[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 68.300586][ T23] audit: type=1800 audit(1575328319.800:25): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 68.321228][ T23] audit: type=1800 audit(1575328319.810:26): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 68.377823][ T23] audit: type=1800 audit(1575328319.810:27): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.101' (ECDSA) to the list of known hosts. 2019/12/02 23:12:09 fuzzer started 2019/12/02 23:12:11 dialing manager at 10.128.0.26:46037 2019/12/02 23:12:11 syscalls: 2521 2019/12/02 23:12:11 code coverage: enabled 2019/12/02 23:12:11 comparison tracing: enabled 2019/12/02 23:12:11 extra coverage: extra coverage is not supported by the kernel 2019/12/02 23:12:11 setuid sandbox: enabled 2019/12/02 23:12:11 namespace sandbox: enabled 2019/12/02 23:12:11 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/02 23:12:11 fault injection: enabled 2019/12/02 23:12:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/02 23:12:11 net packet injection: enabled 2019/12/02 23:12:11 net device setup: enabled 2019/12/02 23:12:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/02 23:12:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 23:13:53 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000000), &(0x7f0000000140)='.', 0x0, 0x2003002480, 0x0) 23:13:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f00000001c0)="240000001a005f3814f9f4078000040e0aea1918278b9aed0100800000710040c9e11898", 0x24) syzkaller login: [ 182.063278][ T9222] IPVS: ftp: loaded support on port[0] = 21 [ 182.195366][ T9222] chnl_net:caif_netlink_parms(): no params data found [ 182.247530][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.255686][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.266234][ T9222] device bridge_slave_0 entered promiscuous mode [ 182.275607][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.282752][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state 23:13:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 182.292200][ T9222] device bridge_slave_1 entered promiscuous mode [ 182.310091][ T9224] IPVS: ftp: loaded support on port[0] = 21 [ 182.326734][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.338288][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.390627][ T9222] team0: Port device team_slave_0 added [ 182.411416][ T9222] team0: Port device team_slave_1 added [ 182.557544][ T9226] IPVS: ftp: loaded support on port[0] = 21 [ 182.567648][ T9222] device hsr_slave_0 entered promiscuous mode 23:13:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x8) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) [ 182.613596][ T9222] device hsr_slave_1 entered promiscuous mode [ 182.829683][ T9222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.898016][ T9222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.911655][ T9229] IPVS: ftp: loaded support on port[0] = 21 23:13:54 executing program 4: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'rose0\x00'}) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000180)={'bridge0\x00 \x01\x00', 0x1}) [ 182.965528][ T9222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.048303][ T9222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.125210][ T9224] chnl_net:caif_netlink_parms(): no params data found 23:13:54 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a}) [ 183.197868][ T9231] IPVS: ftp: loaded support on port[0] = 21 [ 183.211631][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.218966][ T9222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.228045][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.235287][ T9222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.267140][ T2724] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.284958][ T2724] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.387110][ T9226] chnl_net:caif_netlink_parms(): no params data found [ 183.411764][ T9224] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.419753][ T9224] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.428112][ T9224] device bridge_slave_0 entered promiscuous mode [ 183.436892][ T9224] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.444360][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.452639][ T9224] device bridge_slave_1 entered promiscuous mode [ 183.487781][ T9235] IPVS: ftp: loaded support on port[0] = 21 [ 183.512633][ T9224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.577252][ T9224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.603597][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.610779][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.619274][ T9226] device bridge_slave_0 entered promiscuous mode [ 183.628969][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.636400][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.644295][ T9226] device bridge_slave_1 entered promiscuous mode [ 183.665505][ T9224] team0: Port device team_slave_0 added [ 183.705969][ T9226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.716759][ T9224] team0: Port device team_slave_1 added [ 183.727512][ T9229] chnl_net:caif_netlink_parms(): no params data found [ 183.745330][ T9226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.885348][ T9224] device hsr_slave_0 entered promiscuous mode [ 183.914038][ T9224] device hsr_slave_1 entered promiscuous mode [ 183.953594][ T9224] debugfs: Directory 'hsr0' with parent '/' already present! [ 183.972736][ T9226] team0: Port device team_slave_0 added [ 183.984516][ T9226] team0: Port device team_slave_1 added [ 184.006487][ T9222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.015796][ T9231] chnl_net:caif_netlink_parms(): no params data found [ 184.053736][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.062557][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.071649][ T9229] device bridge_slave_0 entered promiscuous mode [ 184.156626][ T9226] device hsr_slave_0 entered promiscuous mode [ 184.194297][ T9226] device hsr_slave_1 entered promiscuous mode [ 184.233165][ T9226] debugfs: Directory 'hsr0' with parent '/' already present! [ 184.241453][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.249352][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.258570][ T9229] device bridge_slave_1 entered promiscuous mode [ 