[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 96.654080] audit: type=1800 audit(1552574696.704:25): pid=10816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 96.673273] audit: type=1800 audit(1552574696.714:26): pid=10816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 96.692694] audit: type=1800 audit(1552574696.724:27): pid=10816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.151' (ECDSA) to the list of known hosts. 2019/03/14 14:45:12 fuzzer started 2019/03/14 14:45:17 dialing manager at 10.128.0.26:45521 2019/03/14 14:45:17 syscalls: 1 2019/03/14 14:45:17 code coverage: enabled 2019/03/14 14:45:17 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/14 14:45:17 extra coverage: extra coverage is not supported by the kernel 2019/03/14 14:45:17 setuid sandbox: enabled 2019/03/14 14:45:17 namespace sandbox: enabled 2019/03/14 14:45:17 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/14 14:45:17 fault injection: enabled 2019/03/14 14:45:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/14 14:45:17 net packet injection: enabled 2019/03/14 14:45:17 net device setup: enabled 14:48:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) syzkaller login: [ 295.594024] IPVS: ftp: loaded support on port[0] = 21 [ 295.760874] chnl_net:caif_netlink_parms(): no params data found [ 295.835448] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.842037] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.850800] device bridge_slave_0 entered promiscuous mode [ 295.861833] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.868494] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.877122] device bridge_slave_1 entered promiscuous mode [ 295.913819] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 295.926862] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 295.960460] team0: Port device team_slave_0 added [ 295.969160] team0: Port device team_slave_1 added [ 296.038699] device hsr_slave_0 entered promiscuous mode [ 296.182840] device hsr_slave_1 entered promiscuous mode [ 296.463913] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.470514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.478030] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.484669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.566795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.588605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.599168] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.608299] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.619443] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 296.640698] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.658571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.667475] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.674117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.727951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.736302] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.742893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.752836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.762008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.770845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.784339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.792584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.800802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.814140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.858304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.014776] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 14:48:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) dup3(r1, r2, 0x0) 14:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) dup3(r1, r2, 0x0) 14:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) dup3(r1, r2, 0x0) 14:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xa, 0xffffffffffffffff) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000280)=@v2, 0x14, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 14:48:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 300.017471] IPVS: ftp: loaded support on port[0] = 21 14:48:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) [ 300.250562] chnl_net:caif_netlink_parms(): no params data found [ 300.405658] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.412350] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.420733] device bridge_slave_0 entered promiscuous mode 14:48:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) [ 300.448759] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.455439] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.464174] device bridge_slave_1 entered promiscuous mode [ 300.534323] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 300.547138] bond0: Enslaving bond_slave_1 as an active interface with an up link 14:48:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) [ 300.594151] team0: Port device team_slave_0 added [ 300.603302] team0: Port device team_slave_1 added [ 300.677764] device hsr_slave_0 entered promiscuous mode [ 300.723842] device hsr_slave_1 entered promiscuous mode 14:48:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300), 0x10) dup3(r1, r2, 0x0) [ 300.949239] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.955866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.963203] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.969772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.134937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.169746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.183768] bridge0: port 1(bridge_slave_0) entered disabled state 14:48:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300), 0x10) dup3(r1, r2, 0x0) [ 301.206670] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.229085] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 301.254335] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.280035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.290025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.298239] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.304830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.360346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.370289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.384359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.393532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.402736] bridge0: port 2(bridge_slave_1) entered blocking state 14:48:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300), 0x10) dup3(r1, r2, 0x0) [ 301.409244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.417244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.426584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.435580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.444447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.453034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.461950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.470569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.478803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.487495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.495772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.549194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.623395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.631559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 14:48:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(0xffffffffffffffff, r2, 0x0) 14:48:22 executing program 1: mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x100032, 0xffffffffffffffff, 0x0) 14:48:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(0xffffffffffffffff, r2, 0x0) 14:48:22 executing program 1: getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) close(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) 14:48:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(0xffffffffffffffff, r2, 0x0) [ 302.313497] hrtimer: interrupt took 32172 ns 14:48:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(r0, r2, 0x0) 14:48:22 executing program 1: getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) close(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) 14:48:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(r0, r2, 0x0) 14:48:22 executing program 1: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 14:48:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(r0, r2, 0x0) 14:48:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000028000/0x2000)=nil}) 14:48:23 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(r0, r2, 0x0) 14:48:23 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000000b380)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000000b3c0)={0x1, [0x0]}, &(0x7f000000b400)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f000000b440)={r2, 0x4}, 0x8) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x42000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0x7, 0xeaf782}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) 14:48:23 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(r0, r2, 0x0) [ 303.175388] QAT: Invalid ioctl [ 303.196164] QAT: Invalid ioctl 14:48:23 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(r0, r2, 0x0) 14:48:23 executing program 1: ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000080)) socket$l2tp(0x18, 0x1, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000000c0)) 14:48:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:23 executing program 1: syz_execute_func(&(0x7f0000000000)="cd80dcc3c48179e7b86f3c286df40fd39d0000000000b0c421a5d9c4c1b65d46a3690000000001362e430f615fbaebeb470f29870b000000c481a1666a0c10920c0008800000e2c481c653650fcdc4e3a95ff665be3c3b4d4d408048647c6f450f585a5266f247adc4a1fd28d29d7d2f6745d00fc401fa6f4c6cd50a1ae3104c654c65c161fc4d9604047678de") 