[ 34.541850][ T26] audit: type=1800 audit(1553515117.173:27): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 34.574778][ T26] audit: type=1800 audit(1553515117.173:28): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.098871][ T26] audit: type=1800 audit(1553515117.793:29): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 35.124619][ T26] audit: type=1800 audit(1553515117.793:30): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.73' (ECDSA) to the list of known hosts. 2019/03/25 11:58:46 fuzzer started 2019/03/25 11:58:48 dialing manager at 10.128.0.26:43335 2019/03/25 11:58:48 syscalls: 1 2019/03/25 11:58:48 code coverage: enabled 2019/03/25 11:58:48 comparison tracing: enabled 2019/03/25 11:58:48 extra coverage: extra coverage is not supported by the kernel 2019/03/25 11:58:48 setuid sandbox: enabled 2019/03/25 11:58:48 namespace sandbox: enabled 2019/03/25 11:58:48 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/25 11:58:48 fault injection: enabled 2019/03/25 11:58:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/25 11:58:48 net packet injection: enabled 2019/03/25 11:58:48 net device setup: enabled 12:01:36 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000000100)=""/241, 0xf1}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f00000002c0)=""/85, 0x55}], 0x5, &(0x7f00000003c0)=""/242, 0xf2}, 0x62) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x4) recvmsg(r0, &(0x7f0000001b80)={&(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/186, 0xba}, {&(0x7f00000016c0)=""/88, 0x58}, {&(0x7f0000001740)=""/70, 0x46}, {&(0x7f00000017c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/30, 0x1e}, {&(0x7f0000001880)=""/15, 0xf}, {&(0x7f00000018c0)=""/182, 0xb6}, {&(0x7f0000001980)=""/68, 0x44}], 0x9, &(0x7f0000001ac0)=""/191, 0xbf}, 0x12000) pipe(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSTI(r2, 0x5412, 0x9) read$FUSE(r1, &(0x7f0000001c00), 0x1000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(r1, &(0x7f0000002c00)=""/4096, 0x1000, 0x40, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003dc0)={r3, 0x10, &(0x7f0000003d80)={&(0x7f0000003cc0)=""/190, 0xbe, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003e40)={r2, 0x10, &(0x7f0000003e00)={&(0x7f0000003c00)=""/161, 0xa1, r5}}, 0x10) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000003e80)=r2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003f00)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa63a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4000000000000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = accept4$x25(r1, &(0x7f0000004000)={0x9, @remote}, &(0x7f0000004040)=0x12, 0x80800) r8 = getpgrp(0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000004080)=0x0) setpgid(r8, r9) setxattr$security_smack_transmute(&(0x7f00000040c0)='./file0\x00', &(0x7f0000004100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000004140)='TRUE', 0x4, 0x3) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000004180), &(0x7f00000041c0)=0xc) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000004200)=0x1, 0x4) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000004280)=&(0x7f0000004240)) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000042c0)=0x55, &(0x7f0000004300)=0x4) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000004340)) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000004380)={@local, @multicast1, 0x0, 0x4, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, 0x20) getpriority(0x2, r9) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000043c0)={0x5, 0x103, 0x1, {0x5, 0x8001, 0xf6, 0x20}}) setxattr$security_smack_transmute(&(0x7f0000004400)='./file0/file0\x00', &(0x7f0000004440)='security.SMACK64TRANSMUTE\x00', &(0x7f0000004480)='TRUE', 0x4, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f00000044c0), &(0x7f0000004500)=0x40) accept$packet(r2, &(0x7f00000045c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004600)=0x14) recvfrom$packet(r1, &(0x7f0000004540)=""/121, 0x79, 0x10040, &(0x7f0000004640)={0x11, 0xf7, r10, 0x1, 0xfffffffffffffd0c, 0x6, @dev={[], 0x1a}}, 0x14) syzkaller login: [ 214.214082][ T7672] IPVS: ftp: loaded support on port[0] = 21 12:01:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f00000000c0)={@broadcast, @local}, &(0x7f0000000100)=0x8) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x576e, 0x1f, 0xe05a, 0x0, 0x12, 0x4, 0x1f, 0x5, 0x9, 0xfff, 0xffffffffffff8000, 0x7278}) linkat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x400) ioctl$KDDISABIO(r0, 0x4b37) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000200)={{0x3, 0x80000000, 0x6, 0x1, 0x0, 0x3}, 0x7}) write$P9_RMKNOD(r0, &(0x7f0000000240)={0x14, 0x13, 0x1, {0x2, 0x2, 0x3}}, 0x14) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x31) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000280)='/dev/capi20\x00', 0xc000, 0x0) sched_yield() sendmsg$nl_generic(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x180, 0x14, 0x200, 0x70bd2b, 0x25dfdbfd, {0x17}, [@generic="aacd535f4c51c4daf75895d4bef08085cfcf131f3bd6c56013ed289e7532499d0dfee3029b4008a0d0b0544353e980903f52a07367d2361aa8e7e3d4b92d0c9b3d4fedae00485b304189bee30938edb5391ecb47acd84850981f02f7d85e60364db104a7467a618a767d21b5d09aadb9dd726c55c255127c812c7593de5a0a4b147ef5f37f6862659085308ef7e521cb2c9441e67ec836cbfc646305d24e04b9508d2062c6f7dfe03a92426955697255ba680365f0654a", @generic="d9dffaed7f8ab86cc05025965c0bdaaa395ed9f646635e9eecabf6902e1fad5b6cec2543d340b8e89e3866b89ffd53b95264346304c435f4d4f40aa76ede3b523095e8266a32dadd671d71c2e8e228a366b0ac3919e15ea55abbcb5a0142ef6be82f41f7131e75acaae869b47921f0bb023b001526d89bf7cd5686ebc60bbf34ccf069d1bb2bdbd7f560100142e7988da1cdaeb9959b3672f6a70a9c2f4381022bae9c14c5219ae5", @typed={0xc, 0x43, @u64=0x10000}]}, 0x180}}, 0x40000) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000500)={0x9}, 0x4) write$P9_RREAD(r0, &(0x7f0000000540)={0xde, 0x75, 0x2, {0xd3, "ae6b41a69e43ad2baec35f21586079911debc99f3491c4ac87ecee7b0b9f60a467a5945e0df7dfa82c48ea06d4a360e8995fb5637ccd19752da2d4b76824acac234a841b3f9e7cd2240e1785cba28e9ce8b08a17de361cc25aecbebd9621520338169f56570181139eff518b9ba4744270b273116aac49a85b2d42c720f2539c9751bd69b385f1491eb2f279e450ab52bc6bf48fd778a95d89573ac69d3244e2652cf7434813e5f8ba8bf9ff1f6844d708db9a90a7b043bc850c1ffddbca2c3f5835767cc49bbb2c557a81f286d870406989d2"}}, 0xde) sendmsg$tipc(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="f0ae05ec7274d90f3b1f24bc88feb59950ba1e42ed15226eb4565a302ed6b9f753ec5964bd9ce94c3b27ba4e70bd77bc239b1a42eef974eeb46da669594616b3b0e93375777ce15dcb8ae4c6da6bd6ad566c4ddad86f8255264efdbba1815d3d5a06b477b98f499aa2a335b2117270c02b193d0383a1030c57559d0e6aec6dba312a9709df14011926bdf2910b9adaa2915979664e", 0x95}, {&(0x7f0000000700)="a6e168a6f40efa2fab74176376b56c3751350c3cb49f7c0c0857a2e2ff1090ccf45710cc6f2ab30af1a817ea20069757b8f5445f0a7173fccb04655dfce71138b20def2e62232d7accdccfa438168e7e0eb6a1082346fd071dbf52e73ead7de4d0bb2b2e2ca0b9cfe5c3449d9dfa106592844617e0b23c10419b966fa0ec96caca3e5a24d1afd650901d11a52eb421e2a38147c301e90194cf494c6965ff8381d9dcf569080659ad2f194224de1e3df5f0df1c437e1f67b0996185e2", 0xbc}, {&(0x7f00000007c0)="d8e312e098de66bdadc9fd185a5d7673856c039352e45982a82457f01a465de38e8138e7e68e91461e2c6dbfdc4631ccb2cfb676f66fe47e8ba6fac9cb9aa4c089051439fd316c3f414826b8875d2ddf0f0491e83d4955f7938e60d79431902b9ada25ec7561614ba0568c72e1817be2b4da0bdddc6efec79bba7cbff5203cc8f14477b3da805c74ac136a5abd5f7dfbaf3803988bd2d7659d2c3fed3a5181bfeaac517ec1fa77e39458da29066c2ff69b96c2340f7ed7f2763ad9521c1647579abdcc4ae34a2595a13d39dede8286e45055c43d7a8d1686de2b2baeb9557170a7eec27f238e2e285aca45c51105212cd8fb5bcf7c417847c237015c3bf35545d90cc6c8bc6119b4585e9e4df756c78204f708cf689693ff0d68e740067080e428dcc633c2289d51d5947dbbadb72fa91eb53c8657a4064e6aba46afaed5ba2081207620d03d85972e74da6f40477c018b13e9db1469071a95ae950090f6e083065d014c89bfa793529942d891247b2bcd3e0fd8fee8d22177b9948ff6838488390a781948c8dcb9f8c651859f092256eeaf3609bf745bff05058dd0a9f44139a191a1a98d99cc06111244a363efbeb9101fb98d33607783ebebfbbd2916fcfceaf3a68ea43932e2e41e51c47222ad9f108f012b5554bd2160a5a397dac594be975e45f29f9dbb9053bbfbd0e6cfe4f07f5d90cba26a8b35451a1c2c04be8205fc94278afb1cfb482d867c9ffa3504bbd85e53dea96f9d29f6f3f40eeee3ed924d42522ca0186de3902b7a8c6eba926387aa238a34ac2a32201fe1e721ad3ab082fbaaa58e5efdb47d83fc6a8ecd13b010603cb99eefa536308ff9bc5eb31054e59ef482b97a26b4e393c7ef5e076a65ef09f15430e2414fb7a9895d1eee0709ac0625f5678f2ef14de47970d627503658f0806e892c466760f2901d1f43c9ab5b03e9333a2bb39d472bbd142ed6d4503d3279def3e390609572e9d8d4f31a5893360c2fef94ac18da785edc3ea4f8b1d7f5d082fda301cd9d60de46e4afea9fe38742dbacb1c86935cb0060f658c144f79af6d0c5770258bd93a83521678ece9dd0dc51c5194d208d2043239834b51e9bbfc93609d30f718206d898b5428d9e78a5a93728ce043e662fd2d39175c83de7127fccbab79f4c0fbbd934e1e02b39514a29471862d484fc65e4f3ed42da13acdeca27e607a5c0ec7ee0385ee312edbdd729f81ab7a4fd95cfddf1132536154ced6d5c184d7a341dcad4cd60deec9242b63cb47dce3317e4346537144e9726bee88d7d9a6ddd98ab939327469147d156ce1051ac0ec475db3a62d1649b4555be45defd9c4145484bdc2c4e0a0f59daae3f7f039d9a76e2f9d84a7bfc4f1ee896a20e0b17c1b523d26f085460c22d32bc4f0f184bd95cf994efe57d500606d84f1a90015007b0ce6fc29ca955379162d59844846a927e146b01360b25df219fee565e0fb23d9d380c88de6c3995309f12424e6e703bb5f38fd4cb4bba63e19d2e7ad1fe8be6f065e409c6ad9825335f9b2d051f6a7548f2070a8bbf04c5d0ab97e115ccb1a4971a9e1991e9b26f47d7a8d368c543e14fd246681eda6e629eeb4b10b5d267b8e09af18addccd400b883589f1a0e7585300a5f97574388f241733c65407060a8005436c61c86e54ffe1a21698d1bdb98225b1ca8fe21f45a4258329388af405145f504d5f6c18575f02af3b3c79877c3f529dc12cb8a55747549e49f94b0e5dfea2d8c833569690458cbeebc98759b45b203084bdfdf7cb1f985223cbe98459240bcec240c05c119b161db384eca2d03a4f8f92cd6cb802a88cf954f763767fbf2138655da0bff3f38b4d5fb864da35f5577b16b651c1132470795e2c44b11710952546e1baffba502c52571567db0544f2530e46abc065a692bfa92feca976dce0585af3fad2792946e7c7333dbe5fec4253be23c2a1d678ee396720971985252d2d91f01d31cfc011691f547dea16cf747c9c45d6e419d3ea096d76cd4c514d240c638cb3923b42b93be66ad59d3342cfdb91bba09c9bf63abf9eb90732380590edafde15d050747ff305b8ca366e44edac4e1c609e6bb8b3c17610fe0e5f2f712f4b0df2c694107b7002053127e19f6cf62f2ba4ab7002a17b37c3932e379de5e979c732670c4834f54338d6aa709071cf64ff571a1066f70a7ba35eb0c734cefd4257ae1dada05360f155214d2dddeecebd0d0d75a1e28cf56e3069d0f598327e6b9bfc6df3f650356a4fb10246d6a9d413aeb6bb6017d52dfb672a6856122bee8cc8ec0f497bc3fc33e17685c16813906bcbb648c483283c4da82e6198237d1ae194f76c04e07a025e4e07aac4e46e2a7a46bbb36fe992f9062f4d3c491d1db519071f69475fcdacd9bf7d64a0d06d94a52f8cffff45fc275d3325efd6b4fcb164b046c7910960c7e61b1d35573529f76f8d84fbfa3f3930fe52ef45b477e4065a2ad9b0a9f3fe3db316f856516fd56aa4bf3681eabb5441d4091b4ba7f6d2d957e79a09ab51b4c80419714cb05d4fb0795be6880b21cb5e3dde2cebbedfe0cf1ed107be7913062236f52adae029c2902a0b0d0564f24e9d6a4c537f3bc0a6a6f213939dbb3e9178bef59a2e3c25d8b73c6983c77d8c48740153d41a2652a57c24e3fac856763598a2e80a0aa2a591cebbe970fea7c67528e3a767f634f29078ee0c7bba4c4fc077e4a2826456efae83c143660a908559c83e930f2ebb5a19a50c354666139c3bfa0e6e0a42814b702c0bb4d7750fda0f66ccb658e4318138c8889ff20629362db36a9af185cc2908bad537522d407f42d7e88d34a26a7462cbf77cbf54bc0b9848857c4d060528f4804c211ee38483fd5bb480634993856c38f7585171c493f73aaca9964e9e77c26485088425ffe61143811b5bb942413aef9e8f3c370c8b24c116f8049b30ac7c3edb8f7f73672ce48c3334f379fa61590d9e2cc19125d0724092ab64451ea8c6d5d2a6cf03a06ca9d93c4223c1bc220f427e6ec0900fa2819bbce7fe44aaa8120a6b8bfe0b3f4d80a13c0198d13f71a2d4166a072e9efb27767e04e485d413b15d85fb722d9cd9353eb85e83780c896e0a2fcda159f0e0bac417efa54605653e3d43c2e0a68df8ca375138d65054ad29fce4f7b410f0d3c63358434c2a4c452194844ee8b69941727b6b990c89a94933fa5fcca3670dba819125f0280986d8aedd02a3302f3e5f04ae77c2a8862322ee0d876b9a66435220c70b21e5042a011a0168845840b7c0cb447dc2997cf38b293724dbc0253f60adf76e9e50a2fe7c48aa6d137b266635bc2324063dc90324a2d669b5401967655aa7a33b8b54d9dfcbfdccd4aeac5c8a124649bde71c3be1722ebd7ca07a656524bde2bd8ed42f0bd278ae54f6dbc1db00bf69d9c3bd149b6730eb733a672e457fc7a666dc88faf201ccdf136f6c20dd8891b2d18410568acaa37119893d5c3e41f434527cbf9dd540aa63b3852ee64964cc17ec09cba8aad153114e9b472cb3816d1f6b3378f5e66be5e665e66be7760cb9dab039812cecbe1fa10ff9350669c9572dedfd637957ccf53db5d733ec5772b034251ed363907dbb12491943cb7a49031c721529c1934ee9b25ee09a3042c8fd8d6416169552c9a2a15a9a7186e57435ef6f4855960c460e6e870900a472488684a340bb27514830272c683731fe8e419f610c42f207a4fef788a8c4ad54b11f2806852eda3618c3561e46734043c4beffeffc75840e56072741a2a05076a8a5c93e76d11569fb60f7da8bf356e69c17b77e64f45990da42c05af6919402c1b30c99d0d6ea440f9fe9a0b4953c932e2b3d2716a2b91d50ad5a402d399a06078e36582438d19d17bf09345394d177d511b41630b473cab54cef1f59ca84ad64cd6eb83c72faa8ba824fed9485570efc7acecf460da4de4a340b232d860e4b9881a5a15609fcd751fcb2ef1fd824a72b8aafd97b143891ddc17e02ef974c85a1aa3be2d269d6fb9033d1767fe16e06761140d98e626bc6f75de19a1123c2f950dfceebe8f1aed9f695db01ee06cb26036e76bcacc783c63e4ae3675ba68646acf61447f72f65d0053c5a81eeec26de2bcc310d1aaf2fe4477157ae5efe341b983281896cf000ad458ae2e766d2010e7e174419d1655d6e1468847300e2391319c02df53