184.317213][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.325587][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.351155][ T9229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.368813][ T9229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.398915][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.407055][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.415060][ T9231] device bridge_slave_0 entered promiscuous mode [ 184.428680][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.435938][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.443969][ T9231] device bridge_slave_1 entered promiscuous mode [ 184.454471][ T9224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.507964][ T9222] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.535605][ T9224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.595330][ T9235] chnl_net:caif_netlink_parms(): no params data found [ 184.614386][ T9229] team0: Port device team_slave_0 added [ 184.622726][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.631586][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.640544][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.647887][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.675745][ T9224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.740210][ T9229] team0: Port device team_slave_1 added [ 184.751416][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.767092][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.796372][ T9224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.888949][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.898068][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.907870][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.915024][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.966597][ T9229] device hsr_slave_0 entered promiscuous mode [ 185.023345][ T9229] device hsr_slave_1 entered promiscuous mode [ 185.093212][ T9229] debugfs: Directory 'hsr0' with parent '/' already present! [ 185.101094][ T9226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.147776][ T9231] team0: Port device team_slave_0 added [ 185.161604][ T9231] team0: Port device team_slave_1 added [ 185.169065][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.176578][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.187778][ T9235] device bridge_slave_0 entered promiscuous mode [ 185.199779][ T9235] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.208696][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.216683][ T9235] device bridge_slave_1 entered promiscuous mode [ 185.229751][ T9226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.276479][ T9226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.316011][ T9226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.386940][ T9235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.405226][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.423356][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.433256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.442075][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.450781][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.459485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.469520][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.484099][ T9235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.526615][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.538014][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.547870][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.556670][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.628334][ T9231] device hsr_slave_0 entered promiscuous mode [ 185.684041][ T9231] device hsr_slave_1 entered promiscuous mode [ 185.723182][ T9231] debugfs: Directory 'hsr0' with parent '/' already present! [ 185.735799][ T9222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.756438][ T9235] team0: Port device team_slave_0 added [ 185.765870][ T9235] team0: Port device team_slave_1 added [ 185.787630][ T9229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 185.907294][ T9235] device hsr_slave_0 entered promiscuous mode [ 185.953590][ T9235] device hsr_slave_1 entered promiscuous mode [ 185.984135][ T9235] debugfs: Directory 'hsr0' with parent '/' already present! [ 185.993556][ T9229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.056654][ T9229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.145743][ T9229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.184666][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.192696][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.259362][ T9222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.270561][ T9235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.329858][ T9226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.339070][ T9231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.366021][ T9231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.430427][ T9235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 186.485157][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.494128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.503594][ T9231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.565897][ T9235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.639105][ T9226] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.649913][ T9231] netdevsim netdevsim4 netdevsim3: renamed from eth3 23:13:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x5000000000020a42, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/dsp\x00', 0x0) ftruncate(r1, 0x40007) sendfile(r0, r1, 0x0, 0x40fffffffd) close(r0) [ 186.696486][ T9224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.708276][ T9235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.834207][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.849172][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.859123][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.867193][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.878195][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.887585][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.897408][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.904904][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.912891][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.923980][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.941582][ T9224] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.962796][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.971180][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.979974][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.018594][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.029948][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.039278][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.046854][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.056425][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.068184][ T2724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.105270][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.114454][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.122559][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.132794][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.141729][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.148915][ T9237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.157513][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.166991][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.175999][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.185218][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.214004][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.238681][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.248230][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.257456][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.269408][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.282531][ T9226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.295198][ T9226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.320688][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.330256][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.340283][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.363554][ T9229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.394966][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.405683][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.414433][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.423637][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.435110][ T9229] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.449424][ T9235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.464340][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.480755][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.489589][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.498915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.507678][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.515907][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.526904][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.535736][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.543435][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.554818][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.563034][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.573029][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.587257][ T9226] 8021q: adding VLAN 0 to HW filter on device batadv0 23:13:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x5000000000020a42, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/dsp\x00', 0x0) ftruncate(r1, 0x40007) sendfile(r0, r1, 0x0, 0x40fffffffd) close(r0) [ 187.604942][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.634028][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.646640][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.654161][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.663941][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.673634][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.682409][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.703769][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.712567][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.720091][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.738031][ T9224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.756071][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.764948][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.775353][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.785216][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.792917][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.801556][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.850150][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.864283][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.875057][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.888540][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.897536][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.906462][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.916390][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.930076][ T9235] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.957150][ T9224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.967123][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.000405][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.030238][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.039446][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.047698][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.071379][ C1] hrtimer: interrupt took 70943 ns [ 188.100530][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.110829][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.121373][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.130577][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.141475][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.157017][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.168686][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.203485][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.210898][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.228896][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.238396][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 23:13:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 