14:48:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001040)='net/tcp6\x00') read$FUSE(r0, &(0x7f0000000000), 0xffffffffffffffc9) read$FUSE(r0, 0x0, 0x191) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000001000)=0x3) 14:48:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:23 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) sendfile(r2, r4, &(0x7f0000000000), 0x800000bf) 14:48:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(r0, r2, 0x0) 14:48:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(r0, r2, 0x0) 14:48:24 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x6, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x10001, 0x200000) socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDGKBLED(r0, 0x4004510d, &(0x7f0000000040)) 14:48:24 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) dup3(r0, r2, 0x0) 14:48:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300), 0x10) dup3(r1, r2, 0x0) 14:48:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300), 0x10) dup3(r1, r2, 0x0) 14:48:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300), 0x10) dup3(r1, r2, 0x0) 14:48:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:26 executing program 1: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 14:48:26 executing program 1: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 14:48:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:26 executing program 1: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 14:48:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:26 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:26 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0), 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:26 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x33, 0x3b, 0x13, 0x1a, 0xa, 0x7, 0x1, 0x4, 0xffffffffffffffff}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r1) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x10000}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x80000000, 0x10}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x9}, 0x8) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x20000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) r4 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x101, 0xa4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000300)={'nlmon0\x00', {0x2, 0x4e21, @empty}}) ioctl$VT_RELDISP(r3, 0x5605) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000340)={@broadcast, @empty, @multicast2}, 0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000380)={0x4, @time={0x0, 0x989680}, 0x1, {0x80, 0x10001}, 0x7112, 0x3, 0xc92f}) fcntl$setown(r3, 0x8, r1) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000400)=0x3, 0x4) r5 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r6 = request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='trusted.overlay.redirect\x00', 0x0) keyctl$search(0xa, r5, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)={'syz', 0x2}, r6) syz_open_dev$vivid(&(0x7f0000000600)='/dev/video#\x00', 0x0, 0x2) unlinkat(r4, &(0x7f0000000640)='./file0\x00', 0x200) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000680)) clock_settime(0x7, &(0x7f00000006c0)={0x77359400}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000700)="fddafbc62a543818e218b65334b3c599", 0x10) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000740), &(0x7f0000000780)=0x4) getsockopt$netlink(r4, 0x10e, 0xd, &(0x7f00000007c0)=""/86, &(0x7f0000000840)=0x56) r7 = shmget$private(0x0, 0x4000, 0x30, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000880)=""/245) 14:48:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0), 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:27 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0), 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) [ 307.722475] IPVS: ftp: loaded support on port[0] = 21 14:48:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) [ 308.063000] chnl_net:caif_netlink_parms(): no params data found 14:48:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 308.231368] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.238150] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.246703] device bridge_slave_0 entered promiscuous mode [ 308.260322] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.267042] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.275989] device bridge_slave_1 entered promiscuous mode [ 308.338992] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 308.367993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 308.418639] team0: Port device team_slave_0 added [ 308.451431] team0: Port device team_slave_1 added [ 308.617452] device hsr_slave_0 entered promiscuous mode [ 308.742874] device hsr_slave_1 entered promiscuous mode [ 308.916628] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.923273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.930448] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.937098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.023418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.045242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.056178] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.065168] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.079152] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 309.101672] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.117263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.126326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.134526] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.141025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.199608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.209442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.224097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.232889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.241238] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.247812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.256944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.266309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.276062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.284997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.293889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.302841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.311630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.320128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.328928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.337359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.353625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.361691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.391669] 8021q: adding VLAN 0 to HW filter on device batadv0 14:48:29 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x33, 0x3b, 0x13, 0x1a, 0xa, 0x7, 0x1, 0x4, 0xffffffffffffffff}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r1) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x10000}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x80000000, 0x10}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x9}, 0x8) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x20000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) r4 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x101, 0xa4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000300)={'nlmon0\x00', {0x2, 0x4e21, @empty}}) ioctl$VT_RELDISP(r3, 0x5605) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000340)={@broadcast, @empty, @multicast2}, 0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000380)={0x4, @time={0x0, 0x989680}, 0x1, {0x80, 0x10001}, 0x7112, 0x3, 0xc92f}) fcntl$setown(r3, 0x8, r1) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000400)=0x3, 0x4) r5 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r6 = request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='trusted.overlay.redirect\x00', 0x0) keyctl$search(0xa, r5, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)={'syz', 0x2}, r6) syz_open_dev$vivid(&(0x7f0000000600)='/dev/video#\x00', 0x0, 0x2) unlinkat(r4, &(0x7f0000000640)='./file0\x00', 0x200) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000680)) clock_settime(0x7, &(0x7f00000006c0)={0x77359400}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000700)="fddafbc62a543818e218b65334b3c599", 0x10) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000740), &(0x7f0000000780)=0x4) getsockopt$netlink(r4, 0x10e, 0xd, &(0x7f00000007c0)=""/86, &(0x7f0000000840)=0x56) r7 = shmget$private(0x0, 0x4000, 0x30, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000880)=""/245) 14:48:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:29 executing program 1: syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 14:48:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:29 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x33, 0x3b, 0x13, 0x1a, 0xa, 0x7, 0x1, 0x4, 0xffffffffffffffff}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r1) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x10000}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x80000000, 0x10}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x9}, 0x8) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x20000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) r4 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x101, 0xa4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000300)={'nlmon0\x00', {0x2, 0x4e21, @empty}}) ioctl$VT_RELDISP(r3, 0x5605) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000340)={@broadcast, @empty, @multicast2}, 