778290c67440800645df6eeba64ee97eebaa6b631cc64984d011f5ee967d9143352943b4c1e19faba929ecec3fa3bb53c4334b415c6140000156fd2374efb77d3554feb0b90b01976781004750b344b312764fc6599a5bf49b552ef90bf4c52df9c887f81bb5d945089c4503fdcd41260e3df3d81c5a0481df61189734376a9a523bf19f4ef00094a1c5acdf2c1057f6bd85042d176a9b7d257576ab050c18a5abb5f19e6a85ddacf278d8c407ecdbc4f62497bcf344ba245ca6e3dd6479395900068017140940cbb1710df49b9782971b8c2a4b9c79b4b2c2f2eefcbb9205723b001f986e8cbe22fe5d3b84177a1d9eef30c46bba401ebf80b54599502ba84d4f8b6959e4b84ecaa32e0b754a9213a38298fce0b6eccb0d501b2b80dd27b63b6b8f0bf8987eaab1b9d54d40dd957d589c750ea32635fbcab1b0947749d38b29641ad30250d909ff3670c0bf9eebd607c3ce62a3dcbeba6bb0a8ad1b7719515221b6b748c5f3a5a447658811addd662f598b9d91cdbfb8addfa9fdbde6624f84b4280f6ec9b0a03ecef6df6ab2769a75e18ee7456d3fe69d3deb9cf9b617931e256711ad511543e4d396653e57f200787ff89995de1cb8b60dd63260df62013b63c49ab6882135b8a6a7199c886111ea9d8a235c2ef4383a3f7acc27985ac4a9358b452e89b4e0b2c9a25a4f11c82bec98f8709477882ed05e2df349800639acb8dcd02dc86b5efe2b33167c81bbf675c68cef4d081a2e09330899dbd68f12859adf9850a65f0ab9cfbdfee744eef9612d6ad3830d13649a94fa8ed169f62b4d58a649665155ac69ebc19876eb8b70a17e3afc198a98091823c7a15cc27d3f4e8a5495d6e35dc5004b1f93546960983cfc8c1ad40f0f7876b63c531e8e3e219b589c405f736d6b61d6cb963c61a2b513b8ff696bd009b0a194cc19535a6af3cfcae03ea0516fd74d1e3d32ecacfacaa695742e6a47ac09df3a019070331d20fa4107f1b54bb861c15252da2f2e20880f79579cb6118da21519bf3e4dd4f3fb63268e29724d2f88d9ffec5af837f051822e39b85c9825310628404e605c296ed6a28a96da1a5534204837f2fb355cca2fd14f99c3718390bba50f117af5ba15f67c46a3035748e6e07a40fd357359262e12c42b35c95a12cdacbdbaba7a496035614c034210cc3562f8d07fa64b86941b7e1c1204a770142d1e305ae8a194d9c02de794e0d2d962ad472e3decefd520c1e686344cc3ae6a151c779f717c1f9b04cb0884b252bac0314c047d31b40c97bd11674066946f371c126b42df0feccc1a2e8b02ba45d908e712558cb83f3072b79e2d831b5f0cdb87f6cc58aa06fd4cec5c4dbdf35eec515144c2133d4d994c7986df98be740465416a4f10c1927da53d3889c56566b1cb710cf92af0c36e68ddf20dd497b133cdc6c59be6100fcb0e76e93fe70a72db09059c8d7ea6535da2eecf3b2074f6d30b41f77a98d15d37982ef36b0622e4a73b3762beac99db07a4b281a0a3d2f88f82265a4668958f38025bb957f2b4eaaa0ddb6f070ccb83a636f82dd2e17aca3e9c9390eb1a00ac85324df84e4ada70056e406035acdba4", 0x1000}, {&(0x7f00000017c0)="4c1c359dfb00e296b5e10a137b015bbaa17fd7daaccd6839d31b5ee35f7580c96e9f8b92c6b754552cdbd5e728e059f0645ace92bb41d922ddaae12e6b808e4a552ba48c524ef22bafb4b24e357e7efc0b34036779240d26a78921c10a9e3a49787721cd02d663078e98e1a17b6f35a516c63e0c2bdf653c0c008c716448915e3ca1f5966e1753603e264d845ab73e33bd31ae26078981eb03f888930ad971", 0x9f}, {&(0x7f0000001880)="aa2eb77cbb43072cfeb2c37357e4f5c0f16b2d58945e94d2", 0x18}], 0x5, &(0x7f0000001940)="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", 0x1000, 0x4000}, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000002980)={0x3, 0x2, @raw_data=[0x3, 0xfff, 0x400, 0x2, 0x0, 0x100, 0x81, 0x62dc, 0x9a9, 0x4, 0x7, 0x1, 0x3ff, 0xfffffffffffffff9, 0xffffffff, 0x9]}) write$FUSE_LSEEK(r1, &(0x7f0000002a00)={0x18, 0xfffffffffffffffe, 0x1, {0x5}}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000002a40)={'veth1_to_bridge\x00', {0x2, 0x4e20, @broadcast}}) write$P9_RMKDIR(r0, &(0x7f0000002a80)={0x14, 0x49, 0x2, {0x42, 0x2, 0x6}}, 0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b00)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000002cc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002b40)={0x140, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffeffff}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe017}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xbd}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x890) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000002d00)={0x1, "4c7158085b1801287af6eadd018c74edfa7253253aab03d950871c177865b0a8", 0x1, 0x1}) openat$audio(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/audio\x00', 0x979edb784af30cc6, 0x0) syz_execute_func(&(0x7f0000002d80)="417200660f383f9b000000002e260f50f3c401905ef5c4a37d05910000007ff5f3400f38f660abc4e1fff01533da0000c483e90e81feefffff01c4e2793f97feefffff66470fc5c299") mq_timedsend(r0, &(0x7f0000002e00)="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", 0x1000, 0x7, &(0x7f0000003e00)={0x0, 0x989680}) write$P9_RWSTAT(r0, &(0x7f0000003e40)={0x7, 0x7f, 0x1}, 0x7) timer_create(0x1, &(0x7f0000003e80)={0x0, 0xc}, &(0x7f0000003ec0)=0x0) timer_getoverrun(r3) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000003f00)=0x6) [ 214.339662][ T7672] chnl_net:caif_netlink_parms(): no params data found [ 214.425492][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.442241][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.451292][ T7672] device bridge_slave_0 entered promiscuous mode [ 214.462318][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.469943][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.479600][ T7672] device bridge_slave_1 entered promiscuous mode [ 214.494563][ T7675] IPVS: ftp: loaded support on port[0] = 21 12:01:37 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='ip6erspan0\x00') ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x9, {0x7, 0x100000001, 0xc70, 0x80000000}}) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r0, r0, 0x5, 0x2}, 0x10) r1 = semget$private(0x0, 0x4, 0x0) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000140)=""/113) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000001c0)="d2b90a922bc99d122b740623447176ca4ffb1a4da6942ab5752c41afac52d154741c73b098c877772cb8104c88fd0eea47047be612175690242228ab3a965e2ec14f164a127175df666858dff65f0730c36b9d980ba0") ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x6, @remote}, 0x76, {0x2, 0x4e22, @remote}, 'bcsh0\x00'}) sendto$inet(r0, &(0x7f00000002c0)="ee0a56f6b7e0b41a6f26e45f4cbe1e2af104628b8ac7c2beb9872a0fcd44173f7dc22f34adc5d18b4933d0218fa2fa2e755d9c32358f763201ed7b5fc9ebcb2b0fb1628e3f3c5a24d9fa94", 0x4b, 0x4000810, &(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='-\x00', r0}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x3f}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x48, {0x2, 0x4e23, @broadcast}, 'sit0\x00'}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x38, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0x0, @empty, 0x4}, @in6={0xa, 0x4e21, 0x2, @ipv4={[], [], @rand_addr=0x7fff}, 0x5}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000540)={r2, 0x9, "74e2e643e2fdc69bfc"}, &(0x7f0000000580)=0x11) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000680)={@un=@abs={0x1, 0x0, 0x4e23}, {&(0x7f00000005c0)=""/83, 0x53}, &(0x7f0000000640), 0x4}, 0xa0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000740)=[0x1, 0x1, 0x649, 0x5]) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000780)={0x100000001, 0x6}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000007c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={r0, 0x2, 0x1, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000880)=0x1000001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000008c0)={0x100000001, 0x3, 0xa7f, 0x7, 0x1, 0xbb3}) r3 = syz_open_dev$vbi(&(0x7f0000000940)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000980)) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000a00)={0x10000, 0x1, 0x4, 0x70000, {r4, r5/1000+30000}, {0x3, 0xb, 0x7ff, 0xff, 0xfffffffffffffabe, 0x3, "e1c4cb2a"}, 0x100, 0x4, @userptr=0x5, 0x4}) semctl$GETVAL(r1, 0x5, 0xc, &(0x7f0000000a80)=""/49) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000ac0)={0x7fff, 0xe71, 0x2, 0x3ff, 0x5}) recvfrom(r3, &(0x7f0000000b00)=""/4096, 0x1000, 0x100, &(0x7f0000001b00)=@nfc={0x27, 0x1, 0x1, 0x5}, 0x80) [ 214.527059][ T7672] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.552383][ T7672] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.599296][ T7672] team0: Port device team_slave_0 added [ 214.622883][ T7672] team0: Port device team_slave_1 added [ 214.708359][ T7672] device hsr_slave_0 entered promiscuous mode [ 214.746971][ T7672] device hsr_slave_1 entered promiscuous mode 12:01:37 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x301, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x3, @mcast1, 0x6}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, @in6={0xa, 0x4e20, 0x3f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xa77}, @in6={0xa, 0x4e22, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}, 0xfff}], 0x74) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x7f}, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x18, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x80) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0xffff}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r2, 0x2}, 0x8) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r4 = add_key(&(0x7f0000000440)='ceph\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r3, &(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x2}, r4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r2, 0xf6}, 0x8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x5) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000500)={r2, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f00000005c0)=0x84) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x804, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5471}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x58}}, 0x8011) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000740)={{0x3, 0x40, 0x9, 0x80000001, 0x1, 0xff}, 0x6}) ioctl$TIOCSBRK(r0, 0x5427) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000780)='/dev/audio\x00', 0x80900, 0x0) ioctl$EVIOCGBITSW(r6, 0x80404525, &(0x7f00000007c0)=""/97) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000840)) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000880)='/dev/cuse\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@initdev}}, &(0x7f00000009c0)=0xe8) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000a00)={0x7, 0x0, [{0xcb6, 0x0, 0x5}, {0x5, 0x0, 0x6}, {0x6, 0x0, 0x101}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x6}, {0x99, 0x0, 0x81}, {0x6, 0x0, 0x2}]}) bind$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e21, 0xb3a0e25, @local, 0xfffffffffffffff8}, 0x1c) sendmsg$xdp(r0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x2c, 0x2, r8, 0x25}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000b00)="6d25ce13c2c8dbefc9fe8f98c82e58a474a08f3cdba28521d775352ca89872923263de4c62c0355715b864e6644a2078e76ed888483154ae8044c99774b67e88f9f5cb9e7ab5d6c6b3ca670a9a1b08c54108498cfe5a6290b0593535ba85f9d47047802480bddf7c83327b3241be8e38bf23771c175605bf12281f4bf5bdad77faee90f92425934870c590ed12176e08a015d7da4dfc5d81886cf7ea41597d819deb7d797412a6a7355892f62e1214b6e5c8bc12b63afddfb906435dc887ad3c", 0xc0}, {&(0x7f0000000bc0)="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", 0xfb}], 0x2, 0x0, 0x0, 0x404c000}, 0x20040000) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000d40)={r5, 0x8b, 0x0, 0x9}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000d80), &(0x7f0000000dc0)=0x30) r9 = fcntl$dupfd(r6, 0x406, r7) ioctl$LOOP_GET_STATUS(r9, 0x4c03, &(0x7f0000000e00)) [ 214.832633][ T7678] IPVS: ftp: loaded support on port[0] = 21 [ 214.836117][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.845908][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.854064][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.861231][ T7672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.949677][ T7681] IPVS: ftp: loaded support on port[0] = 21 [ 214.961883][ T7675] chnl_net:caif_netlink_parms(): no params data found [ 215.044501][ T7672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.084860][ T7672] 8021q: adding VLAN 0 to HW filter on device team0 12:01:37 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x2000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0x100000) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) splice(r0, &(0x7f0000000100), r0, &(0x7f0000000140)=0x36, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{r1, r2/1000+10000}, {0x77359400}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x10, 0x4) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000280)={0x4, 0xfff, 0x0, 0x0, 0x20000}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000380)={r3, &(0x7f0000000340)=""/10}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000003c0)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000400)={0x0, r4}) getdents64(r0, &(0x7f0000000440)=""/73, 0x49) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f00000004c0)={0x5, 0xfffffffffffffff9, 0x8, 0x0, 0x1}) bind$x25(r0, &(0x7f0000000500)={0x9, @null=' \x00'}, 0x12) r5 = request_key(&(0x7f0000000540)='asymmetric\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)=',securityppp1:\x00', 0xfffffffffffffffc) r6 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$negate(0xd, r5, 0x0, r6) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000740)={0x3, 0x7}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r0, 0x0, 0x3, &(0x7f0000000780)='syz'}, 0x30) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000800)=r7) eventfd(0x9000000000) r8 = syz_open_procfs(r7, &(0x7f0000000840)='net/anycast6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000880)='/dev/video0\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000008c0)) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000900)={@multicast1, @loopback}, &(0x7f0000000940)=0x8) ioctl$VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f00000009c0)={0xf84, 0xb, 0x4, 0x0, {0x77359400}, {0x5, 0x1, 0x0, 0x7, 0xfffffffffffffff8, 0x40, "3d942be2"}, 0xffffffffffffffff, 0x2, @planes=&(0x7f0000000980)={0x2, 0x8001, @fd=r0, 0x10001}, 0x4}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000a40)={0x3e, @loopback, 0x4e22, 0x3, 'wlc\x00', 0x20, 0x1, 0x5e}, 0x2c) [ 215.139442][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.151508][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.174008][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.190347][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 215.309171][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.317794][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.326605][ T7675] device bridge_slave_0 entered promiscuous mode [ 215.343324][ T7687] IPVS: ftp: loaded support on port[0] = 21 12:01:38 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x101, 0x8, 0x101}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000c}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x900, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$P9_RXATTRWALK(r0, &(0x7f00000001c0)={0xf, 0x1f, 0x2, 0x1}, 0xf) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcdb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x8004) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000440)={0x4}, 0x4) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000480)={0x9, 0x3}) modify_ldt$write(0x1, &(0x7f00000004c0)={0x1ff, 0xffffffffffffffff, 0x4000, 0x7f, 0x0, 0x3, 0x6a37, 0x0, 0x4, 0x81}, 0x10) r3 = dup(r0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8000) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000600)={0x0, 0xc0, 0x1, 0x50c6}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000680)={r4, 0x200}, &(0x7f00000006c0)=0x8) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000700)=0x100000001) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000740)={0xfffffffffffffa5a, 0x7ff, 0xfffffffffffff111, 0x9, 0x4, 0xfffffffffffffffc}) ioctl$CAPI_INSTALLED(r0, 0x80024322) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000a00)={&(0x7f0000000780), 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1f0, r2, 0x410, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9342}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x541, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}}}}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x50, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x27}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x44010}, 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000a40)={r4, 0x6, 0x7, [0x3f, 0x9, 0xfffffffffffffee3, 0x82000000, 0x100000001, 0x7, 0x8]}, 0x16) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000a80)={0xfff, 0x101, 0x4}, 0x10) listen(r3, 0xfffffffffffff800) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000ac0)={r3}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000b00)=0x401) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000e00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x22c, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7769c929}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa79}]}, @TIPC_NLA_BEARER={0x104, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000e40)={0x1, 0xf, 0x2, "b3bf6fafb129160b6b62292a57388790a4f412153ef4cddeb3a8ab68b2cca60e", 0x39555659}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000e80)={0x7, 0x2, 0x1, 0x0, 0x8}) [ 215.354619][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.364625][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.371833][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.392956][ T7678] chnl_net:caif_netlink_parms(): no params data found [ 215.405024][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.412319][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.424749][ T7675] device bridge_slave_1 entered promiscuous mode [ 215.445996][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.457814][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.466462][ T7682] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.473537][ T7682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.483667][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.497243][ T7681] chnl_net:caif_netlink_parms(): no params data found [ 215.537295][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.548285][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.557321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.566149][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.574827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.583748][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.600095][ T7675] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.600414][ T7689] IPVS: ftp: loaded support on port[0] = 21 [ 215.642753][ T7675] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.660197][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.669241][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.700885][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.708337][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.716939][ T7678] device bridge_slave_0 entered promiscuous mode [ 215.734203][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.742832][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.752628][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.766679][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.773786][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.781937][ T7678] device bridge_slave_1 entered promiscuous mode [ 215.821552][ T7675] team0: Port device team_slave_0 added [ 215.832789][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.841372][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.849864][ T7681] device bridge_slave_0 entered promiscuous mode [ 215.860103][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.868701][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.877168][ T7681] device bridge_slave_1 entered promiscuous mode [ 215.902996][ T7675] team0: Port device team_slave_1 added [ 215.912633][ T7678] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.922581][ T7678] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.937228][ T7681] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.977561][ T7678] team0: Port device team_slave_0 added [ 215.984554][ T7678] team0: Port device team_slave_1 added [ 215.994411][ T7681] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.018171][ T7687] chnl_net:caif_netlink_parms(): no params data found [ 216.107472][ T7675] device hsr_slave_0 entered promiscuous mode [ 216.146439][ T7675] device hsr_slave_1 entered promiscuous mode [ 216.186829][ T7681] team0: Port device team_slave_0 added [ 216.194127][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.202415][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.210460][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.218917][ T7687] device bridge_slave_0 entered promiscuous mode [ 216.227378][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.234539][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.243350][ T7687] device bridge_slave_1 entered promiscuous mode [ 216.266093][ T7681] team0: Port device team_slave_1 added [ 216.327354][ T7687] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.428438][ T7678] device hsr_slave_0 entered promiscuous mode [ 216.456001][ T7678] device hsr_slave_1 entered promiscuous mode [ 216.497383][ T7687] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.511461][ T7689] chnl_net:caif_netlink_parms(): no params data found [ 216.567488][ T7681] device hsr_slave_0 entered promiscuous mode [ 216.616251][ T7681] device hsr_slave_1 entered promiscuous mode [ 216.709394][ T7687] team0: Port device team_slave_0 added [ 216.744221][ T7687] team0: Port device team_slave_1 added [ 216.759729][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.768565][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.777045][ T7689] device bridge_slave_0 entered promiscuous mode [ 216.785172][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.792471][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.801575][ T7689] device bridge_slave_1 entered promiscuous mode [ 216.818599][ T7689] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.838939][ T7675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.848685][ T7689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.927823][ T7687] device hsr_slave_0 entered promiscuous mode [ 216.986015][ T7687] device hsr_slave_1 entered promiscuous mode [ 217.042928][ T7689] team0: Port device team_slave_0 added [ 217.050398][ T7689] team0: Port device team_slave_1 added [ 217.061757][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.078685][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.087762][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:01:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x88) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xe4, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x191b}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000340)=0x54) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 217.149470][ T7689] device hsr_slave_0 entered promiscuous mode [ 217.205986][ T7689] device hsr_slave_1 entered promiscuous mode [ 217.222901][ T7701] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 217.240237][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.249411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.262835][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.272358][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.281474][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.290992][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.299589][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.306735][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.314806][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.328597][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.359502][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.369288][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.379212][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.388518][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.398646][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.408346][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.417153][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.426420][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.436214][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.444703][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 12:01:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4004300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40000, 0x0) mq_open(&(0x7f0000000000)='#eth1+vboxnet0!