188.248882][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.256919][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.265400][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.274522][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.298560][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.308704][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.317672][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.332183][ T9229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.379693][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.414662][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.449243][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.484069][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 23:14:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 188.503057][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.521516][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.532229][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 23:14:00 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x5000000000020a42, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/dsp\x00', 0x0) ftruncate(r1, 0x40007) sendfile(r0, r1, 0x0, 0x40fffffffd) close(r0) 23:14:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 188.555013][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.619856][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.649564][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.693189][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.723752][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 23:14:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 188.825477][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.846531][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.863370][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.884264][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.904612][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.926430][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 23:14:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 188.974121][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.014076][ T9235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.037025][ T9229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.086074][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.096288][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.116495][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 23:14:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) [ 189.185183][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.194741][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.218523][ T9235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.572675][ T9295] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:14:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x8) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) 23:14:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 23:14:01 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a}) 23:14:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 23:14:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x5000000000020a42, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/dsp\x00', 0x0) ftruncate(r1, 0x40007) sendfile(r0, r1, 0x0, 0x40fffffffd) close(r0) 23:14:01 executing program 4: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'rose0\x00'}) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000180)={'bridge0\x00 \x01\x00', 0x1}) 23:14:01 executing program 4: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'rose0\x00'}) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000180)={'bridge0\x00 \x01\x00', 0x1}) 23:14:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x8) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) 23:14:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 23:14:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 23:14:01 executing program 4: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'rose0\x00'}) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000180)={'bridge0\x00 \x01\x00', 0x1}) 23:14:01 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a}) 23:14:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x8) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) 23:14:01 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7a}) 23:14:02 executing program 3: r0 = socket(0x8000000000000010, 0x802, 0x0) write(r0, &(0x7f0000000040)="1b000000200005fb006b000420edea20021900080110b5000010ff", 0x1b) 23:14:02 executing program 4: r0 = socket(0xa, 0x802, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000001740)) 23:14:02 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 23:14:02 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x60}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 23:14:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 23:14:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 23:14:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, 0x0, &(0x7f0000012ffc)) 23:14:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000240)=0x3ff, 0xff41) 23:14:02 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:02 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '/dev/fuse\x00'}) dup3(r0, r1, 0x0) 23:14:02 executing program 4: r0 = open(&(0x7f0000000040)='.\x00', 0x40880, 0x0) getdents64(r0, &(0x7f0000000140)=""/189, 0xbd) 23:14:02 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227b, &(0x7f0000000200)) 23:14:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$vcsn(0x0, 0x0, 0x20000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0xfffffffffffffffe) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1c7cd00fd5b9fd97, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x6, 0x74, 0xfff}, 'syz1\x00', 0x45}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x40, @loopback, 0x3}, 0x8, [0x9, 0x748960eb, 0xffff, 0x1e, 0x1ff, 0x8, 0x0, 0x2]}, 0x5c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 23:14:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000240)='./control\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x200) rmdir(&(0x7f0000000080)='./control\x00') 23:14:02 executing program 4: creat(&(0x7f0000000040)='./bus\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x1, 0x0) 23:14:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '/dev/fuse\x00'}) dup3(r0, r1, 0x0) 23:14:03 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 23:14:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000240)='./control\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x200) rmdir(&(0x7f0000000080)='./control\x00') 