0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000380)={0x4, @time={0x0, 0x989680}, 0x1, {0x80, 0x10001}, 0x7112, 0x3, 0xc92f}) fcntl$setown(r3, 0x8, r1) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000400)=0x3, 0x4) r5 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r6 = request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='trusted.overlay.redirect\x00', 0x0) keyctl$search(0xa, r5, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)={'syz', 0x2}, r6) syz_open_dev$vivid(&(0x7f0000000600)='/dev/video#\x00', 0x0, 0x2) unlinkat(r4, &(0x7f0000000640)='./file0\x00', 0x200) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000680)) clock_settime(0x7, &(0x7f00000006c0)={0x77359400}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000700)="fddafbc62a543818e218b65334b3c599", 0x10) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000740), &(0x7f0000000780)=0x4) getsockopt$netlink(r4, 0x10e, 0xd, &(0x7f00000007c0)=""/86, &(0x7f0000000840)=0x56) r7 = shmget$private(0x0, 0x4000, 0x30, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000880)=""/245) 14:48:30 executing program 1: syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 14:48:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:30 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x33, 0x3b, 0x13, 0x1a, 0xa, 0x7, 0x1, 0x4, 0xffffffffffffffff}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r1) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x10000}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x80000000, 0x10}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x9}, 0x8) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x20000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) r4 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x101, 0xa4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000300)={'nlmon0\x00', {0x2, 0x4e21, @empty}}) ioctl$VT_RELDISP(r3, 0x5605) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000340)={@broadcast, @empty, @multicast2}, 0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000380)={0x4, @time={0x0, 0x989680}, 0x1, {0x80, 0x10001}, 0x7112, 0x3, 0xc92f}) fcntl$setown(r3, 0x8, r1) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000400)=0x3, 0x4) r5 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r6 = request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='trusted.overlay.redirect\x00', 0x0) keyctl$search(0xa, r5, &(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)={'syz', 0x2}, r6) syz_open_dev$vivid(&(0x7f0000000600)='/dev/video#\x00', 0x0, 0x2) unlinkat(r4, &(0x7f0000000640)='./file0\x00', 0x200) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000680)) clock_settime(0x7, &(0x7f00000006c0)={0x77359400}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000700)="fddafbc62a543818e218b65334b3c599", 0x10) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000740), &(0x7f0000000780)=0x4) getsockopt$netlink(r4, 0x10e, 0xd, &(0x7f00000007c0)=""/86, &(0x7f0000000840)=0x56) r7 = shmget$private(0x0, 0x4000, 0x30, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000880)=""/245) 14:48:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x2000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:30 executing program 1: syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 14:48:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, 0x0) 14:48:30 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[]}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x2e565d7c36d98a1, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x87, 0x2082) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000080)=0x10000, 0x4) 14:48:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x2000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, 0x0) 14:48:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x2000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x40000) r3 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000280)={{0x2, 0x1, 0x101, 0x6, 'syz0\x00', 0x8000}, 0x2, 0x2, 0x80, r3, 0x7, 0x7, 'syz0\x00', &(0x7f0000000240)=['/dev/autofs\x00', '/dev/autofs\x00', 'security\xa7(\x00', '/dev/autofs\x00', '/dev/autofs\x00', '\x00', ':\x00'], 0x3e, [], [0x83, 0xfffffffffffffffd, 0x10000, 0x1000]}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x501000, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x200088, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000002440)=[{&(0x7f00000024c0)="a2", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x54}, 0x10) sendmmsg$inet_sctp(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 14:48:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, 0x0) 14:48:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x0, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:31 executing program 2: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0xfffffffffffffffe) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x60a3f1a3c5a5fb6f, 0x0) ioctl(r0, 0x5dc, &(0x7f0000000100)="260f61d512cc2720b76717196b0380ba8f39761cf9f0aa8dd4541b7c2b88d42b6062c17910d3d390b5e8c4ef3f1eb356c12dd8af65f094c5017f60df431175010890f76d2ce43ef1f81a4401e6419e3f85679c4f08069ed48a1a7b31043eba3f703bb8f10c820b5cc073827d52c3ff37c9db2ce389224c37b27e5e3ae04605fa1615792e68b090eef99e2d0a869f2d3ead883cb6c27b71619bec3b612ff0e40eb3fbc5cfff8a63e54a47175be633f6aeb7cf6cbefa39b338f3bdc316b78265f2058f00bb32adab0f29783312180a2cb63cc457b450d89d3f503144c52a1378bf855feceabc1c4ce477b6276107a39b2548efbcb35ee3f69f8c58105274b99a67c6998c2208b24eb546a55b26df90af4932d79634ce1cbdda3c6437977c00a61feb318121e1505ff17960b4c47a7f6fed641d59a6da01e3432a0818210c079df50b8abdea3b25b93992cc80954db6e91869eb7ae5e3090936792b5a183188e6d42b79fb02d14dab6a8040e52fb88e7098508e5ca56c756da16f501f8305d9105c6a83ab632f859f5972f7bcc178df96af533db2545b8b7f017a5fd74da1b89241bfc74566d82c0013608a9d164189c622d45429fb9bfb0efaca27b9a21473595e333cfb70f3ff9efb2cc55b86354ed25aab96cedc368d14756169620e7c9500006f70690843f7f57ac2c581f4a9180081f109c1e595c4fdaee445a6b66cf2d78e8774d315db6369281ac5843640464adc88064e3cf31d159c9420a5833adf793eed218e2fa2b6e3cfb3584b12783efba6e98abf4905b0744769593d81c9a848f253746c0d138353cdc4b2de2b7296597d5b702e17b974973affa4b6b4539c140f28cbc18db10a29c19d9144c51bb242760ea295f5f27bdb80bf9bbd10b78dbad1fa12076d794005228a34405ea1b930d18a43331153c44aa1d8d3d700d2ede19f3f4babdf389a7d771bbf60be8e3ff818a85b174e6c76018b2ddbbba255fcc8375d8d46357ea657cf6d4da40c6514aa23395f1f85933f37507a8a003bcd3a49e97025c4368cc77b0e148e74e9adaad3ad88ac262c84b4599166fe26b0e58e26b47cb6d9c06ff9a947f5fba18dea62a08f5df432cd4f8e9c5de6dddc3bb9a539506b88c280e99e2c3f14c832be8d6796b50244d6de0740f53300f71e7626f1fe8106d5747b665195ecfe90bb452565ce91e10f27caf00922e026d40453e50cfd1f17e79337ca072adddf5bcb954403e546e6beff8faa6ee56625d428c1c6c2d22ea78fc37746526c54e1745f378f277a1eee53b8e26e5c832f2ba2564d653fae3b5c482d6e360dfedd6d596924b6bb064b8bba308fe842d0f6a276d8924675132392a45ee89b18e181cc120b7331c69419c6ba33b3abeb48c71f8cd0aae5757015a7e5c24f0a3399aa48374c781b64e99c27237920c20bc8f66debdb15a140eb9275ce13fe5885c7b91b0414683aacb1fb09a5b274bb7ef3746faf9db50144c1d3cc596526cdee8ac8224164118a8c00e5e63964f80efe148da977d6af538d6706256c4d19d6fdbab8f882ecc78f2672ef8bc7bb0a4063ff7931a5472737fdf35605b525032e5a313da5aa0b459a2fe8862666248654e0a3bffd84df0674bd42d26875eea2468d3e98bf70e6a1ffc169bbb867d8c827bb99d5ae1ff629e0d819ce935b61cc65c22948e20acec8e4bfbc09ac8b5fe6e3cd47fe82230dbdc0cbcb2f164c47e19a12036e87e73bf34588ec21c5279a50647798a11d8922c200eb978f2bce27acf3b00ed3fc60ea71641647fb59daf6161455d4727d1f371f66fc0328e7d202b2bb3f83e4b6cea96a54995993ee8d1c80755a11f595d7a76a6503e40f894fdb301b134d61c114bb03c9ac67fa33ecdef966043e0453237c324cd375700aab6ff1c08a0d281c1d608459273bf0b24c98d2ce2f8f21b71f32d256b6dbefa664872b04e9abf574d332318ad88c514a38837592cbb7171a82e6c5ead37f540ee8e70e24801fb88830436d6d0b7345173e53f5e33cc13f90dde70c92fd436f912de23e19bca798656a641b8fae69fbdeba2652d588a2501ce75db3d5e2dfd4f13fc229ee0eab26594eb852c1a611b2ed16dbf2507f792842b0a902b617b793b0899ee0a2d0cb79157cc1b2ea7b0a86e3e4b0960877e03a7553ad50b01251a44387492c23123341cbe744eddb6d478ee31761ebf58b35265a8e61f0e068bdeb384c75b89857dbde07a04bd830fa1cabc9bc02861c63db6dee92bea1793ac10edff63ce82c00ae873ba09c979635709c9383cb32fc88817b14f73202c544b9b0bec54bf15896e9ab26cb886d7f08b1e49558d843a9f85e1aa4128833764bac59aab05f50631c94da597e947051eab9658d73e1f60d390ec92f5edf96fad51198b1645829f39df5bac17ca5763304edce374c3723a21936d93dad929c1882046fb004bd54ad07c548fb272cf7e3be68063b16c6160992cea8ab39552d1003797a27dbb822808e1738992951a8c420d36ffb8951c69b3ca57a990ba6a18a034a9de245b0165932c0c344441b92106d1cfe2fa36d2cfa6b10b665d9a505b8a69c5dda2af9fbfdf8fabd0e9682a778cc898312d29cd92f31f9f8672a634cc3c8894879f168f6372b36d7ced90323b7c0361be9d50c503e00722ca673bf0293995e586f96368671806d3749bd62879c1ed8a83edb45c14b698b7e83cd36ed7063173b347089f456f75a1f2e5f1652dfdd46df4689a9c555a220e7fdd5b1e044c65bc310fd64a1811a612ae690e338be36c6c4e54a37265883bfacd9f34efc2c0ef49333bf773c0d4e0eabac70de1c74a5d44fa83479501f651ee0cbe1ec17cb621277ee2224ea97294b56d9eea6c339834890b97bd19b5f41cda7158136e4a60790649cdec76a8243d40be5fd273550f4fe29580897859efc82dcaaa2f7f174ef420e3ef2cd5c3ba5916a041d2c66abca598a73b61d4a7b76213d6db79939be30603a0cb1b33faafbab0e7529dc4dc8ce4f6c2c2987706e1865ac2a7b29b43609657aa23202306271423e13eb609a70db284170d0812b12a6a6c8c6abad42ef5a0911f4b393de182747931fcea567e78c0ee1f736f7a657316548b1ed008f8da1ec25d58272d6c603295c889a6d4716b562ee47dc2f612a029575221993a87d77e78489313c8fbc412ee5786261cd04def389ec0c0221346b68b2bd35a4546820fe7fff0784dd6cb43f775f5f523d0185c8a0ead0183123a6f27bb5b885a0984a1cfaf511a4c53954fb8e24bbf76ae993d6c7b0d4016a84b91d12b8779a3fb85463af2d165c448d64457d04d79adaafdcf57d240408d6ee094e3da3594b3c69254581662cd99dd893afbb66bf605d59929