\x00', 0x41, 0x20, &(0x7f0000000080)={0x2, 0x401, 0x80000000, 0x2, 0xfffffffffffffff8, 0x8dba, 0x3, 0xfc8e}) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000040)={0x0, 0xfffffffffffffe68}) [ 217.460038][ T7675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.543167][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.561075][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.572366][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.602749][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.617096][ T7687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.631992][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.640690][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.656747][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.664634][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.685061][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.716980][ T7678] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.725088][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.738286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 12:01:40 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x405, 0xfffffffffffffffc}, {0x6}, @quote}], 0xfffffffffffffd4b) [ 217.765459][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.772700][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.787494][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.800816][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 12:01:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x8924, &(0x7f00000000c0)={0xffffffffffffffa6, 0x0}) [ 217.814501][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.822142][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.834517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.854724][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.874864][ T7687] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.887747][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.896632][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.904648][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.913246][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.923299][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.932198][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.941052][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.959437][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.967247][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.976271][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.984932][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.993798][ T1042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.002540][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.009710][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.045255][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.053432][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.061929][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.070774][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.079378][ T7680] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.086598][ T7680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.094609][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.103543][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.112121][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.119251][ T7680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.127428][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.135943][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.145110][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.154189][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.162679][ T7680] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.169779][ T7680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.177501][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.186538][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.195110][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.202234][ T7680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.210964][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.219855][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.228316][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.235703][ T7680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.243626][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.252497][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.267299][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.276143][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.284749][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.293541][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.302719][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.310818][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.318911][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.332374][ T7681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 12:01:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="406128137f5e6a1413361bb464140d11e202f0025b66ba16d316bc4720ca8184875178004df5e0d62098df8c9f98619cc49a1a06f4532a47cab12e84220c5629d2c336fed7296d582b47baaa9e3490adce1d68d706a937e533f9fab171ea3775622d9378bf2214ad3db16ef16a03086e01819af1b42bb9448e92f9bc3c6c7a10732fa7", 0x83, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r2, 0x8, 0x7cac8fd6}, 0x0, &(0x7f0000000300)="d216e0c5f53adf9c0853dc41045a8f2594b0eb581e56ed1a704094d92fe1", &(0x7f0000000340)="f2a79a13d3a3bc041743acffc3824d9d2be5de5ae4ce741b78d23f956cdfdcab2773d5da03102f0e73170db247111dbf7272e2d16c0194984729441e8dafb1fefc94a6f3f82e2db0237523af14c8f5463bf363ba856773a881c66f310ffddf527a764cc6a96662a1625c21c4e2ba3bbc4158957601869390d68d5a188c0dace69914612781700042fe497875bf7a0476f4755fdfcb9326ec6e") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00004da000), 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x208000) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000040)=0xa3, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000007affc), 0x4) close(r4) rt_sigsuspend(&(0x7f0000000100)={0x7}, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}) bind$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, {0x8, 0x0, 0x6, 0x1, 0x3, 0x166}}, 0xa) [ 218.345205][ T7681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.391266][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.405090][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.422602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.433409][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.445449][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.454411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.463303][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.472247][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.481304][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.489861][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.498604][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.507779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.517055][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.530709][ T7687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.543925][ T7687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.562883][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.571595][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.575930][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 218.580157][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.585771][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 218.594152][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.612369][ T7678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.623790][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 12:01:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newaddr={0x84, 0x14, 0xc00, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x4, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x80000001, 0x7ff, 0x9, 0x3}}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'sit0\x00'}, @IFA_LABEL={0x14, 0x3, 'bond_slave_1\x00'}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x22}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x7fff}, @IFA_FLAGS={0x8}]}, 0x84}}, 0x0) [ 218.643041][ T7687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.655747][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 218.661674][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 218.669113][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.683373][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.705647][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 218.711550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 218.712943][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.735638][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 218.740941][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.741476][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:01:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x1013, r0, 0x0) [ 218.766171][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.774794][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.782742][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 218.782790][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 218.805912][ T3481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.846295][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.889742][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.918258][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 12:01:41 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/248, &(0x7f0000000180)=0xf8) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000300)) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x7713, 0x8000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000280)={r0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000200)=@default) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0x1, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x12, 0x70bd30, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x488c5) sync_file_range(r0, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x4) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000002c0), 0x4) [ 218.934941][ T7680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.954661][ T7689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.997342][ T7689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.031932][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.041307][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 12:01:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000200)=""/214, &(0x7f0000000100)=0xd6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x20, 0x10000) preadv(0xffffffffffffffff, &(0x7f0000000700), 0x31f, 0x0) 12:01:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="23219b000000006a0e0043ff38506f5e2500643e"], 0x14) [ 219.130567][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0 12:01:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') read$FUSE(r0, &(0x7f0000002180), 0xffffffea) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xd0be) read$FUSE(r0, 0x0, 0xfffffd50) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="6acfe260c6777b42e14e952978ae8706e5dee254591ce60cd3b0c58eb04447db4136f0db063ece072a9a509e6f66949fa62cca59d77fe6544b5ef7fbdc5914b4a5ee82d01b", 0x45) 12:01:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x10, 0x80000000004, 0xc, 0x2, 0x1}, 0x2c) 12:01:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) 12:01:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = dup2(r0, r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) [ 219.307435][ C1] hrtimer: interrupt took 38431 ns 12:01:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="406128137f5e6a1413361bb464140d11e202f0025b66ba16d316bc4720ca8184875178004df5e0d62098df8c9f98619cc49a1a06f4532a47cab12e84220c5629d2c336fed7296d582b47baaa9e3490adce1d68d706a937e533f9fab171ea3775622d9378bf2214ad3db16ef16a03086e01819af1b42bb9448e92f9bc3c6c7a10732fa7", 0x83, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r2, 0x8, 0x7cac8fd6}, 0x0, &(0x7f0000000300)="d216e0c5f53adf9c0853dc41045a8f2594b0eb581e56ed1a704094d92fe1", &(0x7f0000000340)="f2a79a13d3a3bc041743acffc3824d9d2be5de5ae4ce741b78d23f956cdfdcab2773d5da03102f0e73170db247111dbf7272e2d16c0194984729441e8dafb1fefc94a6f3f82e2db0237523af14c8f5463bf363ba856773a881c66f310ffddf527a764cc6a96662a1625c21c4e2ba3bbc4158957601869390d68d5a188c0dace69914612781700042fe497875bf7a0476f4755fdfcb9326ec6e") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00004da000), 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x208000) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000040)=0xa3, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000007affc), 0x4) close(r4) rt_sigsuspend(&(0x7f0000000100)={0x7}, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}) bind$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, {0x8, 0x0, 0x6, 0x1, 0x3, 0x166}}, 0xa) 12:01:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0xff) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000984ff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000006}) 12:01:42 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) 12:01:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008941, &(0x7f0000000480)) 12:01:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200100, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x101}, &(0x7f00000000c0)=0x5) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000001180)=0x1008) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x38de9c62}) 12:01:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x100000001004, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xca482, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) ioctl$KDENABIO(r2, 0x4b36) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) bind$x25(r3, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) listen(r1, 0x0) bind$inet(r0, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt(r0, 0xffff, 0x3, &(0x7f00000001c0)=""/121, &(0x7f0000000240)=0x79) 12:01:42 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4, 0x40800) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000080)) tkill(r1, 0xf) ptrace$getregset(0x420c, r1, 0x0, 0x0) 12:01:42 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(r1, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') r2 = request_key(&(0x7f0000000600)='.request_key_auth\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f0000000840)='nodev,!)