23:14:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0", 0x4) 23:14:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '/dev/fuse\x00'}) dup3(r0, r1, 0x0) 23:14:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000240)='./control\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x200) rmdir(&(0x7f0000000080)='./control\x00') 23:14:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '/dev/fuse\x00'}) dup3(r0, r1, 0x0) 23:14:03 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}]}) 23:14:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 23:14:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000240)='./control\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x200) rmdir(&(0x7f0000000080)='./control\x00') 23:14:03 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:03 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:14:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 23:14:04 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:04 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80001, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:14:04 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 23:14:04 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:04 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 23:14:05 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:05 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:14:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:05 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:05 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:05 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() [ 193.931560][ T9505] kvm: pic: non byte read [ 193.974364][ T9505] kvm: pic: non byte write [ 194.025946][ T9505] kvm: pic: single mode not supported [ 194.026164][ T9505] kvm: pic: non byte read [ 194.110786][ T9505] kvm: pic: non byte write [ 194.150929][ T9505] kvm: pic: non byte read [ 194.198881][ T9505] kvm: pic: non byte write [ 194.224318][ T9505] kvm: pic: non byte read [ 194.261691][ T9505] kvm: pic: non byte write 23:14:05 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:05 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) pipe(&(0x7f0000000040)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.syz\x00') ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, 0x0) unshare(0x40000000) 23:14:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:06 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000340)) lstat(&(0x7f0000000280)='./file0\x00', 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)=0x0) keyctl$chown(0x4, 0x0, 0x0, r4) getegid() fcntl$getown(r1, 0x9) getgid() r5 = getuid() setreuid(0x0, r5) lstat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)) r6 = getuid() setreuid(0x0, r6) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) keyctl$get_persistent(0x10, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)) getresgid(&(0x7f0000000400), &(0x7f0000000540), 0x0) getpgrp(0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) getpid() fstat(0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x50c00, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getuid() 23:14:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 195.054302][ T9534] IPVS: ftp: loaded support on port[0] = 21 23:14:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:06 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:14:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:06 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x1}, 0x60) 23:14:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 195.584802][ T9571] Dead loop on virtual device ip6_vti0, fix it urgently! [ 195.600948][ T9567] IPVS: ftp: loaded support on port[0] = 21 [ 195.713834][ T9571] syz-executor.1 (9571) used greatest stack depth: 21600 bytes left [ 195.776637][ T9572] kvm: pic: non byte read [ 195.788546][ T9576] kvm: pic: non byte read [ 195.805012][ T9572] kvm: pic: non byte write [ 195.818710][ T9576] kvm: pic: non byte write 23:14:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:07 executing program 1: syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0xffffffff}}, 0x10) [ 195.824870][ T9572] kvm: pic: single mode not supported [ 195.825066][ T9572] kvm: pic: non byte read [ 195.840810][ T9576] kvm: pic: single mode not supported [ 195.840988][ T9576] kvm: pic: non byte read [ 195.863263][ T9572] kvm: pic: non byte write [ 195.868020][ T9576] kvm: pic: non byte write [ 195.880811][ T9576] kvm: pic: non byte read [ 195.886834][ T9572] kvm: pic: non byte read [ 195.901602][ T9572] kvm: pic: non byte write [ 195.907747][ T9576] kvm: pic: non byte write [ 195.930177][ T21] tipc: TX() has been purged, node left! 23:14:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) pipe(&(0x7f0000000040)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.syz\x00') ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, 0x0) unshare(0x40000000) 23:14:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:14:08 executing program 1: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)=""/72) 23:14:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0xa2a33faffb2f4d2b}) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000040)) 23:14:08 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f00000007c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:14:08 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x188, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000000)={0x1, 0x20019}) [ 197.380558][ T9606] ================================================================== [ 197.388937][ T9606] BUG: KASAN: vmalloc-out-of-bounds in kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.397630][ T9606] Write of size 4 at addr ffffc9000d13d050 by task syz-executor.1/9606 [ 197.405865][ T9606] [ 197.408216][ T9606] CPU: 0 PID: 9606 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 197.416955][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.427131][ T9606] Call Trace: [ 197.430470][ T9606] dump_stack+0x197/0x210 [ 197.434829][ T9606] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.440504][ T9606] print_address_description.constprop.0.cold+0x5/0x30b [ 197.447450][ T9606] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.453101][ T9606] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.458916][ T9606] __kasan_report.cold+0x1b/0x41 [ 197.463870][ T9606] ? kvm_dev_ioctl_get_cpuid+0xe1/0xb0b [ 197.469483][ T9606] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.476780][ T9606] kasan_report+0x12/0x20 [ 197.481126][ T9606] __asan_report_store4_noabort+0x17/0x20 [ 197.486869][ T9606] kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.492346][ T9606] ? kvm_vcpu_ioctl_get_cpuid2+0x160/0x160 [ 197.498166][ T9606] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 197.504433][ T9606] ? _copy_from_user+0x12c/0x1a0 [ 197.509389][ T9606] kvm_arch_dev_ioctl+0x300/0x4b0 [ 197.509415][ T9606] ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0 [ 197.509443][ T9606] kvm_dev_ioctl+0x127/0x17d0 [ 197.509461][ T9606] ? ksys_dup3+0x3e0/0x3e0 [ 197.509487][ T9606] ? get_old_timespec32+0x200/0x200 [ 197.530758][ T9606] ? kvm_put_kvm+0xcc0/0xcc0 [ 197.530781][ T9606] ? tomoyo_file_ioctl+0x23/0x30 [ 197.530798][ T9606] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 197.530812][ T9606] ? security_file_ioctl+0x8d/0xc0 [ 197.530845][ T9606] __ia32_compat_sys_ioctl+0x22d/0x5c0 [ 197.530863][ T9606] ? kvm_put_kvm+0xcc0/0xcc0 [ 197.551809][ T9606] do_fast_syscall_32+0x27b/0xe16 [ 197.551831][ T9606] entry_SYSENTER_compat+0x70/0x7f [ 197.551844][ T9606] RIP: 0023:0xf7f67a39 [ 197.551860][ T9606] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 197.551868][ T9606] RSP: 002b:00000000f5d630cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 197.551881][ T9606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008ae09 [ 197.551898][ T9606] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.625408][ T9606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.631026][ T9611] IPVS: ftp: loaded support on port[0] = 21 [ 197.633401][ T9606] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 197.633409][ T9606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.633428][ T9606] [ 197.633432][ T9606] [ 197.633437][ T9606] Memory state around the buggy address: [ 197.633452][ T9606] ffffc9000d13cf00: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 197.633464][ T9606] ffffc9000d13cf80: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 197.633475][ T9606] >ffffc9000d13d000: 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 [ 197.633481][ T9606] ^ [ 197.633491][ T9606] ffffc9000d13d080: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 197.633499][ T9606] ffffc9000d13d100: f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 [ 197.633504][ T9606] ================================================================== [ 197.633508][ T9606] Disabling lock debugging due to kernel taint [ 197.643856][ T9606] Kernel panic - not syncing: panic_on_warn set ... [ 197.650442][ T4080] kobject: 'loop4' (00000000792fcb41): kobject_uevent_env [ 197.655442][ T9606] CPU: 0 PID: 9606 Comm: syz-executor.1 Tainted: G B 5.4.0-syzkaller #0 [ 197.655449][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.655453][ T9606] Call Trace: [ 197.655475][ T9606] dump_stack+0x197/0x210 [ 197.655495][ T9606] panic+0x2e3/0x75c 23:14:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) pipe(&(0x7f0000000040)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.syz\x00') ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, 0x0) unshare(0x40000000) [ 197.657826][ T21] kobject: 'erspan0' (000000004f31395a): kobject_cleanup, parent 00000000daaaf612 [ 197.660128][ T9606] ? add_taint.cold+0x16/0x16 [ 197.671571][ T21] kobject: 'erspan0' (000000004f31395a): calling ktype release [ 197.673788][ T9606] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.673805][ T9606] ? preempt_schedule+0x4b/0x60 [ 197.673820][ T9606] ? ___preempt_schedule+0x16/0x18 [ 197.673834][ T9606] ? trace_hardirqs_on+0x5e/0x240 [ 197.673855][ T9606] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.673867][ T9606] end_report+0x47/0x4f [ 197.673886][ T9606] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.685591][ T4080] kobject: 'loop4' (00000000792fcb41): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 197.689993][ T9606] __kasan_report.cold+0xe/0x41 [ 197.690010][ T9606] ? kvm_dev_ioctl_get_cpuid+0xe1/0xb0b [ 197.690029][ T9606] ? kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.698386][ T21] kobject: 'erspan0': free name [ 197.704732][ T9606] kasan_report+0x12/0x20 [ 197.704747][ T9606] __asan_report_store4_noabort+0x17/0x20 [ 197.704762][ T9606] kvm_dev_ioctl_get_cpuid+0xad7/0xb0b [ 197.704778][ T9606] ? kvm_vcpu_ioctl_get_cpuid2+0x160/0x160 [ 197.704795][ T9606] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 197.704808][ T9606] ? _copy_from_user+0x12c/0x1a0 [ 197.704829][ T9606] kvm_arch_dev_ioctl+0x300/0x4b0 [ 197.850828][ T9616] kobject: 'nfs_client' (000000007b83975f): kobject_add_internal: parent: 'net', set: 'nfs' [ 197.851954][ T9606] ? kvm_vm_ioctl_check_extension+0x3d0/0x3d0 [ 197.851975][ T9606] kvm_dev_ioctl+0x127/0x17d0 [ 197.851988][ T9606] ? ksys_dup3+0x3e0/0x3e0 [ 197.852012][ T9606] ? get_old_timespec32+0x200/0x200 [ 197.869333][ T9616] kobject: 'nfs_client' (000000007b83975f): kobject_uevent_env [ 197.872510][ T9606] ? kvm_put_kvm+0xcc0/0xcc0 [ 197.872528][ T9606] ? tomoyo_file_ioctl+0x23/0x30 [ 197.872544][ T9606] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 197.872554][ T9606] ? security_file_ioctl+0x8d/0xc0 [ 197.872580][ T9606] __ia32_compat_sys_ioctl+0x22d/0x5c0 [ 197.891165][ T9616] kobject: 'nfs_client' (000000007b83975f): fill_kobj_path: path = '/fs/nfs/net/nfs_client' [ 197.895057][ T9606] ? kvm_put_kvm+0xcc0/0xcc0 [ 197.895075][ T9606] do_fast_syscall_32+0x27b/0xe16 [ 197.895090][ T9606] entry_SYSENTER_compat+0x70/0x7f [ 197.895100][ T9606] RIP: 0023:0xf7f67a39 [ 197.895115][ T9606] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 197.895121][ T9606] RSP: 002b:00000000f5d630cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 197.895132][ T9606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008ae09 [ 197.895139][ T9606] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.895145][ T9606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.895151][ T9606] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 197.895158][ T9606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.896684][ T9606] Kernel Offset: disabled [ 198.073605][ T9606] Rebooting in 86400 seconds..