:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x500}, 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}, 0x1, 0x0, 0xd}, 0x0) 11:04:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0xc000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 784.107337] WARNING: CPU: 0 PID: 14366 at mm/slab_common.c:1031 kmalloc_slab+0x56/0x70 [ 784.115447] Kernel panic - not syncing: panic_on_warn set ... [ 784.115447] [ 784.122837] CPU: 0 PID: 14366 Comm: syz-executor0 Not tainted 4.19.0+ #302 [ 784.129868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.139232] Call Trace: [ 784.141842] dump_stack+0x244/0x39d [ 784.145504] ? dump_stack_print_info.cold.1+0x20/0x20 [ 784.150745] panic+0x238/0x4e7 [ 784.153953] ? add_taint.cold.5+0x16/0x16 [ 784.158121] ? __warn.cold.8+0x5/0x4a [ 784.158524] kobject: 'kvm' (00000000b845e5d4): kobject_uevent_env [ 784.161941] ? kmalloc_slab+0x56/0x70 [ 784.161958] __warn.cold.8+0x20/0x4a [ 784.161980] ? rcu_softirq_qs+0x20/0x20 [ 784.179704] ? kmalloc_slab+0x56/0x70 [ 784.181219] kobject: 'loop4' (0000000020d3edc9): kobject_uevent_env [ 784.183528] report_bug+0x254/0x2d0 [ 784.193560] do_error_trap+0x11b/0x200 [ 784.194707] kobject: 'loop4' (0000000020d3edc9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 784.197467] do_invalid_op+0x36/0x40 [ 784.197484] ? kmalloc_slab+0x56/0x70 [ 784.197504] invalid_op+0x14/0x20 [ 784.197521] RIP: 0010:kmalloc_slab+0x56/0x70 [ 784.197537] Code: c5 40 7b 01 89 5d c3 48 85 ff b8 10 00 00 00 74 f4 83 ef 01 c1 ef 03 0f b6 87 60 7a 01 89 eb d8 31 c0 81 e6 00 02 00 00 75 db <0f> 0b 5d c3 48 8b 04 c5 80 7a 01 89 5d c3 66 90 66 2e 0f 1f 84 00 [ 784.197546] RSP: 0018:ffff8801c5e2f978 EFLAGS: 00010246 [ 784.197561] RAX: 0000000000000000 RBX: 0000000080000000 RCX: ffffc90001ad6000 [ 784.197571] RDX: 0000000000000052 RSI: 0000000000000000 RDI: 0000002000000020 [ 784.197587] RBP: ffff8801c5e2f978 R08: ffff880188e3e5c0 R09: ffffed003b000499 [ 784.268393] R10: ffff8801c5e2fa48 R11: ffff8801d80024cf R12: 0000000000000000 [ 784.275666] R13: 0000000000000000 R14: ffff8801c5c12c00 R15: 00000000006080c0 [ 784.282983] __kmalloc+0x25/0x760 [ 784.286450] ? input_mt_init_slots+0xe5/0x4a0 [ 784.290955] input_mt_init_slots+0xe5/0x4a0 [ 784.295291] uinput_ioctl_handler.isra.10+0x2049/0x2540 [ 784.300666] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 784.306060] ? __fget+0x4d1/0x740 [ 784.309528] ? ksys_dup3+0x680/0x680 [ 784.313249] ? __might_fault+0x12b/0x1e0 [ 784.317319] ? lock_downgrade+0x900/0x900 [ 784.321481] uinput_ioctl+0x4c/0x60 [ 784.325207] ? uinput_compat_ioctl+0x90/0x90 [ 784.329624] do_vfs_ioctl+0x1de/0x1720 [ 784.333523] ? ioctl_preallocate+0x300/0x300 [ 784.337937] ? __fget_light+0x2e9/0x430 [ 784.341923] ? fget_raw+0x20/0x20 [ 784.345379] ? _copy_to_user+0xc8/0x110 [ 784.349367] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 784.354973] ? put_timespec64+0x10f/0x1b0 [ 784.359135] ? nsecs_to_jiffies+0x30/0x30 [ 784.363289] ? do_syscall_64+0x9a/0x820 [ 784.367272] ? do_syscall_64+0x9a/0x820 [ 784.371252] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 784.375845] ? security_file_ioctl+0x94/0xc0 [ 784.380267] ksys_ioctl+0xa9/0xd0 [ 784.383744] __x64_sys_ioctl+0x73/0xb0 [ 784.387652] do_syscall_64+0x1b9/0x820 [ 784.391549] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 784.396920] ? syscall_return_slowpath+0x5e0/0x5e0 [ 784.401860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 784.406716] ? trace_hardirqs_on_caller+0x310/0x310 [ 784.411738] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 784.416762] ? prepare_exit_to_usermode+0x291/0x3b0 [ 784.421790] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 784.426652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 784.431870] RIP: 0033:0x457569 [ 784.435069] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 784.453972] RSP: 002b:00007f47ef85cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.461685] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000457569 [ 784.468961] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 784.476231] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 784.483503] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47ef85d6d4 [ 784.490789] R13: 00000000004c1270 R14: 00000000004d1e78 R15: 00000000ffffffff [ 784.499225] Kernel Offset: disabled [ 784.502957] Rebooting in 86400 seconds..