##vmnet0[em0\xaeuserwlan1proc\x00', 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) keyctl$reject(0x13, 0x0, 0x0, 0x8, r2) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080129bd700006000000050000001400070008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="0c0008c7ff92f80000000000"], 0x34}}, 0x20000000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) ioctl$TCSBRKP(r0, 0x5425, 0x7) socket$inet(0x10, 0x0, 0xc) geteuid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) getpgid(r4) getresgid(&(0x7f00000001c0), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c00)={{{@in=@multicast2}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r5 = getuid() getresgid(&(0x7f0000000340), &(0x7f0000000640), &(0x7f0000000680)=0x0) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000b80)={{0x0, r5, r6, r7, r8, 0x0, 0x9879}, 0x0, 0x0, 0x7ff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x9c) getresgid(0x0, &(0x7f00000007c0), &(0x7f0000000800)) request_key(&(0x7f0000000380)='user\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) r9 = semget(0x2, 0x3, 0x2) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000940)=[0x3f]) 12:01:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="406128137f5e6a1413361bb464140d11e202f0025b66ba16d316bc4720ca8184875178004df5e0d62098df8c9f98619cc49a1a06f4532a47cab12e84220c5629d2c336fed7296d582b47baaa9e3490adce1d68d706a937e533f9fab171ea3775622d9378bf2214ad3db16ef16a03086e01819af1b42bb9448e92f9bc3c6c7a10732fa7", 0x83, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r2, 0x8, 0x7cac8fd6}, 0x0, &(0x7f0000000300)="d216e0c5f53adf9c0853dc41045a8f2594b0eb581e56ed1a704094d92fe1", &(0x7f0000000340)="f2a79a13d3a3bc041743acffc3824d9d2be5de5ae4ce741b78d23f956cdfdcab2773d5da03102f0e73170db247111dbf7272e2d16c0194984729441e8dafb1fefc94a6f3f82e2db0237523af14c8f5463bf363ba856773a881c66f310ffddf527a764cc6a96662a1625c21c4e2ba3bbc4158957601869390d68d5a188c0dace69914612781700042fe497875bf7a0476f4755fdfcb9326ec6e") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00004da000), 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x208000) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000040)=0xa3, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000007affc), 0x4) close(r4) rt_sigsuspend(&(0x7f0000000100)={0x7}, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}) bind$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, {0x8, 0x0, 0x6, 0x1, 0x3, 0x166}}, 0xa) 12:01:42 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3) ptrace$cont(0x18, r0, 0x5, 0x0) pipe(&(0x7f0000000080)) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@dev, @mcast2, @mcast2, 0x4, 0x0, 0x0, 0x800040000116}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 12:01:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000780)='net/dev_snmp6\x00') mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000500)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x1) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="121927fc12fdf99ae80711634840", @ANYRES64=0x0, @ANYBLOB="0000000000000000ae10850a53613787f2e4e07e5de399885c787f04d17dd4a3163d760e06349db3c2b713e3ea67a083869aa759d87493b7297a0dff75ca0a03351607"], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="c964caa0802536ee3ab688146380a0f99f64787cc603de08ebe19efa51d6ace8be880bffbaed89125e25c87aff315a69f22d0287d6cd7be952bb84b0a117be2e3d28c9400758e37666458381226ff63f89ea167af86a9f86039742007e42f7405aae41dcc4325b1751c235af69176f4954eed990b578b99846f5c5de22d1bb568af4c853ecb614761d5d3e1a32daf5b01f6135eda909"], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') 12:01:42 executing program 3: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x10000000001, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, r3, &(0x7f0000000180)="57677e2d94daa833a61203e0b32e68", 0xf, 0x0, 0x0, 0x3}]) 12:01:42 executing program 5: mmap(&(0x7f0000875000/0x3000)=nil, 0x3000, 0x300000d, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000463000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xee3, 0x440000) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="75c43bae28afd553d426f125d0f870515c29bd74fc5856a605aa3a089bd98b38bd3a2ca60e66d32dd2b260ec8660982631e43f2b90c85242228862af87856b3d5d1f19385084c2e2fc1c1dd8ff52aa734ee02ce18c4f33a4192d07c79bd47d617875f87a8b6a8263f3b2e53bfef381d5", 0x1000000bd) [ 220.348873][ T7838] binder: 7835:7838 unknown command -64546542 [ 220.356061][ T7838] binder: 7835:7838 ioctl c0306201 20000180 returned -22 [ 220.364527][ T7838] binder: 7835:7838 unknown command -1597348663 [ 220.378755][ T7838] binder: 7835:7838 ioctl c0306201 20000140 returned -22 12:01:43 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) 12:01:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="406128137f5e6a1413361bb464140d11e202f0025b66ba16d316bc4720ca8184875178004df5e0d62098df8c9f98619cc49a1a06f4532a47cab12e84220c5629d2c336fed7296d582b47baaa9e3490adce1d68d706a937e533f9fab171ea3775622d9378bf2214ad3db16ef16a03086e01819af1b42bb9448e92f9bc3c6c7a10732fa7", 0x83, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r2, 0x8, 0x7cac8fd6}, 0x0, &(0x7f0000000300)="d216e0c5f53adf9c0853dc41045a8f2594b0eb581e56ed1a704094d92fe1", &(0x7f0000000340)="f2a79a13d3a3bc041743acffc3824d9d2be5de5ae4ce741b78d23f956cdfdcab2773d5da03102f0e73170db247111dbf7272e2d16c0194984729441e8dafb1fefc94a6f3f82e2db0237523af14c8f5463bf363ba856773a881c66f310ffddf527a764cc6a96662a1625c21c4e2ba3bbc4158957601869390d68d5a188c0dace69914612781700042fe497875bf7a0476f4755fdfcb9326ec6e") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00004da000), 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x208000) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000040)=0xa3, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000007affc), 0x4) close(r4) rt_sigsuspend(&(0x7f0000000100)={0x7}, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}) bind$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, {0x8, 0x0, 0x6, 0x1, 0x3, 0x166}}, 0xa) 12:01:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x1000, r1) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) 12:01:43 executing program 5: mkdir(0x0, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xffffffffffffff62) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0xffffffffffffff1f) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') futex(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1) [ 220.401225][ T7848] binder_alloc: binder_alloc_mmap_handler: 7835 20001000-20004000 already mapped failed -16 12:01:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x00\x00\x00y\x00\x05\x00', 0x807}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000040)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) 12:01:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x0, 0x400000, 0x0, 0x10020000000, 0x0}, 0x2c) r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/155, &(0x7f0000000100)=0x9b) [ 220.486436][ T7848] binder: BINDER_SET_CONTEXT_MGR already set [ 220.504990][ T7848] binder: 7835:7848 ioctl 40046207 0 returned -16 [ 220.539457][ T7838] binder: 7835:7838 unknown command -64546542 [ 220.552345][ T7855] binder: 7835:7855 unknown command -1597348663 [ 220.560049][ T7838] binder: 7835:7838 ioctl c0306201 20000180 returned -22 12:01:43 executing program 0: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r0 = perf_event_open(&(0x7f00000015c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000000)={@bcast, @null, @bcast, 0x5, 0x88, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000001c0)=""/252, &(0x7f0000000080)=""/43, &(0x7f00000000c0)=""/37, 0xd000}) rt_sigtimedwait(&(0x7f00000002c0)={0xffffffff}, &(0x7f0000000300), &(0x7f0000000380)={0x77359400}, 0x8) 12:01:43 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000000c0)={0x5, 0x8, 0x1, 0xffffffffffffff9c}) socket$vsock_stream(0x28, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x802, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x2, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$TIOCSTI(r1, 0x5412, 0x9) perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x48200, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'teql0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="000000000500000001000000c10000e10cae7736a3178cf07c980d17fcd6459b74f1729e18980a37391688e8e6f9a81fcc949150c3a0413b273ade45a66478fd5e8e9e20cfedf1a14298203a2f5782195ef161fd55b279227220eeb3a50fae1b7a5fef9341025f6b64870c23c9a15ae0fa4a19cef814f56732178b62177d4f83c67d8f183769e88ae44d6d3c275de812b655c5018e5590a2443f48a06739551ba85946e71ee3380f4c4f255ed51c2060ce48f35949649d276c08d5b8764979139ef5ab378427dda9c561edcf592e"]}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) unshare(0x8000000) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r4) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001600)=""/4096, 0x2}], 0x10000000000000e5, 0x0) [ 220.585479][ T7854] input: syz1 as /devices/virtual/input/input5 [ 220.589055][ T7855] binder: 7835:7855 ioctl c0306201 20000140 returned -22 12:01:43 executing program 4: userfaultfd(0x80000) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0xc5, 0x12800) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000400)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x4000, 0x17) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="45bf601764331369c267bf64f7ec68525f8518a0933d36396f4d912f623d9142d8d81a4794e9627d3411308e179aa9509c806c873038ce45817fa93dc9142412b56a7e67f4daebe551af3dc13b6170aea4f03cb12b36ddd4c13abe6a00d28bd06fca4eb0a7b0d62277c3d316804f0c3330a04f2156994cecf61c26b0d1b853fc3d8f7318f8d5558a271bb5259525a71a6c4e6cb2116d7e41be097c48d072745cee865451f79da230ed2f53dd5b8e7d8bd462ff1abdd82aa5536ee28e31444bf876846ba2cab48e63"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8008550e, 0x0) [ 220.739097][ T7880] input: syz1 as /devices/virtual/input/input6 12:01:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x300, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf1200b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 12:01:43 executing program 2: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4010, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8000000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0) write(r3, &(0x7f00000001c0), 0x1000002ac) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0x7c, 0x1) 12:01:43 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x4003003) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0xfd6f) sendfile(r0, r1, 0x0, 0x80000000000b) 12:01:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x6, {{0xa, 0x4e21, 0x8, @rand_addr="0d8aca03dc36516ff227b356d5e1ceb3", 0x2}}}, 0x88) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'sit0\x00', @ifru_hwaddr=@random="7451ebc80841"}) 12:01:43 executing program 4: userfaultfd(0x80000) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0xc5, 0x12800) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000400)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x4000, 0x17) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="45bf601764331369c267bf64f7ec68525f8518a0933d36396f4d912f623d9142d8d81a4794e9627d3411308e179aa9509c806c873038ce45817fa93dc9142412b56a7e67f4daebe551af3dc13b6170aea4f03cb12b36ddd4c13abe6a00d28bd06fca4eb0a7b0d62277c3d316804f0c3330a04f2156994cecf61c26b0d1b853fc3d8f7318f8d5558a271bb5259525a71a6c4e6cb2116d7e41be097c48d072745cee865451f79da230ed2f53dd5b8e7d8bd462ff1abdd82aa5536ee28e31444bf876846ba2cab48e63"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8008550e, 0x0) 12:01:43 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) accept$ax25(r0, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0xffffffffffffff56) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000040000001) getsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$FS_IOC_FSGETXATTR(r3, 0x802c550a, &(0x7f0000000100)={0xffffffffaf282e61, 0x0, 0x0, 0x740004}) ioctl$SIOCRSSCAUSE(r1, 0x89e3, 0x0) 12:01:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x300, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf1200b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 12:01:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x84800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}}, 0x0) 12:01:44 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101001, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = epoll_create1(0x0) r2 = getpgrp(0x0) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000000)={r1}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x7, 0x1, 0x7fff, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x20) 12:01:44 executing program 0: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r0 = perf_event_open(&(0x7f00000015c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000000)={@bcast, @null, @bcast, 0x5, 0x88, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, &(0x7f00000001c0)=""/252, &(0x7f0000000080)=""/43, &(0x7f00000000c0)=""/37, 0xd000}) rt_sigtimedwait(&(0x7f00000002c0)={0xffffffff}, &(0x7f0000000300), &(0x7f0000000380)={0x77359400}, 0x8) 12:01:44 executing program 3: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4400, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, 0x0) request_key(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) msgget$private(0x0, 0x0) msgget$private(0x0, 0x21) getuid() socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) 12:01:44 executing program 4: userfaultfd(0x80000) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0xc5, 0x12800) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000400)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x4000, 