f5bc35d774f7b5076441a1ccb6651126c31b1dd3fe1a22edba9f0460d3a225208941d0f5ffc9b7327a718b8f019410d38026c69cc7e230c64b55e4852260f78dd1ce4918dc30f1220afbd821a692f70d587d2602d2ed18e083321b511b850c3bcd5fbe2d2b0d6382fd0cf479d01e0750dd1857d63a0e2983adf3385a030c655202560cff288f948c0b1b3ae4fd1311c1927fa750058198e8b9712d3888432af004408a9cdda7f8d9c3d4d104097045d48d99e4f729a4b85d1d90b98f043d75f0f01442c38fd48f901d58273b72479dd26098628100eb89264ca8297940fe48da40be3a7667ca9ac45105ff1ee653dc254e49f48efa0003a60272b491d84bfb2b5fefc37c838dea63bc53c9da30665e9f63b398bc8fa93505c5b4241521b5a503cc4394963dedd250b864be837822a64604686ea6c9aa22ddd2cc5441e9ce49a97acb989b348f54549d26cf78111566fb3eacd97d038bfba2196d999d0e3387edd02b15ad09b47363b33af4b6a47c1b53e5e08fe123522197643bb30e10ddc08b77da206a875478960018ae1c88f8ad06614d9f3ad0baf40dbdf805815375e40fd115ef11c58897ed73d85136316251fd5d5c77b7f93dda9ea24d7ba57564c664c8fb6cdb19c9ce1fbf4f39f406ebbbee4983281bbf53f77df7937e341bc026c6712158849457a214521ff27ecfc2fe30ca4136884d330e923a46fb12ff0eb06623fb5b87a1347f3b515dfb1eab6cfdbacaa10a0fd028dda355f8034078c993bb1a70f3bf54cb3b06215d2dc810a70be0069da968df04322a30f5de5c3e75f20e2854a8fc15ba4f06a8086118088c1291cfed892278cdba401b092cc55dba3f6cb764745e74c8835fe3bb2a40022f6a4b08fdff13c73ca22df2c7abd858d99c94a5b6e67fbaea84ac18efcac4a231b150b24e76f85cc82ac3ebf49dd08d70867ec4aa666b7bc1dd0f098629ac245a833c8d0718b20ede792b1f8f396cbb3dae2f5d0b8992b56cc0d79b96b75bc38cc5938d10d196e9434d7c02e7994cf07c3dbe344682509b53d0028922886b572d81c93618816e163d405b858f588ab1fab3028154de0420460cd2771b5b048334d33df018e2752c69818cdc0add0f4c115deddf1d7499e45fb8eafb8d23858806ac04538cf2049aedf177ae5ac67eb669815cae4114013379c883202004c4b00a9b30482cd3930c295041796caa3953f3a77281835a1ca063316693d4e36d3bac49931050210407a9de491407d04c05b733268ead842d01998d5a92b15b13faff1fa10d046db019ddc867687d21b492ebdb2c1c4ad9bb77b12cc7eabb7cbee5e47bb52bae2779e76773e66c932337efac48535792b4127682322c661435ddd8d691841fdcfcacf4e70425134ea4d82984183d7dbd8b58fb61d95d84a0f412459d72af0bc371530b9f619dfa9eb3dbd13b2d52df253a46e6ae1ab423e6b599ed13e8005ef90cd7420ad4af1ff2c0d07959a99c395cf40c4efa7930cc060ee3eaf7ff9771072923eddbcda07e79c14f45becd1d25bc11965c4cf25397a0d99631b49a4b9dd4c96134421c02da2b42f3c36060cf2ba3b474d77b54a19f647b459651be72139b932a357e06875ea7255c36cf576414140f85df42bfff9641dfe0f311a739b43806633143c3ce40711d8999ecfd47f5b600836a58e4707fd9853a30b58d9b19a57d528921f137d10780ca6915412329affcac427ab757a196e3356749e7415146b67b5f28a034f401ec9ea7757b374af64cb79789831d14de134709dad4ca7bf4a5d8211625b54222717192cc1c4759623efd24d89e6b24243ae8366467ba69e7d749255fd93a435d4360d79b33451be89bc24402e27045c74e845d3efd36bd0af3ed4f9c767c186542ff6028b633ddf357c487cdde56d2f6e5186cc7880335b71a27c3ac9887d2f03b8b90f4b72ba07be8f9a74114832e252fc628a6ae60e81e18d0de590820bc6c73c756e44f8d8f88257789ee690214822cad62d2d3bae10618aa63c0ca6e5a6cb0965a746e457ad83949ed09c6f3ee5535cd94352d4564d9590cacbaaa5ddd1a02e92de8280f2e63b22db5ba98950cb464bc66b2b861834aa4044610b3db6f71d2e8fc9a6075fee573b814ec7342f64f15d79dc726783bb8a666856fe0eb8a4682a622e506e11555b02d894dee1070bed167661e8137e570ec265498bf0b0e576c1a847eb7cf4d1e0a5dcb678c3f5e893b2c37691f4312188580a94837f5ceeaaf7818757c6ae43863ef4f18ea0b2d1c87889cd2c7b2075f565353e96bd8e586d2c6539a2a5728600df0d5ee50cc6e889a189f89051624bd533b048bf02475ef05991fd242d7cddc1a67db5799d426bb505ecf568bb084b8bc1353579ed77bd5c1626c3ff0096702ac74e75624520f23f2f24af4cffc2a4") pipe(&(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x82401, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x4, "de7abbc41f73c22009b8bce16cc8582c0734706104a1d3f62d5fa93c424ae0558b4fbd8aac3b403d8bfc48b0f2c2e4c4c10cf69d060b50f70c36ba080108692a", "a75bf27f1793a8cb741bad7d21d2e911bf06091e19cc3647bc01916038969767", [0x9, 0x7]}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000011c0)) 14:48:31 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x0, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 311.395691] FAULT_INJECTION: forcing a failure. [ 311.395691] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 311.407829] CPU: 1 PID: 11365 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 311.414800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.424190] Call Trace: [ 311.426946] dump_stack+0x173/0x1d0 [ 311.430642] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 311.435897] should_fail+0xa19/0xb20 [ 311.439689] should_fail_alloc_page+0x212/0x290 14:48:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x0, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 311.444438] __alloc_pages_nodemask+0x4a2/0x5e30 [ 311.449320] ? save_stack_trace+0xa2/0xe0 [ 311.453537] ? __msan_poison_alloca+0x1f0/0x2a0 [ 311.458292] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 311.463742] ? ima_match_policy+0x2220/0x22d0 [ 311.468346] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 311.473622] alloc_pages_current+0x69d/0x9b0 [ 311.478207] pte_alloc_one+0x5a/0x1a0 [ 311.482089] handle_mm_fault+0x4dba/0xa4d0 [ 311.486434] __do_page_fault+0xdfd/0x1800 [ 311.490682] do_page_fault+0xe9/0x5c0 [ 311.494557] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 311.499350] ? page_fault+0x2b/0x50 [ 311.503057] page_fault+0x3d/0x50 [ 311.506631] RIP: 0010:__put_user_4+0x1c/0x30 [ 311.511101] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 fd 02 00 48 8b 9b 58 1a 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 311.530086] RSP: 0018:ffff88804bf3fb08 EFLAGS: 00010297 [ 311.535506] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 311.542914] RDX: ffff88804bf5fc00 RSI: ffffea00017bc8b0 RDI: ffff88804bf3fc00 [ 311.550232] RBP: ffff88804bf3fce0 R08: 0000000000000120 R09: ffff88804bf3fab8 [ 311.558243] R10: ffff8880d5fa5238 R11: 0000000000000000 R12: ffff888122a00450 [ 311.565548] R13: 0000000000000000 R14: ffff888056076388 R15: 0000000000000000 [ 311.572906] ? blkdev_ioctl+0x2ab8/0x55e0 [ 311.577134] ? kmsan_internal_memset_shadow+0x14c/0x430 [ 311.582554] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 311.587802] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 311.593227] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 311.598465] block_ioctl+0x16f/0x1d0 [ 311.602236] ? block_llseek+0x190/0x190 [ 311.606266] do_vfs_ioctl+0xebd/0x2bf0 [ 311.610226] ? security_file_ioctl+0x92/0x200 [ 311.614780] __se_sys_ioctl+0x1da/0x270 [ 311.618813] __x64_sys_ioctl+0x4a/0x70 [ 311.622757] do_syscall_64+0xbc/0xf0 [ 311.626645] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 311.632134] RIP: 0033:0x458079 [ 311.635371] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.654309] RSP: 002b:00007ff0c0dbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.662064] RAX: ffffffffffffffda RBX: 00007ff0c0dbac90 RCX: 0000000000458079 [ 311.669374] RDX: 0000000020000000 RSI: 000000000000127a RDI: 0000000000000003 [ 311.676763] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 311.684062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0c0dbb6d4 [ 311.691387] R13: 00000000004bf460 R14: 00000000004d0e98 R15: 0000000000000004 14:48:31 executing program 2: unshare(0x20400) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000003380)=[{&(0x7f0000000080)="f974de70c35fbc47", 0x8}, {&(0x7f00000000c0)="d08ffd2b1b969f451c3b23979aab077758a59b3ec7d33d131ae61de60fe3e39e43325b0712a60118fddf7524abf83e702107078134de0ce908c2ad64ef771afdc65dc5701fa3c79802218a6361fc69d7a69d9d3b03927d604ce567958df637e5f8907d29e2d344401646aa6cdc5bd4a68e93efce74f35bec2cc9918e9d16ce4e", 0x80}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="bcdda5b44f39216be09d4942d1ff82829d0061a8f30f069042ebf8fb1a89ddbb37b6a3a2c159706d9071967b36bbcd3237110a3fd21c0a8b931b7623f0823ba01576aa87c5696986b0166f672e2bd49a09e093636d22e8b20f5105a3c19326be3ddb470e803b628e6f994943037b5ff93e035b560404fbf74403d92c6e972a84a16486747ed620865c66ebd494981e02db3024be60e3f7ad763279691e65491027b9ea87292d307b620b0af8e91a846301d95c1228b04b6335405e72f44d2218c017e442026f8fd69a99bb394f3f3875183f8b911caf65650b85a3580c5d15a6c5a4d862", 0xe4}, {&(0x7f0000002240)="68694e2ab25d283e4c86994da56e661a381824d0", 0x14}, {&(0x7f0000002280)="2b1d5a94dc6041343546df24ff060e4d399ffbc3b70da2", 0x17}, {&(0x7f00000022c0)="a91449c58827a7ca071b361219bdf1ed2b6af564b1c687213d6cf0e7720626071f2da89550b111a60bae86079bda548730f280f3838424b489f51da496fc935d81bbf09f9da35dc0d3da0e7a5492832fb200f65c8faa69bd929f6d793ed4e102af43438b7dcf18f9fb0d42285993fb64b4dffdf37606a62ea3593c240113dd0f01bed0c1c6ab7fb725892567d21bb107db172a4c171f8792141ebb31328ea2f5695fb36fc7", 0xa5}, {&(0x7f0000002380)="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", 0x1000}], 0x9, 0x0) fcntl$setstatus(r0, 0x4, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000034c0)={'nat\x00', 0x0, 0x4, 0x22, [], 0x2, &(0x7f0000003440)=[{}, {}], &(0x7f0000003480)=""/34}, &(0x7f0000003540)=0x78) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x16, 0x200, 0x0, 0x7}}) 14:48:31 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 311.968262] FAULT_INJECTION: forcing a failure. [ 311.968262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.980162] CPU: 0 PID: 11378 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 311.987095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.996464] Call Trace: [ 311.999084] dump_stack+0x173/0x1d0 [ 312.002754] should_fail+0xa19/0xb20 [ 312.006519] should_fail_alloc_page+0x212/0x290 [ 312.011232] __alloc_pages_nodemask+0x4a2/0x5e30 [ 312.016018] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 312.021425] ? rmqueue+0xbe/0x13e0 [ 312.025024] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 312.030349] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 312.035573] kmsan_internal_alloc_meta_for_pages+0x80/0x580 [ 312.041320] kmsan_alloc_page+0x7e/0x100 [ 312.045420] __alloc_pages_nodemask+0x137b/0x5e30 [ 312.050314] ? save_stack_trace+0xa2/0xe0 [ 312.054512] ? __msan_poison_alloca+0x1f0/0x2a0 [ 312.059241] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 312.064631] ? ima_match_policy+0x2220/0x22d0 [ 312.069188] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 312.074421] alloc_pages_current+0x69d/0x9b0 [ 312.078870] pte_alloc_one+0x5a/0x1a0 [ 312.082705] handle_mm_fault+0x4dba/0xa4d0 [ 312.087026] __do_page_fault+0xdfd/0x1800 [ 312.091254] do_page_fault+0xe9/0x5c0 [ 312.095086] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 312.099771] ? page_fault+0x2b/0x50 [ 312.103426] page_fault+0x3d/0x50 [ 312.106903] RIP: 0010:__put_user_4+0x1c/0x30 [ 312.111331] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 fd 02 00 48 8b 9b 58 1a 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 312.130256] RSP: 0018:ffff88804bf8fb08 EFLAGS: 00010297 [ 312.135635] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 312.143421] RDX: ffff88804bebfc00 RSI: ffffea00017b96b0 RDI: ffff88804bf8fc00 [ 312.150711] RBP: ffff88804bf8fce0 R08: 0000000000000120 R09: ffff88804bf8fab8 [ 312.158007] R10: ffff8880d7e7b138 R11: 0000000000000000 R12: ffff888122a00450 [ 312.165290] R13: 0000000000000000 R14: ffff8880560c4588 R15: 0000000000000000 [ 312.172618] ? blkdev_ioctl+0x2ab8/0x55e0 [ 312.176826] ? kmsan_internal_memset_shadow+0x14c/0x430 [ 312.182235] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 312.187480] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 312.192895] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 312.198176] block_ioctl+0x16f/0x1d0 [ 312.201974] ? block_llseek+0x190/0x190 [ 312.206000] do_vfs_ioctl+0xebd/0x2bf0 [ 312.209942] ? security_file_ioctl+0x92/0x200 [ 312.214561] __se_sys_ioctl+0x1da/0x270 [ 312.218570] __x64_sys_ioctl+0x4a/0x70 [ 312.222485] do_syscall_64+0xbc/0xf0 [ 312.226250] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 312.231456] RIP: 0033:0x458079 [ 312.234664] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.253581] RSP: 002b:00007ff0c0dbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.261350] RAX: ffffffffffffffda RBX: 00007ff0c0dbac90 RCX: 0000000000458079 14:48:32 executing program 2: r0 = memfd_create(&(0x7f0000000840)='/dev/keychord\x00\xc7\xba\xb3\x9ba\x1eR\xf2\t\xcax\x00%\xd9\xd0f\xc5U\xd5\xacL\x0f\xd7\x96\x15\x92\xf6<\xd9\xad\x8ck\n\x05=\x9eb\xb0_\xdf\xef\x165-\x14\xa3\fY9\xae\xafA\xaal\xa5\xa6\xbd\x05\x00\x00(V;J\xeap\x05\x00H\xfe\xbcF\xde\x8c\x05\aDzy#\x95\xa4c\x958\xe7\xf0;k~PoW\xe3J\xa5\x8d\x93\xcbc\x06\x99\x90\xbe\xda5v\xf0\x00\xf4a\x9d\a\xbfd\xb5\xacR\x8a6E\x01r\xd9W\xc9\xb4h\x95\x8f \xd0\x98X\xf4\xf7\xc6\x8cBd\x95\x8b\xeb\xbd\x80$\xdfM8H\x11\x8a\xf3\xd1\xf2\xa7xc\xf1\xe6\xd6\xdfc\xdd\xbc<\x83\xbbN\xb7\xf6&\xa7\xa7\xff=J\xc9\v\xf7mi\vw\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100, 0x800) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x4cdd, 0x4}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x53d, 0x0, 0x1f}, 0x10) ioctl$TIOCSTI(r1, 0x5412, 0xfffffffffffffffb) lseek(r0, 0x28, 0x3) [ 312.268634] RDX: 0000000020000000 RSI: 000000000000127a RDI: 0000000000000003 [ 312.276124] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 312.283492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0c0dbb6d4 [ 312.290777] R13: 00000000004bf460 R14: 00000000004d0e98 R15: 0000000000000004 14:48:32 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 312.544082] FAULT_INJECTION: forcing a failure. [ 312.544082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 312.555968] CPU: 0 PID: 11388 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 312.562907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.572274] Call Trace: [ 312.574893] dump_stack+0x173/0x1d0 [ 312.578545] should_fail+0xa19/0xb20 [ 312.582301] should_fail_alloc_page+0x212/0x290 [ 312.586991] __alloc_pages_nodemask+0x4a2/0x5e30 [ 312.591767] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 312.597159] ? rmqueue+0xbe/0x13e0 [ 312.600770] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 312.606075] kmsan_internal_alloc_meta_for_pages+0xf2/0x580 [ 312.611805] kmsan_alloc_page+0x7e/0x100 [ 312.616103] __alloc_pages_nodemask+0x137b/0x5e30 [ 312.621018] ? save_stack_trace+0xa2/0xe0 [ 312.625188] ? __msan_poison_alloca+0x1f0/0x2a0 [ 312.629895] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 312.635274] ? ima_match_policy+0x2220/0x22d0 [ 312.639823] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 312.645040] alloc_pages_current+0x69d/0x9b0 [ 312.649473] pte_alloc_one+0x5a/0x1a0 [ 312.653296] handle_mm_fault+0x4dba/0xa4d0 [ 312.657598] __do_page_fault+0xdfd/0x1800 [ 312.661796] do_page_fault+0xe9/0x5c0 [ 312.665615] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 312.670293] ? page_fault+0x2b/0x50 [ 312.675156] page_fault+0x3d/0x50 [ 312.678622] RIP: 0010:__put_user_4+0x1c/0x30 [ 312.683041] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 fd 02 00 48 8b 9b 58 1a 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 312.701953] RSP: 0018:ffff88804bfafb08 EFLAGS: 00010297 [ 312.707332] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 312.714608] RDX: ffff88804beafc00 RSI: ffffea00017bebb0 RDI: ffff88804bfafc00 [ 312.721896] RBP: ffff88804bfafce0 R08: 0000000000000120 R09: ffff88804bfafab8 [ 312.729169] R10: ffff8880d7e7b238 R11: 0000000000000000 R12: ffff888122a00450 [ 312.736453] R13: 0000000000000000 R14: ffff8880560c6388 R15: 0000000000000000 [ 312.743773] ? blkdev_ioctl+0x2ab8/0x55e0 [ 312.747962] ? kmsan_internal_memset_shadow+0x14c/0x430 [ 312.753344] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 312.758554] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 312.763962] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 312.769174] block_ioctl+0x16f/0x1d0 [ 312.772912] ? block_llseek+0x190/0x190 [ 312.776898] do_vfs_ioctl+0xebd/0x2bf0 [ 312.780824] ? security_file_ioctl+0x92/0x200 [ 312.785373] __se_sys_ioctl+0x1da/0x270 [ 312.789376] __x64_sys_ioctl+0x4a/0x70 [ 312.793275] do_syscall_64+0xbc/0xf0 [ 312.797003] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 312.802199] RIP: 0033:0x458079 [ 312.805414] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.824323] RSP: 002b:00007ff0c0dbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.832034] RAX: ffffffffffffffda RBX: 00007ff0c0dbac90 RCX: 0000000000458079 [ 312.839306] RDX: 0000000020000000 RSI: 000000000000127a RDI: 0000000000000003 [ 312.846592] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 312.854043] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0c0dbb6d4 [ 312.861316] R13: 00000000004bf460 R14: 00000000004d0e98 R15: 0000000000000004 14:48:32 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000040)={0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={r1, 0x80000, r2}) r3 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000140)={0x1}) 14:48:33 executing program 1 (fault-call:2 fault-nth:3): r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet6_int(r0, 0x29, 0x10000000d0, &(0x7f00000000c0), &(0x7f0000000140)=0xffffffffffffff0d) [ 313.090637] FAULT_INJECTION: forcing a failure. [ 313.090637] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 313.102928] CPU: 1 PID: 11399 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 313.109902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.119294] Call Trace: [ 313.121969] dump_stack+0x173/0x1d0 [ 313.125680] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.130944] should_fail+0xa19/0xb20 [ 313.134747] should_fail_alloc_page+0x212/0x290 [ 313.139488] __alloc_pages_nodemask+0x4a2/0x5e30 [ 313.144315] ? rmqueue+0xbe/0x13e0 [ 313.147912] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 313.153428] ? update_stack_state+0xa0e/0xb40 [ 313.158006] ? kernel_poison_pages+0x40/0x360 [ 313.162669] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 313.168278] ? get_page_from_freelist+0x183b/0x21f0 [ 313.173373] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.178627] alloc_pages_vma+0xd26/0x1970 [ 313.182860] shmem_alloc_and_acct_page+0x9d9/0x11b0 [ 313.188073] shmem_getpage_gfp+0x41b1/0x5ee0 [ 313.192543] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.197846] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 313.203291] ? ima_match_policy+0x2220/0x22d0 [ 313.207864] ? __msan_poison_alloca+0x1f0/0x2a0 [ 313.212593] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.217847] shmem_fault+0x53d/0x9c0 [ 313.221639] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.226915] ? shmem_destroy_callback+0x130/0x130 [ 313.231811] handle_mm_fault+0x4e6c/0xa4d0 [ 313.236154] __do_page_fault+0xdfd/0x1800 14:48:33 executing program 2: r0 = epoll_create1(0x0) r1 = dup2(r0, r0) r2 = epoll_create1(0x0) close(r0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)) setsockopt$inet6_tcp_buf(r3, 0x6, 0x20000001f, &(0x7f0000000180)="d7c21c046f4a7c9d0b8852b047ebd6a6e0818aea251640922785616642ceebc25d682badca1a8898b44052f52bf152a9c3d2d4683ae112ee13c5ca3984e5c3d69ffd4d343edf2c5b163a68522c2919e55de502084700019bd0d79a924738595cbcdb0ca4727eef2e76988e470afd05d7ca90acebb1b0d089", 0xfffffffffffffe8a) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) [ 313.240389] do_page_fault+0xe9/0x5c0 [ 313.244434] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 313.249164] ? page_fault+0x2b/0x50 [ 313.252860] page_fault+0x3d/0x50 [ 313.256388] RIP: 0010:__put_user_4+0x1c/0x30 [ 313.260847] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 fd 02 00 48 8b 9b 58 1a 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 313.280401] RSP: 0018:ffff88804bfcfb08 EFLAGS: 00010297 [ 313.285814] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 313.293131] RDX: ffff88804beafc00 RSI: ffffea00017bd7b0 RDI: ffff88804bfcfc00 [ 313.300446] RBP: ffff88804bfcfce0 R08: 0000000000000120 R09: ffff88804bfcfab8 [ 313.307769] R10: ffff8880d5fa5238 R11: 0000000000000000 R12: ffff888122a00450 [ 313.315077] R13: 0000000000000000 R14: ffff8880560c6388 R15: 0000000000000000 [ 313.322443] ? blkdev_ioctl+0x2ab8/0x55e0 [ 313.326676] ? kmsan_internal_memset_shadow+0x14c/0x430 [ 313.332107] ? kmsan_get_shadow_origin_ptr+0x70/0x490 14:48:33 executing program 2: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1f, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271c, 0x0, &(0x7f000033bffc)) [ 313.337360] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 313.342787] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.348043] block_ioctl+0x16f/0x1d0 [ 313.351992] ? block_llseek+0x190/0x190 [ 313.356030] do_vfs_ioctl+0xebd/0x2bf0 [ 313.359997] ? security_file_ioctl+0x92/0x200 [ 313.364562] __se_sys_ioctl+0x1da/0x270 [ 313.368603] __x64_sys_ioctl+0x4a/0x70 [ 313.372545] do_syscall_64+0xbc/0xf0 [ 313.376330] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 313.381561] RIP: 0033:0x458079 [ 313.384806] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.404623] RSP: 002b:00007ff0c0dbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.412397] RAX: ffffffffffffffda RBX: 00007ff0c0dbac90 RCX: 0000000000458079 [ 313.420077] RDX: 0000000020000000 RSI: 000000000000127a RDI: 0000000000000003 [ 313.427392] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 313.434710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0c0dbb6d4 14:48:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 313.442032] R13: 00000000004bf460 R14: 00000000004d0e98 R15: 0000000000000004 14:48:33 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000140)={0x0, 0x3, {0x55, 0xffffffffffffff8e, 0x3ff, {0x10000, 0x4}, {0x1, 0x4}, @period={0x5d, 0x0, 0x80000001, 0x6, 0x100, {0xffff, 0x1, 0x3f, 0x4}, 0x9, &(0x7f0000000080)=[0xcc, 0x8000, 0xfffffffffffffff7, 0x2, 0x1f, 0x6, 0x9, 0x8, 0x7]}}, {0x57, 0x100000000, 0x4, {0xbc89, 0xca}, {0xa5, 0x1}, @const={0x10000, {0x7, 0x3f, 0xffffffffffffab9f, 0xfffffffffffffffd}}}}) socket$pppoe(0x18, 0x1, 0x0) ioctl$RTC_WKALM_SET(r0, 0x80247008, &(0x7f0000000000)) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x11, 0x2c, 0x2, 0x1, 0x7, 0x3, 0x2, 0x3, 0x1}}) 14:48:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:33 executing program 1 (fault-call:2 fault-nth:4): r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:33 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x180, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff4a49ffff86dd60c5ba352c142b00fe8000000000000000000000000000aafe8000000000000000000000000000aa00000200", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) perf_event_open(&(0x7f0000000400)={0x8, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x2b) [ 313.776924] FAULT_INJECTION: forcing a failure. [ 313.776924] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 313.788792] CPU: 1 PID: 11425 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 313.795740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.805106] Call Trace: [ 313.807737] dump_stack+0x173/0x1d0 [ 313.811394] should_fail+0xa19/0xb20 [ 313.815160] should_fail_alloc_page+0x212/0x290 [ 313.819880] __alloc_pages_nodemask+0x4a2/0x5e30 [ 313.824670] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 313.830070] ? rmqueue+0xbe/0x13e0 [ 313.833652] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.839054] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.844315] kmsan_internal_alloc_meta_for_pages+0x80/0x580 [ 313.850057] kmsan_alloc_page+0x7e/0x100 [ 313.854151] __alloc_pages_nodemask+0x137b/0x5e30 [ 313.859021] ? rmqueue+0xbe/0x13e0 [ 313.862581] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 313.868051] ? update_stack_state+0xa0e/0xb40 [ 313.872584] ? kernel_poison_pages+0x40/0x360 [ 313.877123] ? get_page_from_freelist+0x183b/0x21f0 [ 313.882194] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.887419] alloc_pages_vma+0xd26/0x1970 [ 313.892060] shmem_alloc_and_acct_page+0x9d9/0x11b0 [ 313.897164] shmem_getpage_gfp+0x41b1/0x5ee0 [ 313.901592] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.906891] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 313.912274] ? ima_match_policy+0x2220/0x22d0 [ 313.916903] ? __msan_poison_alloca+0x1f0/0x2a0 [ 313.921606] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.926924] shmem_fault+0x53d/0x9c0 [ 313.930686] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 313.935907] ? shmem_destroy_callback+0x130/0x130 [ 313.940769] handle_mm_fault+0x4e6c/0xa4d0 [ 313.945085] __do_page_fault+0xdfd/0x1800 [ 313.949309] do_page_fault+0xe9/0x5c0 [ 313.953276] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 313.957963] ? page_fault+0x2b/0x50 [ 313.961614] page_fault+0x3d/0x50 [ 313.965086] RIP: 0010:__put_user_4+0x1c/0x30 [ 313.969513] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 fd 02 00 48 8b 9b 58 1a 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 313.988432] RSP: 0018:ffff88804bedfb08 EFLAGS: 00010297 [ 313.993805] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 314.001083] RDX: ffff88804b4ffc00 RSI: ffffea0001788ab0 RDI: ffff88804bedfc00 [ 314.008358] RBP: ffff88804bedfce0 R08: 0000000000000120 R09: ffff88804bedfab8 [ 314.015639] R10: ffff8880d5fa5f38 R11: 0000000000000000 R12: ffff888122a00450 [ 314.022922] R13: 0000000000000000 R14: ffff8880560c4588 R15: 0000000000000000 [ 314.030263] ? blkdev_ioctl+0x2ab8/0x55e0 [ 314.034462] ? kmsan_internal_memset_shadow+0x14c/0x430 [ 314.039848] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 314.045063] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 314.050452] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 314.055667] block_ioctl+0x16f/0x1d0 [ 314.059408] ? block_llseek+0x190/0x190 [ 314.063406] do_vfs_ioctl+0xebd/0x2bf0 [ 314.067346] ? security_file_ioctl+0x92/0x200 [ 314.071878] __se_sys_ioctl+0x1da/0x270 [ 314.075889] __x64_sys_ioctl+0x4a/0x70 [ 314.079801] do_syscall_64+0xbc/0xf0 [ 314.083547] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 314.088752] RIP: 0033:0x458079 [ 314.091962] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.110880] RSP: 002b:00007ff0c0dbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.118604] RAX: ffffffffffffffda RBX: 00007ff0c0dbac90 RCX: 0000000000458079 14:48:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 314.125888] RDX: 0000000020000000 RSI: 000000000000127a RDI: 0000000000000003 [ 314.133169] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 314.140443] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0c0dbb6d4 [ 314.148058] R13: 00000000004bf460 R14: 00000000004d0e98 R15: 0000000000000004 14:48:34 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) readv(r0, &(0x7f00000001c0), 0x10000000000000bf) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001a40)={@rand_addr, 0x0}, &(0x7f0000001a80)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001ac0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, r1}, 0xc) 14:48:34 executing program 1 (fault-call:2 fault-nth:5): r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) [ 314.373128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.426239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.448752] FAULT_INJECTION: forcing a failure. [ 314.448752] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.460588] CPU: 1 PID: 11439 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 314.467520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.476878] Call Trace: [ 314.479496] dump_stack+0x173/0x1d0 [ 314.483150] should_fail+0xa19/0xb20 [ 314.486908] should_fail_alloc_page+0x212/0x290 [ 314.491611] __alloc_pages_nodemask+0x4a2/0x5e30 [ 314.496396] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 314.501791] ? rmqueue+0xbe/0x13e0 [ 314.505371] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 314.510636] kmsan_internal_alloc_meta_for_pages+0xf2/0x580 [ 314.516374] kmsan_alloc_page+0x7e/0x100 [ 314.520467] __alloc_pages_nodemask+0x137b/0x5e30 [ 314.525340] ? rmqueue+0xbe/0x13e0 [ 314.528931] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 314.534840] ? update_stack_state+0xa0e/0xb40 [ 314.539682] ? kernel_poison_pages+0x40/0x360 [ 314.544239] ? get_page_from_freelist+0x183b/0x21f0 [ 314.549317] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 314.554546] alloc_pages_vma+0xd26/0x1970 [ 314.558753] shmem_alloc_and_acct_page+0x9d9/0x11b0 [ 314.563855] shmem_getpage_gfp+0x41b1/0x5ee0 [ 314.568283] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 314.573581] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 314.578962] ? ima_match_policy+0x2220/0x22d0 [ 314.583505] ? __msan_poison_alloca+0x1f0/0x2a0 [ 314.588201] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 314.593430] shmem_fault+0x53d/0x9c0 [ 314.597189] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 314.602413] ? shmem_destroy_callback+0x130/0x130 [ 314.607277] handle_mm_fault+0x4e6c/0xa4d0 [ 314.611591] __do_page_fault+0xdfd/0x1800 [ 314.615809] do_page_fault+0xe9/0x5c0 [ 314.619645] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 314.624336] ? page_fault+0x2b/0x50 [ 314.627988] page_fault+0x3d/0x50 [ 314.631460] RIP: 0010:__put_user_4+0x1c/0x30 [ 314.635882] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 00 fd 02 00 48 8b 9b 58 1a 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 314.654798] RSP: 0018:ffff88804bedfb08 EFLAGS: 00010297 [ 314.660170] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 314.667446] RDX: ffff88804b59fc00 RSI: ffffea0001789eb0 RDI: ffff88804bedfc00 [ 314.674735] RBP: ffff88804bedfce0 R08: 0000000000000120 