0x17) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="45bf601764331369c267bf64f7ec68525f8518a0933d36396f4d912f623d9142d8d81a4794e9627d3411308e179aa9509c806c873038ce45817fa93dc9142412b56a7e67f4daebe551af3dc13b6170aea4f03cb12b36ddd4c13abe6a00d28bd06fca4eb0a7b0d62277c3d316804f0c3330a04f2156994cecf61c26b0d1b853fc3d8f7318f8d5558a271bb5259525a71a6c4e6cb2116d7e41be097c48d072745cee865451f79da230ed2f53dd5b8e7d8bd462ff1abdd82aa5536ee28e31444bf876846ba2cab48e63"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8008550e, 0x0) 12:01:44 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x10000001, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = getpgid(0x0) r2 = gettid() setpgid(r1, r2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) tkill(r3, 0x7) 12:01:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@empty, @in6}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020807031dfffd946fa2830020200a0009000102001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 12:01:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000b67000), &(0x7f00007d0000)=0x2fd71482) [ 221.757596][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 12:01:44 executing program 4: userfaultfd(0x80000) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$midi(0x0, 0xc5, 0x12800) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000400)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x4000, 0x17) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="45bf601764331369c267bf64f7ec68525f8518a0933d36396f4d912f623d9142d8d81a4794e9627d3411308e179aa9509c806c873038ce45817fa93dc9142412b56a7e67f4daebe551af3dc13b6170aea4f03cb12b36ddd4c13abe6a00d28bd06fca4eb0a7b0d62277c3d316804f0c3330a04f2156994cecf61c26b0d1b853fc3d8f7318f8d5558a271bb5259525a71a6c4e6cb2116d7e41be097c48d072745cee865451f79da230ed2f53dd5b8e7d8bd462ff1abdd82aa5536ee28e31444bf876846ba2cab48e63"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8008550e, 0x0) 12:01:44 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x9, 0x2, 0x4, 0x1, 0x7, 0x80000001}) fstat(r1, &(0x7f0000000100)) 12:01:44 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x24000, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) 12:01:44 executing program 5: capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff}) syslog(0x0, 0x0, 0xfffffffffffffe20) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x404000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) ioctl$VT_RELDISP(r0, 0x5605) 12:01:44 executing program 3: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4400, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, 0x0) request_key(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) msgget$private(0x0, 0x0) msgget$private(0x0, 0x21) getuid() socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 221.966708][ T7968] vhci_hcd: invalid port number 0 [ 221.985060][ T7975] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) 12:01:44 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4400, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, 0x0) request_key(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) msgget$private(0x0, 0x0) msgget$private(0x0, 0x21) getuid() socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 222.006351][ T7975] printk: syz-executor.5 (7975): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). 12:01:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x7, [0x7, 0x7, 0x4, 0x7, 0x2, 0x3f4, 0x9]}, &(0x7f0000000100)=0x12) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:01:45 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4400, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, 0x0) request_key(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) msgget$private(0x0, 0x0) msgget$private(0x0, 0x21) getuid() socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) 12:01:45 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x9, 0x2, 0x4, 0x1, 0x7, 0x80000001}) fstat(r1, &(0x7f0000000100)) 12:01:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x45c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 12:01:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006540)={{{@in=@initdev, @in=@local}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000006400)=0xe8) r1 = socket$inet(0x2, 0x1, 0x0) select(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x4, 0xb60, 0xe, 0x5, 0xd816, 0x7}, 0x0, &(0x7f0000000140)={0x4, 0xb83, 0x2, 0x6e, 0x8, 0x8, 0x8000, 0x800}, &(0x7f00000001c0)={0x0, 0x2710}) r2 = syz_open_procfs(0x0, &(0x7f0000000740)='\x00\b\x00\x00tinfo\x00\xb1x\xb4@/\xb6\x04+\x16\xd2)\x8a\n\x80\xd6\xb1\n\v\x13\x8d\x1a\xfb58p\x00\x89>\xd0]\x12\x9bT\xd9\x91\b\xcf|\xd8\xb5\xee\xceDM\xdf\x1d(\xa6lIt\x7f\xa5\x8b\xb8\xd5A\xc9\x8a\xe1Ga\xde1\xdfa\x1f\xc7\x10,\xa4\xedN\xa4\v/\x1d\x84\xd2\xad\x8a\xf9\xd2\x8a\xe2\xa6d\x97^\xb0l\xe1\xbf\xbc\xe6}\xcf \xa9\x15\x96\x83`5\xf8\xef\x04\xd0@\x96\xd8x\x18\xac\x9fu\xf1\x85nE\xd3\xab\xc7fBEIM`\xb9\x17\xd3\xe1w\x98\xb0\xf3v\x98\xa8\xf8\xdd\xdcN \xe4\xa5#e\x8a\xb6\xd7') ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000e00)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x40, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x2200, 0x0) recvmmsg(r1, &(0x7f0000006240)=[{{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000800)=""/255, 0xff}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000b80)=""/199, 0xc7}, {&(0x7f0000000440)=""/24, 0x18}], 0x8}, 0x1000}, {{&(0x7f0000000d80)=@xdp, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002080)=""/220, 0xdc}, {0x0}], 0x2, &(0x7f0000000f80)=""/100, 0x64}, 0x4}, {{&(0x7f0000003180)=@ax25={{0x3, @bcast}, [@rose, @netrom, @null, @default, @default, @rose, @netrom, @netrom]}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003200)=""/16, 0x10}, {&(0x7f0000003240)=""/209, 0xd1}, {&(0x7f0000003340)=""/222, 0xde}, {&(0x7f0000003440)=""/45, 0x2d}, {&(0x7f0000003480)=""/21, 0x15}, {&(0x7f00000034c0)=""/205, 0xcd}, {&(0x7f00000035c0)=""/124, 0x7c}, {&(0x7f0000003640)=""/77, 0x4d}, {&(0x7f00000036c0)=""/3, 0x3}, {&(0x7f0000003700)=""/157, 0x9d}], 0xa, &(0x7f0000003880)=""/143, 0x8f}, 0x3f}, {{&(0x7f0000003940)=@generic, 0x80, &(0x7f0000004c00)=[{&(0x7f00000039c0)=""/186, 0xba}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/8, 0x8}], 0x3}, 0x2}, {{&(0x7f0000004c80)=@rc, 0x80, 0x0}, 0xff}], 0x5, 0x10000, &(0x7f0000006380)={0x0, 0x989680}) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r1, 0x8, 0x4, &(0x7f0000000000)=""/76, &(0x7f0000000080)=0x4c) r3 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000002180)={{0x0, 0x7, 0x9, 0x9, 'syz0\x00', 0x7fff}, 0x0, 0x20000314, 0x8000, r3, 0x1, 0xa0, 'syz1\x00', &(0x7f0000000200)=['%vboxnet0user}\xf3-\x00'], 0x11, [], [0xb13, 0x1f, 0x7ff, 0x9]}) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) ftruncate(r1, 0x7) 12:01:45 executing program 1: ioperm(0x0, 0x5, 0x800) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000001c0)={0x1, "2000210f9ef9a0286f1a1233d190b2c7addd865db7bfe508bfc6f636b69171c7", 0xc, 0x6, 0x6, 0x1e, 0x4}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x75f2, 0x6, 0x200, 0xe, 0x7}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000300)={r6, 0xc6, "91b9716860177eb346f6576f4c2726d456f07b2ee1ec50bcefe832c4b4cadb2fe0595726ead3091b73c8e09de24685ad7eee726b04d52b4b7c8076941d52b3ca27449dd7c245abe3408f80017e204735a3ca5692d10927eb209128fca7996a1a5f7a6f07095c28285ba76361e38a74b5b84f597fa3562065b113407e54517c8be96ffb891cf2d0eeaf9353c4d9a87b8ca5902e434e5982af2d61e06a0c20456e073a6445e0fb2c97a05e15aff6eae0e0d32efef59aee259b9f670c5e0657ccc0c87c39dd4931"}, &(0x7f0000000680)=0xce) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@loopback, @in6=@loopback, 0x4e22, 0x9, 0x4e24, 0x1e, 0xa, 0x20, 0x0, 0x7b, r4, r5}, {0x21, 0x1, 0x0, 0x8, 0x7, 0x10000, 0x10001, 0x40000000000000}, {0x3, 0xff, 0x100000000, 0x1}, 0x4, 0x6e6bb2, 0x0, 0x0, 0x2, 0x1}, {{@in6=@remote, 0x4d3, 0x33}, 0xa, @in=@empty, 0x3507, 0x0, 0x3, 0x74, 0x2, 0x7, 0xff}}, 0xe8) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) bind$bt_sco(r2, &(0x7f0000000240)={0x1f, {0x0, 0x8001, 0x6, 0x7ffd, 0x6c, 0x6}}, 0x8) [ 222.553193][ T8005] vhci_hcd: invalid port number 0 12:01:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x8010000020000001, 0x84) socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 12:01:45 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x9, 0x2, 0x4, 0x1, 0x7, 0x80000001}) fstat(r1, &(0x7f0000000100)) 12:01:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x1) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@authinfo={0x18}], 0x18}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="20000000000000008400000002ffed00000041020000000000000000", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x117, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0xbca826be126d349f, 0xfa00, {&(0x7f0000000240), 0x2, {0xa, 0x4e24, 0x6, @rand_addr="2f3c6f3677f0a07a44a27938d36bd366", 0xe7c}, r2}}, 0x38) 12:01:45 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x20080, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000140)) r1 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)) 12:01:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x3, 0x848, 0x7}) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000040)) 12:01:45 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x9, 0x2, 0x4, 0x1, 0x7, 0x80000001}) fstat(r1, &(0x7f0000000100)) [ 222.663559][ T8022] vhci_hcd: invalid port number 0 [ 222.764426][ T8037] vhci_hcd: invalid port number 0 12:01:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x7, [0x7, 0x7, 0x4, 0x7, 0x2, 0x3f4, 0x9]}, &(0x7f0000000100)=0x12) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:01:46 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) truncate(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") rt_sigprocmask(0x0, &(0x7f00000000c0)={0x100000000}, &(0x7f0000000100), 0x8) fcntl$setlease(r0, 0x400, 0x2) 12:01:46 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x9, 0x2, 0x4, 0x1, 0x7, 0x80000001}) 12:01:46 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) 12:01:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x20000000000000f, &(0x7f0000000080)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)=ANY=[], 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) fcntl$setstatus(r1, 0x4, 0x42803) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000100)=0x1000) 12:01:46 executing program 1: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xe9f6, 0x80000) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x7fff, 0x0, 0xdc, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast}}, [0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x9, 0x549b, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1]}, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000fc0)={&(0x7f0000000500)={0x27, 0x1, 0x2, 0x1, 0x3, 0x2, "5dd17c5bdc844d246d95f97ef4092f0050ff9d4006204fe2255bc1822ecfcce41f4761b27a32af5caf3e9366e98e151ac5db877e9d2a2ced85c3a021dce69b", 0x17}, 0x60, 0x0, 0x0, 0x0, 0x0, 0x40080}, 0x40010) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0xff, 0x4, 0x0, 0x80}, 0x98) pipe(0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xffffffffffffff7d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/video1\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0xbd1b) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000001000)={0xd9b}, 0x4) r4 = accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000003c0)={'bridge_slave_1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_extract_tcp_res$synack(&(0x7f0000001040), 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000640)=0xe8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'nr0\x00', r5}) sendmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xffffffffffffffc1}], 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000840)=0xe8) r7 = getgid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000880)={0xa0, 0x0, 0x7, {{0x3, 0x3, 0x80000001, 0x568, 0x4, 0x2, {0x2, 0x31, 0x10000, 0x7, 0x1, 0x4, 0x7, 0x40, 0x1, 0x1, 0x9, r6, r7, 0x4, 0x7ff}}, {0x0, 0x4}}}, 0xa0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) [ 223.424530][ T8050] vhci_hcd: invalid port number 0 12:01:46 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) 12:01:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8001, 0x48c000) sendmsg$key(r0, &(0x7f0000000000)={0xffffffffa0018004, 0x40030000000000, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c000000000000000000000002001300020000000000583e442b0000030006000000000002000000e0000001000000000000000002000100000000000000000200000000030005000000000002000000e00000010000000000000500"], 0x60}}, 0x0) 12:01:46 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) [ 223.550070][ T8074] vhci_hcd: invalid port number 0 12:01:46 executing program 3: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x200, 0x20400) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) r3 = socket$inet(0x2, 0x10000000000003, 0x9) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_mreq(r1, 0x0, 0x3, &(0x7f00000001c0)={@local, @multicast1}, 0x8) 12:01:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001200)="24000000220007031dfffd946f610500000000000500000000000000421baba20400ff7e", 