R09: ffff88804bedfab8 [ 314.682028] R10: ffff8880d5fa5238 R11: 0000000000000000 R12: ffff888122a00450 [ 314.689310] R13: 0000000000000000 R14: ffff8880560c0988 R15: 0000000000000000 [ 314.696634] ? blkdev_ioctl+0x2ab8/0x55e0 [ 314.700837] ? kmsan_internal_memset_shadow+0x14c/0x430 [ 314.706237] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 314.711462] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 314.716864] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 314.722078] block_ioctl+0x16f/0x1d0 [ 314.725831] ? block_llseek+0x190/0x190 [ 314.729828] do_vfs_ioctl+0xebd/0x2bf0 [ 314.733767] ? security_file_ioctl+0x92/0x200 [ 314.738301] __se_sys_ioctl+0x1da/0x270 [ 314.742308] __x64_sys_ioctl+0x4a/0x70 [ 314.746228] do_syscall_64+0xbc/0xf0 [ 314.749971] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 314.755172] RIP: 0033:0x458079 [ 314.758380] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:48:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 314.777294] RSP: 002b:00007ff0c0dbac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.785018] RAX: ffffffffffffffda RBX: 00007ff0c0dbac90 RCX: 0000000000458079 [ 314.792303] RDX: 0000000020000000 RSI: 000000000000127a RDI: 0000000000000003 [ 314.799584] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 314.806858] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff0c0dbb6d4 [ 314.814138] R13: 00000000004bf460 R14: 00000000004d0e98 R15: 0000000000000004 14:48:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x6850db7e05b8ad97, 0x80003, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x20000000000080}, '\nL\xea\xa0]\xad\x12n\x00\x00\x00\x02\xa1V\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xd5vX\x97\x01\xa4', 0x76, 0x10000a}) close(r0) 14:48:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:35 executing program 1 (fault-call:2 fault-nth:6): r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x80, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='threaded\x00') setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:ssh_keysign_exec_t:s0\x00', 0x28, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xe440, 0x802) write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000000)) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000380)={0x2, 0x0, [0x0, 0x0, 0xc0000100]}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e23, 0xfff, @mcast1, 0x100}}}, &(0x7f0000000200)=0x84) 14:48:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x4000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000080)=""/70) 14:48:35 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8001, 0x2000) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x9, {0x1, 0x7, 0x8, 0x1b00000000}}) unshare(0x400) r1 = syz_open_dev$sg(&(0x7f0000001800)='/dev/sg#\x00', 0x0, 0x80000000002) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001780)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000001600)}, &(0x7f00000002c0)="11699365162d8c0334dec3c7cb2e3fbc25939189e805a57bfe466187b9e0eee8ad", &(0x7f0000001680)=""/225, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 14:48:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 315.628059] sd 0:0:1:0: [sg0] tag#2485 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 315.636929] sd 0:0:1:0: [sg0] tag#2485 CDB: Space [ 315.641855] sd 0:0:1:0: [sg0] tag#2485 CDB[00]: 11 69 93 65 16 2d 8c 03 34 de c3 c7 cb 2e 3f bc [ 315.650869] sd 0:0:1:0: [sg0] tag#2485 CDB[10]: 25 93 91 89 e8 05 a5 7b fe 46 61 87 b9 e0 ee e8 [ 315.659838] sd 0:0:1:0: [sg0] tag#2485 CDB[20]: ad 14:48:35 executing program 1: syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x450000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000480)=0xe8) bind$can_raw(r0, &(0x7f00000004c0)={0x1d, r1}, 0x10) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000080)={0x4, 0x9b, "70838941b30cbc433586649dc5dda722c19f2d6bf02706bdee57d790ea1bc87f461af7516267e101ec59f489b7706c3b7af6af5a012b51b678f2717003041e6b27abee7cafd7238898275920e38e4a0a26ee93c14080868be0da50bb438a31a0a1076ea28f4f3cbea4b27c0c7938d401b94accdaf8d679b09de469712487ad33f33e9ab2f62a2b8328005310a08068caeda1c6242a4e276e949b60"}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 14:48:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0), 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:35 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) munlockall() remap_file_pages(&(0x7f0000003000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0) 14:48:36 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x100) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000040)=0x2bdd) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x20810, r0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x6) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x4, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x440000, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)={'exec ', '\x00'}, 0x6) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x2, r2, 0xf, r1}, 0x10) signalfd4(r0, &(0x7f0000000240), 0x8, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0xef, "831a8cc8419e11b94baf7372ea66d0fe5e5afdd5a40c2bd40592dcef4bb3f9f34c57a3b43274a0f9577bb7c7d60a462cf6f3d624aa5121e50af2395d738245a4c25af1a946ddf915bed16c23a1049b201d8e026024dad19c45cefa072cb1765b6b688c8cd76a4cfb40cbb57477ca79e8c5f99af7ab9aa9679e41be287dd11b4c85f9c1f4f9c54401445c0ccccb32f6a1529232a55189c0082194ea5444ac8c691c3cdeeffd6ad28e9fb510dcd033ba135d8fbddd9f8a484df8b4bfb1a42538551243aa0410aa0afbfe05003ffabfe6747ee5a44cfca855022a50fe7f4bd0f132269ed7fee06ece8d3adc4d61438544"}, &(0x7f0000000380)=0xf7) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e24, 0x2f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x2, 0x0) gettid() gettid() fstatfs(r1, &(0x7f00000004c0)=""/47) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000500)=0x100, 0x4) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000540)=""/140) prctl$PR_MCE_KILL_GET(0x22) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000600)='veth1_to_bond\x00') fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x2) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rtc0\x00', 0x40, 0x0) timer_create(0x1, &(0x7f00000007c0)={0x0, 0x34, 0x1, @thr={&(0x7f0000000700)="a3276c7a4cc88ec412471100c67416f49962280d", &(0x7f0000000740)="af1d2df9450fbaf4fd30960101c3d8c6ab8236b4dd5d4122fb731d1331402a9b2c5422b58db9d0119e38a2bc63d2860877f0949ac7878e7c7eaefac5147f4169b1b55675a67946c370dbb8ebdad6a17b4ef72d0b2da9499bfa082addcd45e97219d9dedefab3beb0b6999884026b36dee0af649d5dd00d3b5ac116e7"}}, &(0x7f0000000800)=0x0) timer_delete(r5) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000840)={[], 0x2000200000, 0x9, 0x5, 0x0, 0x6, 0x0, 0x1000, [], 0x7}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) setsockopt$inet_dccp_buf(r4, 0x21, 0xe, &(0x7f0000000a00), 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x1}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 14:48:36 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000140)="952a94409c5faa460964362f7e9d26f8218e203303ab09f212abec0d2ce6f55211a461d84502d0544fe3a9b1f7185cd429471e883aa4413bafe5c651b58d249d27fb7d8d647c8d99e35c17856d9282010ca4fa847f032cc6334ec18d4bf75e1bfb995dab530e31b97ad78537eb297421ec1d7f35d3a86c1eb336bf413f86ed40309a2b40eece087995e4739c5177149f", 0x90) r1 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r1, 0x127a, &(0x7f0000000000)) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) [ 315.965920] mmap: syz-executor.2 (11484) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 14:48:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0), 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000040)={0x0, 0x2, 'client0\x00', 0x1, "74dc9091e4187116", "934760b97120a98d3637396d9b75e9d3be70c2e3ed3970f03c404e6203421217", 0x0, 0x9}) close(r1) r4 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000140)={{0x5, 0x5, 0x7, 0x7, '\x00', 0x94}, 0x1, 0x442, 0x2, r4, 0x1, 0x6, 'syz1\x00', &(0x7f0000000100)=['client0\x00'], 0x8, [], [0xfffffffffffffffe, 0x101, 0x3, 0x1]}) dup3(r0, r1, 0x80000) 14:48:36 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x20000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={r2, 0xffffffffffffffff}) 14:48:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r1, &(0x7f0000000040)=@ethernet={0x0, @random}, &(0x7f00000000c0)=0x80, 0x0) 14:48:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0), 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000000a00)={&(0x7f0000000080)=@ipx={0x4, 0x9, 0x100000001, "e846498687b5", 0x8}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)="72a2d8b49b011b6252b35673d2b6023b8d1636306bf41ed574b7e23c56a0791da25b557a8cedf985da7f0a81119c533bb1", 0x31}, {&(0x7f0000000140)="356029e98accd72e658ab0e693beeb87084ee9dde74581b54588b352104ed964e2a26547e33e4497d59b258772ce56828b8032fd736b94346d5f659dda0cb2515136d4cf92e54674cab22912431f15de61436940d9fee1b003f62e90942ca3e40be130edd8a2a75ee040eb08fcd3bda75b91e3f74cbfee30dd5a", 0x7a}, {&(0x7f00000001c0)="5e7545e8289c6a672593bb025caad3e1f86bd6afe6ecce895487c299ca6a96ca82d2c6e88ddfe86942aadded7d60ef933fd732f7a81d3f53c2801996a413e80e808ffa80068101002910a3594bdc9d21caf00c37a11536ac72da0bee10d4c92267301417d0c9b022d4d1a3d0305d374446648ec6", 0x74}, {&(0x7f0000000240)="c5e916329ccbc19c3451f7d2eef262da556f782904f6c990ec0f14b27e08e73da4b987d4391374100b3a9ea96ce53dff6e7c7015f6e1e85e9819b30f9461408c4004cc65cad8462f798579428fb767274f840ff60cb36235f229f05b03484e", 0x5f}, {&(0x7f00000002c0)="2d65fc05566b4df205db2f17d08ddd00f95f3e6773bb297888bb697974b3eee547a1e2604417ce2f217f35a688411248594cdc3068bffdef36fb7cd351108c544212f1d60416f2942e2a17ef6cd90fbaefb3038898720f606645623a05f3884098507c9b8f1c55b6b6c364dec301b0f4f755f37726eecf7e3f978c2b8d94b563d1db18a47f9eef5f324cc4c36ec9e9ddf0569850adb9a5a1c5aef3564bddeb5934f1cea03b6ade01ec43239e9db574c2b230cfd10ed6e82b254e1d28", 