0x24}], 0x1}, 0x0) ppoll(&(0x7f0000000500)=[{}, {r1}, {r2, 0x440}], 0x2163, 0x0, 0x0, 0x0) 12:01:46 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) [ 223.685290][ T8088] vhci_hcd: invalid port number 0 [ 223.798563][ T8098] vhci_hcd: invalid port number 0 12:01:47 executing program 0: r0 = semget$private(0x0, 0x20000000105, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0xb4}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000a00)=""/133) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r2, 0xffffffffffffffff}, &(0x7f0000000140)=0x8) 12:01:47 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a623a001c686c740987380c6482f4a6530c0599aa01d9cfbd4e60c201942131d252ff2a0bb8"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 12:01:47 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:47 executing program 4: r0 = openat$random(0xffffffffffffff9c, 0x0, 0x200000000000000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @rand_addr=0x5}], 0x30) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x80000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x82000, 0x0) r6 = dup(r4) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f00000000c0)={r6, 0x3}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x20000008}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000013d000/0x18000)=nil, 0x0, 0x1f3, 0x0, 0x0, 0x0) 12:01:47 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) socket$l2tp(0x18, 0x1, 0x1) 12:01:47 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1000000010009ffd, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)=0xffffffffffffffff, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) chroot(0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda500102) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c40)}, 0x40010) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) [ 224.345671][ T8117] vhci_hcd: invalid port number 0 12:01:47 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:47 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x80) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @loopback}, &(0x7f0000000500)=0x228, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}]}}) poll(&(0x7f0000000040)=[{r0, 0x8000}, {r1, 0x3000}, {r0, 0x8001}], 0x3, 0x6) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0}, 0xa0) 12:01:47 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r4, r3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r4, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 12:01:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x1b6) [ 224.491631][ T8137] vhci_hcd: invalid port number 0 12:01:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x8000000000005, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x80) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDDELIO(r2, 0x4b35, 0x9) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}}) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/117) 12:01:47 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:47 executing program 4: r0 = syz_open_dev$usb(0x0, 0x0, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000040)={0x1, 0x0, [{}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") syz_mount_image$ntfs(&(0x7f0000000300)='ntfs\x00', &(0x7f0000000340)='./file0\x00', 0x3, 0x3, &(0x7f0000000840)=[{&(0x7f0000000540)='%', 0x1}, {0x0}, {0x0}], 0x4000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) move_pages(r2, 0x8, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f00000000c0)=[0x7, 0x80000000, 0x2, 0x7, 0x9, 0x80, 0x2, 0x1ff], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4) 12:01:47 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)={0x2, 0x0, [0x0, 0x0]}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x1013, r1, 0x0) ioctl$int_in(r1, 0x280081000005008, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00000001c0)={0x2004, 0x7004, 0x6, 0x8000, 0x2}) socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000100)={[{0x0, 0x6, 0x4, 0x2, 0x6, 0xc6, 0x0, 0x10001, 0x8, 0x20, 0x5, 0x8, 0x7}, {0x1, 0x81, 0xe1, 0x4, 0x80000001, 0x4, 0x2, 0x101, 0x49, 0x2, 0x3, 0x9, 0x8}, {0x9, 0x6d4f6f91, 0xfffffffffffffff8, 0x9, 0x5, 0x2, 0x1, 0x400, 0x1ff, 0x2f, 0x8, 0x8, 0xd5d}], 0x6}) [ 224.780269][ T8156] vhci_hcd: invalid port number 0 12:01:47 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) [ 225.001913][ T8159] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 12:01:47 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) [ 225.115300][ T8163] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 12:01:47 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:48 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000600)={0x0, 0xfffffffffffffffb, 0x40, 0x1, 0x4, 0x8, 0x90f, 0x6, {0x0, @in6={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x13}, 0x100}}, 0x100, 0x6, 0x1, 0xb, 0x6a98}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x81}, &(0x7f0000000240)=0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) chdir(&(0x7f00000005c0)='./file1\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000480)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./f']) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f00000001c0)) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 12:01:48 executing program 4: r0 = socket$kcm(0x10, 0x400000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d000400000010000340140000000000000037153e370000000000000000d1bd", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x10001, 0x40000) statx(r1, &(0x7f0000000100)='./file0\x00', 0x400, 0x200, &(0x7f00000002c0)) readv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/203, 0xfffffffffffffe63}], 0x1) 12:01:48 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000000c0)) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce2000000000000000"], 0x1}}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 225.676338][ T8199] overlayfs: missing 'workdir' [ 225.739646][ T8195] overlayfs: failed to resolve './file1': -2 [ 225.816759][ T8208] overlayfs: missing 'workdir' [ 225.823557][ T8210] overlayfs: failed to resolve './file1': -2 12:01:48 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000780)={0x8000000001, 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x1, 0xffffffffffffff97, 0x5, 'queue0\x00', 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r1, 0x3}) 12:01:48 executing program 2: r0 = syz_open_dev$usb(0x0, 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xed) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffff3a, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x33, 0x2e, 0x1, 0x13, 0xb, 0x80, 0x1, 0xdd, 0x1}) 12:01:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @local, 0x5}}, 0x7, 0x9}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0xc4c8, 0x10000}, 0xc) r3 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @dev}, 0x10) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2b) fcntl$setstatus(r1, 0x4, 0x42803) 12:01:48 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) flock(r0, 0xa) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) pause() ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) 12:01:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r4, r3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r4, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 226.168591][ T8223] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #1 [ 226.202592][ T8223] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #1 12:01:48 executing program 2: r0 = syz_open_dev$usb(0x0, 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0xe1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5470000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc000000f1500c04375608137f12d4d7ce4bb7ad654d0800673caf2cf6f10c8a935b6d339b7785639ba20633abc78927d96ca0afe3f6e26f95c5f34fac8f48f06dacbe946fb884cc9d966187311442319dda5eed00da8bea7250ac113e02ec07", @ANYRES16=r1, @ANYBLOB="000326bd7000fbdbdf250b0000000c0003000800030003000000080006003f0000002400020008000700060000000800060001000000080002004e21000008000900000000004c00030008000500e000000214000200697036677265746170300000000000000800080007000000080003000200000008000300020000001400020069706464703000000000000000000000040003000800050001000100080004001f000000080005003900000008000500ff010000"], 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000054000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00009b2000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$eventfd(r0, &(0x7f00000002c0)=0x4, 0x8) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0xfe3b) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', r4}) 12:01:49 executing program 2: r0 = syz_open_dev$usb(0x0, 0xd, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:49 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:49 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000140)=0x8) r1 = socket$inet(0x2, 0x80001, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x90000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x1, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r3) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000100)={0x0, "3c0630806ad61d511c1605b5a8c63f13df142533c5e73edf54606d1b0f187091", 0x2, 0x1}) 12:01:49 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:49 executing program 4: unshare(0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x4400) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, 0x0) userfaultfd(0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000100e37527db20fb3faf7b0f226d968307ac009ec2a794e5ba6b914c15029e720e68c899e57e29c1700c29b50cba63a52764883e0080d5d600959ecfea07093e02d1fdbe203", @ANYRES16=r2, @ANYBLOB="000127bd7000fddbdf25030000004c00030008000500e00000020800030002000000080003000300000008000300000000000800010002000000080007004e21000008000300000000000800010003000000080007004e2300000800040002000000080005000000000048000300140002006272696467655f736c6176655f310000080001000100000014000600fe8000000000000000000000000000bb1400020069666230000000000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x200480d1) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x3, r1}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$unix(0x1, 0x5, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 12:01:49 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x401) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:49 executing program 0: r0 = socket(0xa, 0x80000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8, 0x22, 0x1b}]}}}]}, 0x44}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) 12:01:49 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x27fffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r1, &(0x7f00001cb000)={0x0, 0x0, &(0x7f0000f4a000)={&(0x7f000019bf9b)=ANY=[@ANYBLOB="140000002a001503000000000000000000"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 12:01:49 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:49 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7ff, 0x8080) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000002c0)={@bcast, @bcast}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00') ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000580)) set_thread_area(&(0x7f0000000340)={0x6, 0x20001800, 0x4000, 0x200, 0x10000000000ffff, 0x8000000000000001, 0x4000000080101, 0x2, 0xffffffff, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='./file0\x00') mount(&(0x7f00000008c0)=ANY=[@ANYBLOB='@dev/md0\x00'], &(0x7f0000000880)='./file0\x00', &(0x7f00000004c0)='nfsd\x00', 0x2000023, &(0x7f00000006c0)='\x8auU{-\x154\x05-\xab\xc0\xcb\x1an\xd76*5\xec2c\x9f\xcf\xb8\xb6v\x9aA\x06K\x95\xd4dx#\xf8\x90\r\xf1S\xc4\xc2\a\b\x03^\xe6b\x03\xaal)eb,z4\xc9\xe8\x11Y\xacV') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') clone(0x22102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_xen(&(0x7f0000002a00)='syz', &(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80)='9p\x00', 0x8, &(0x7f0000002b80)={'trans=xen,', {[], [{@subj_type={'subj_type', 0x3d, 'selinux-^,GPL'}}, {@fowner_eq={'fowner'}}]}}) syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x2, 0x101000) 12:01:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x80284504, &(0x7f0000000000)=0x1fe) 12:01:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000006) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00000000000000000000000000", 0x58}], 0x1) 12:01:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=' ', 0x1}], 0x1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x1000000, 0xb6c}) 12:01:49 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:49 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) [ 227.200995][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.218439][ T8299] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 12:01:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x20, 0x20, 0x1, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x20}}, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffff7, 0x208400) 12:01:50 executing program 0: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00t_a\x00ct\x00') ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000280)=""/108, 0x6c) getdents64(r0, &(0x7f0000000300)=""/528, 0x615) [ 227.253332][ T8292] 9pnet: Could not find request transport: xen 12:01:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x80284504, &(0x7f0000000000)=0x1fe) 12:01:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4000000000000803, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x8) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x3) dup2(r3, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000000c0)) ioctl(r1, 0xfffffffffffffffd, &(0x7f0000000080)="0adc040000000000000070") getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)=0x118) [ 227.308503][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 227.377989][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 227.467022][ T8329] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 12:01:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0600000000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f00000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ffff070000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="f400000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="db00000000000000"], @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48, 0x7}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 12:01:50 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x38) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x20002, 0x0) pipe2(&(0x7f0000000040), 0x80000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) dup(r1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x28405, 0x0) 12:01:50 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x181000) 12:01:50 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x3, 0x1e}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0x9, r1}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r3, 0x0, r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 12:01:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x309000, 0x8b) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) prctl$PR_SET_FPEMU(0xa, 0x1) getsockopt$inet6_int(r1, 0x29, 0xdf, 0x0, &(0x7f0000000040)=0x4ea) [ 227.641949][ T8340] vhci_hcd: invalid port number 0 12:01:50 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x4001080323}) 12:01:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000013000/0x4000)=nil, &(0x7f0000011000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000011000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000014000/0x3000)=nil, &(0x7f0000013000/0x1000)=nil, &(0x7f0000007000/0x1000)=nil, &(0x7f00000002c0)="3237b9d49e0f978951f251356ac554719790d037df72febe7405cb6b62ad497fbc2b451a631a78c490dea6a22591416d389f60afb58292576f6c3460063ca6287083c1da02b63eae463666ebeac9a57823eb14782a25173a5d3608a018d6bfaad0b940d623809c59368832c6332ea1fafdf9c058b5ea6d671e1918eb00bb9424b031bf2bca0e42c8f5c723a8495ea3e1b5574b9fba04adda77af9e022d4a427aa3a4119821940128f18ccd7c5b56d4626e066ba919ef9f5a24298dd4aade73b77ed05857aec075a0da0b2decd72824716e9963b76629a148b62cc7abe408c70b71b38ab9c49a87a825bbd94d4fb1f8d6672a0d", 0xf3, r0}, 0x68) sched_setaffinity(0x0, 0x0, &(0x7f0000000140)=0x4000000000000c) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x18400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000480)={0xa6, 0x0, 0x1017, 0x2, 0x9, 0x24, 0x51, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$getregs(0xe, r4, 0x1f, &(0x7f0000000440)=""/15) 12:01:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xb, 0x0, 0x4, 0x2}, 0x10}}, 0x0) unlink(&(0x7f0000000000)='./file0\x00') [ 227.784989][ T8360] vhci_hcd: invalid port number 0 [ 379.565947][ T1043] INFO: task syz-executor.0:7672 blocked for more than 143 seconds. [ 379.574178][ T1043] Not tainted 5.1.0-rc2 #36 [ 379.580043][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.588907][ T1043] syz-executor.0 D23672 7672 1 0x00000004 [ 379.595252][ T1043] Call Trace: [ 379.598736][ T1043] __schedule+0x817/0x1cc0 [ 379.603161][ T1043] ? __mutex_lock+0x721/0x1310 [ 379.608088][ T1043] ? __sched_text_start+0x8/0x8 [ 379.612989][ T1043] schedule+0x92/0x180 [ 379.617118][ T1043] schedule_preempt_disabled+0x13/0x20 [ 379.622607][ T1043] __mutex_lock+0x726/0x1310 [ 379.627332][ T1043] ? fuse_lock_inode+0xba/0xf0 [ 379.632196][ T1043] ? mutex_trylock+0x1e0/0x1e0 [ 379.637244][ T1043] ? d_alloc_parallel+0x7b0/0x1bc0 [ 379.642469][ T1043] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 379.649604][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.656323][ T1043] ? kasan_check_read+0x11/0x20 [ 379.661188][ T1043] mutex_lock_nested+0x16/0x20 [ 379.666109][ T1043] ? mutex_lock_nested+0x16/0x20 [ 379.671049][ T1043] fuse_lock_inode+0xba/0xf0 [ 379.676530][ T1043] fuse_lookup+0x8e/0x350 [ 379.680904][ T1043] ? __lock_acquire+0x548/0x3fb0 [ 379.686107][ T1043] ? fuse_lookup_name+0x670/0x670 [ 379.691226][ T1043] ? __d_lookup_rcu+0x6c0/0x6c0 [ 379.696138][ T1043] ? find_held_lock+0x35/0x130 [ 379.701157][ T1043] ? __d_lookup+0x40c/0x760 [ 379.705748][ T1043] ? lockdep_init_map+0x1be/0x6d0 [ 379.710783][ T1043] ? lockdep_init_map+0x1be/0x6d0 [ 379.716145][ T1043] __lookup_slow+0x27e/0x500 [ 379.720776][ T1043] ? vfs_unlink+0x560/0x560 [ 379.725283][ T1043] ? __d_lookup+0x433/0x760 [ 379.729883][ T1043] lookup_slow+0x58/0x80 [ 379.734125][ T1043] walk_component+0x74b/0x2000 [ 379.739028][ T1043] ? lockref_get+0x46/0x60 [ 379.743765][ T1043] ? path_init+0x18f0/0x18f0 [ 379.748603][ T1043] ? fuse_allow_current_process+0x113/0x350 [ 379.754705][ T1043] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 379.762987][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.769474][ T1043] ? security_inode_permission+0xd5/0x110 [ 379.775335][ T1043] ? inode_permission+0xb4/0x570 [ 379.780532][ T1043] link_path_walk.part.0+0x980/0x1340 [ 379.786157][ T1043] ? walk_component+0x2000/0x2000 [ 379.791241][ T1043] ? nd_jump_root+0x1ec/0x3e0 [ 379.796402][ T1043] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 379.803332][ T1043] ? trailing_symlink+0x2b5/0x970 [ 379.808627][ T1043] path_mountpoint+0xe0/0x1e60 [ 379.813495][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.819843][ T1043] ? path_openat+0x46e0/0x46e0 [ 379.824631][ T1043] ? cache_grow_end+0xa4/0x190 [ 379.829605][ T1043] filename_mountpoint+0x190/0x3c0 [ 379.835083][ T1043] ? filename_parentat.isra.0+0x410/0x410 [ 379.841161][ T1043] ? __phys_addr_symbol+0x30/0x70 [ 379.846280][ T1043] ? __check_object_size+0x3d/0x42f [ 379.851737][ T1043] ? strncpy_from_user+0x2a8/0x380 [ 379.856907][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.863171][ T1043] ? getname_flags+0x277/0x5b0 [ 379.868004][ T1043] user_path_mountpoint_at+0x3a/0x50 [ 379.873297][ T1043] ksys_umount+0x167/0xf00 [ 379.877841][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.884111][ T1043] ? __detach_mounts+0x320/0x320 [ 379.889195][ T1043] ? kasan_check_write+0x14/0x20 [ 379.894186][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 379.899720][ T1043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 379.905565][ T1043] ? do_syscall_64+0x26/0x610 [ 379.910303][ T1043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.916575][ T1043] ? do_syscall_64+0x26/0x610 [ 379.921275][ T1043] ? lockdep_hardirqs_on+0x418/0x5d0 [ 379.926637][ T1043] __x64_sys_umount+0x54/0x80 [ 379.931319][ T1043] do_syscall_64+0x103/0x610 [ 379.935965][ T1043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.942048][ T1043] RIP: 0033:0x45ac57 [ 379.946088][ T1043] Code: 01 df 48 01 de 48 29 d9 e8 16 f5 ff ff 48 8b ac 24 00 00 08 00 48 81 c4 08 00 08 00 c3 e8 01 f3 ff ff e9 4c ff ff ff 48 8d bc <24> 10 00 08 00 48 39 3b 75 8c 48 89 23 eb 87 cc cc cc cc cc cc cc [ 379.966307][ T1043] RSP: 002b:00007ffd3c52edf8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 379.974914][ T1043] RAX: ffffffffffffffda RBX: 00000000000377cd RCX: 000000000045ac57 [ 379.982967][ T1043] RDX: 0000000000402ea0 RSI: 0000000000000002 RDI: 00007ffd3c52eea0 [ 379.991194][ T1043] RBP: 0000000000000046 R08: 0000000000000000 R09: 000000000000000f [ 379.999235][ T1043] R10: 000000000000000a R11: 0000000000000206 R12: 00007ffd3c52ff30 [ 380.007381][ T1043] R13: 0000000001245940 R14: 0000000000000000 R15: 00007ffd3c52ff30 [ 380.015407][ T1043] [ 380.015407][ T1043] Showing all locks held in the system: [ 380.023448][ T1043] 1 lock held by khungtaskd/1043: [ 380.028699][ T1043] #0: 00000000d3ee2b2a (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 380.038211][ T1043] 2 locks held by rsyslogd/7542: [ 380.043256][ T1043] #0: 000000001c0b5647 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 380.052592][ T1043] #1: 00000000f4a9cda9 (&rq->lock){-.-.}, at: kmem_cache_alloc_trace+0x411/0x760 [ 380.063176][ T1043] 2 locks held by getty/7631: [ 380.067911][ T1043] #0: 0000000008c3d20a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.077364][ T1043] #1: 0000000055421501 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 380.087257][ T1043] 2 locks held by getty/7632: [ 380.092160][ T1043] #0: 00000000a3e161ee (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.101266][ T1043] #1: 00000000cebbc0ef (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 380.111066][ T1043] 2 locks held by getty/7633: [ 380.116091][ T1043] #0: 000000001d33a760 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.125731][ T1043] #1: 00000000d8e3a455 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 380.135712][ T1043] 2 locks held by getty/7634: [ 380.140385][ T1043] #0: 00000000aa76e5cc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.149495][ T1043] #1: 000000007e84bde1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 380.159441][ T1043] 2 locks held by getty/7635: [ 380.164197][ T1043] #0: 000000008c810d2c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.173299][ T1043] #1: 000000005b4c6eac (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 380.183087][ T1043] 2 locks held by getty/7636: [ 380.187840][ T1043] #0: 00000000cc7cc386 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.197103][ T1043] #1: 0000000037f1c5bc (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 380.206751][ T1043] 2 locks held by getty/7637: [ 380.211426][ T1043] #0: 000000000e7a73de (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.220658][ T1043] #1: 0000000038a03cd5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 380.231958][ T1043] 2 locks held by syz-executor.0/7672: [ 380.258208][ T1043] #0: 00000000b828fd12 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x4a/0x80 [ 380.268081][ T1043] #1: 0000000061401802 (&fi->mutex){+.+.}, at: fuse_lock_inode+0xba/0xf0 [ 380.277372][ T1043] 2 locks held by syz-executor.0/8313: [ 380.282836][ T1043] #0: 00000000b828fd12 (&type->i_mutex_dir_key#8){++++}, at: lookup_slow+0x4a/0x80 [ 380.292447][ T1043] #1: 0000000061401802 (&fi->mutex){+.+.}, at: fuse_lock_inode+0xba/0xf0 [ 380.301126][ T1043] [ 380.303540][ T1043] ============================================= [ 380.303540][ T1043] [ 380.312211][ T1043] NMI backtrace for cpu 0 [ 380.316715][ T1043] CPU: 0 PID: 1043 Comm: khungtaskd Not tainted 5.1.0-rc2 #36 [ 380.324167][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.334694][ T1043] Call Trace: [ 380.338146][ T1043] dump_stack+0x172/0x1f0 [ 380.342886][ T1043] nmi_cpu_backtrace.cold+0x63/0xa4 [ 380.348171][ T1043] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 380.353820][ T1043] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 380.359867][ T1043] arch_trigger_cpumask_backtrace+0x14/0x20 [ 380.365767][ T1043] watchdog+0x9b7/0xec0 [ 380.370077][ T1043] kthread+0x357/0x430 [ 380.374359][ T1043] ? reset_hung_task_detector+0x30/0x30 [ 380.380203][ T1043] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 380.386611][ T1043] ret_from_fork+0x3a/0x50 [ 380.391326][ T1043] Sending NMI from CPU 0 to CPUs 1: [ 380.396836][ C1] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x2/0x10 [ 380.397776][ T1043] Kernel panic - not syncing: hung_task: blocked tasks [ 380.411939][ T1043] CPU: 0 PID: 1043 Comm: khungtaskd Not tainted 5.1.0-rc2 #36 [ 380.419468][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.431046][ T1043] Call Trace: [ 380.434327][ T1043] dump_stack+0x172/0x1f0 [ 380.438857][ T1043] panic+0x2cb/0x65c [ 380.442769][ T1043] ? __warn_printk+0xf3/0xf3 [ 380.447365][ T1043] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 380.453170][ T1043] ? printk_safe_flush+0xf2/0x140 [ 380.458195][ T1043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.464446][ T1043] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 380.470269][ T1043] ? nmi_trigger_cpumask_backtrace+0x1a7/0x236 [ 380.476647][ T1043] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 380.483330][ T1043] watchdog+0x9c8/0xec0 [ 380.487501][ T1043] kthread+0x357/0x430 [ 380.491650][ T1043] ? reset_hung_task_detector+0x30/0x30 [ 380.497324][ T1043] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 380.504263][ T1043] ret_from_fork+0x3a/0x50 [ 380.510541][ T1043] Kernel Offset: disabled [ 380.515012][ T1043] Rebooting in 86400 seconds..