0xbc}, {&(0x7f0000000380)="dd55ec05888d227833599b3933df979787a3e26cb444e7b3e3ee3aaa87488fb2c5f042ccf91d7575cf491f03b237b4432341230543f6e98aceff0630893d42a75a0621935fee136048a425bb2c32d9fd7beb93efacebe92938790e2a18f4b7d35eb63fe7f1b9830a02dc6b5dcfc057f1337c1c3d08e7b7e525b1acff67", 0x7d}, {&(0x7f0000000400)="a77cc7ac41ce43ccb040873151a2e4f6d2c80dc41be8483607728f6e802f46d7f06bf3a931182d9fb34472279328dd962f9e799168a38bef125e115548d50fc09e24d4af80bb9b4d44c427c02995f5ba481fd437c27861965a35e232b192f81e71a08a2003e6773c7768ae3bd23fb5209537216e2f8fceaab633e4eb41ddf078f5dc48d5e2b91c577726a5549f29e75e8e80af37e225afec6940903d4f6a8b09729292f3417e674ee4f7060a74", 0xad}, {&(0x7f00000004c0)="8468c073293062bbd95d0fa68911fd9e5a55deefc7df2b3a82a1eef9926392b11f830a185df0da2275fa232da36ad692845025a763bdf724c7e2e6f3671763344373ad21cf50529cbe1270cc9d5b005cbe9846f58337613c5f674163668ff381bc9e887a", 0x64}, {&(0x7f0000000540)="6dbc0b44d0808245a12437c4121b86363a3be3a2a63e0e0c46d14fa95a1dec41a5276eaeeb9b4717c2ddd181d9d57f72ba109293b7de8ae8571aea00051840b98a843f41fa113a2149fd5a11aa3cd96af5c4854cd19e8ba2b20e25a312b976f6d7a3bccbe840c5c7f5b8e6b4bdfe4be585607a98c2ae428de46f4bd0bffbd1899b960fb2d1e234de4b2f699954b780150e1fb60554ab185368fac82be2a0fa23081492ea5c565222c498753761af940f63a81c81ae433f86c0508b24affd9ec8", 0xc0}], 0x9, &(0x7f00000006c0)=[{0xa0, 0x10e, 0x4, "93a580690e7b1134560c3a025e3667bddaeb4b71da13028d6e3cf7ca2824853fa63e44c521e6dd162303529f249de19e8aeb6cc2303b6697caa0a8364d87de31e86821d70911e1c770025980c18db72771fe05af6fb44a0dbb9af5e16bfd10379b14a0f7448292cb7dacf3394a3efa0e89c18c65976cbc91fa5ada3790d3e19641d45b0d69cb0b7193"}, {0x20, 0x0, 0x80, "726853f3cd00e562931e01cfd42be715"}, {0x70, 0x29, 0xbb6, "893af8e371cfe097be032c0844fb507b961ece5fbdcfdc67d7ee276b04a05ccc18176f4402e9b6e7a337c50984e92ec917369b70c2cdbd9b0b73b8fbbae467f17d3ec6968c08c28b34b87c9c996007691af53f7c04255e3fc8266ff0b6436bb9"}, {0x88, 0xff, 0x20, "f1c85afe59539955d2190d01a5a75b4e91e4f969d7a1009f7ff684a03400f0fa7a7bd0666a16a744d1295f2a2e335a56d092f68ed943444d03350e6bdbd9ec0511b25e8b2ef52977519a3e75d2fe2925deab3106eb663db557f35e69d8ad4ff7e385ef92c122c8c5ffad20f88a4e5bf42e5c5ba4"}, {0x28, 0x103, 0x8, "e297552bd61d3ab2c8bf4b560af932dc0d2c34e2c75b"}, {0x90, 0x1, 0x5, "a628e039c8150b4c9cd3444a8a7629ad6a80151d17094914913421a20ea1b7e0168920eb827caedd35370edbf591d38841895645eaac97a3a5bfefd9573bab0e8262002c9faf77e2b2d6039f412f4eb704191827c76c585cd8f2b58b4e2fd607921e1456d88a0afbecce648c895361fa9d14003e3d1cabfbf97d5baee7bd75"}, {0xb8, 0x10f, 0x4, "fde704a8bc00a4c8dfbbc041859f2bce05326d0615903f3ff20fa3606259259c0e4252c05e388c1ba5dd37226cce8d4ad69fcf3c7ade087a6c9c264eab1e52704bb08824936d1662bc78d1ecd8820fdafe8352042b9678c1a1c09be3d25f45c3c6909ddaab3d80de4b96a3240d53471b3f6237739664c59428be7829441a636f8db9b20fcfe347ad72df721f33d79eccd9016ab1071c718488a110e9fead4a1d6f9e9decae7f3454"}], 0x328}, 0x8040) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000880), 0x744) modify_ldt$write(0x1, &(0x7f0000000280)={0x400, 0x20001000, 0x1000, 0x9a, 0x710, 0x1, 0x3, 0xafe, 0x80000001, 0x3}, 0x10) read$FUSE(r0, &(0x7f0000002000), 0x46d) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x100) write$FUSE_INTERRUPT(r0, &(0x7f00000003c0)={0xfdfa, 0xffffffffffffffda, 0x8000000002}, 0xffffffffffffff57) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x20000, 0x0) r2 = shmget(0x1, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/96) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000004c0), 0x24, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x80, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd07}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}]}]}, 0x80}}, 0x4801) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x10a02, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000400)={0x8, {{0x2, 0x4e23, @rand_addr=0x2}}}, 0x88) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 14:48:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000cbf000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = dup(r0) getsockopt(r1, 0x6, 0x33c, &(0x7f0000000240)=""/222, &(0x7f0000000340)=0xde) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x94, 0xc8, &(0x7f0000000040)="5e16ccd86ceccee611100fe6750746216bc3bdd3f3f7c115491e0b3dde80457f5a79e6d614033ea88f7209499dd4da09c3264b74123018cb71b57a106ec78167afa72f36263cae9b34c4c32ffc98375ddae6a694e8fa72e90b3aee7f08187e9417a5c4def17b15a0cdadbc4db3ea5129ebc7cde69d70f5a25587e0ae21c8eab732a48729114b50081a170d4b63ac724b68a9e879", &(0x7f0000000100)=""/200}, 0x28) 14:48:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 317.088164] IPVS: ftp: loaded support on port[0] = 21 [ 317.387296] chnl_net:caif_netlink_parms(): no params data found [ 317.487437] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.494056] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.502680] device bridge_slave_0 entered promiscuous mode [ 317.512616] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.519129] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.527685] device bridge_slave_1 entered promiscuous mode [ 317.567938] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 317.580342] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 317.622547] team0: Port device team_slave_0 added [ 317.631622] team0: Port device team_slave_1 added [ 317.748270] device hsr_slave_0 entered promiscuous mode [ 317.793790] device hsr_slave_1 entered promiscuous mode [ 317.986041] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.992692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.999877] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.006638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.095957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.119803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.130775] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.139898] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.155256] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 318.176938] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.197064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.205351] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.211878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.278595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.286917] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.293514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.304468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.313747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.322446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.330692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.343577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.352773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.399796] 8021q: adding VLAN 0 to HW filter on device batadv0 14:48:38 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x12400) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0xffffffffffffffda, 0x5, {{0x10001, 0x8, 0x100000000, 0x3, 0x0, 0x800, 0x100000001, 0xc86c}}}, 0x60) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x30089e, &(0x7f00000001c0)={@empty, @empty=[0x89060000, 0x2c004305, 0x8906], [{[{}]}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x0, 0x0, @ipv4={[0x6, 0x0, 0x0, 0x2c00000000000000], [], @multicast2}, @mcast2={0xff, 0x9}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 14:48:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) fstatfs(r0, &(0x7f00000000c0)=""/95) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000180)=0xc5) 14:48:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x43000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x8000000000000d) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x9a) r1 = socket$inet(0x2, 0xa, 0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xffffffff80000000, 0x2000) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 318.654739] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 14:48:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) socket$nl_crypto(0x10, 0x3, 0x15) 14:48:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 318.782964] protocol 88fb is buggy, dev hsr_slave_0 [ 318.788635] protocol 88fb is buggy, dev hsr_slave_1 14:48:39 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10fffc) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x1) 14:48:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$packet(0x11, 0x3, 0x300) pkey_alloc(0x0, 0x1) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req={0x4, 0x9, 0xe789, 0x3}, 0xfffffffffffffdc9) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x40000000011, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x200, 0x2) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000000c0)="7035d4ea81ada7ed4ab6288c5dbd50c56810a26a4770865ed0137d795b2203d14f80da562fde838264a214699a3f96a4af68f7abd68b4428b307058cc66712c41fd3b5198dc6b0bf1521a33de0089f7021a5ebbd23749dfb2bc9a09bb8c2ce1bc9e331e49e588cd5675e903da6892f94ba22e0c80abe794e0dc88a7af53fc92f95ddbb4a62bfca93cb98b2cdfe6e8454cce12ad1932f5f4ee53d69164a9961e4dc") 14:48:39 executing program 1: setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f00000000c0)='/dev/loop#\x00', 0xb, 0x2) r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000a22000/0x3000)=nil, 0x3000, 0x1000000, 0x31, r0, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000140)) pipe(&(0x7f0000000000)) 14:48:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:39 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000040)={0xfffffffffffffe01, 0x0, 0x5}, 0x1) splice(r0, 0x0, r2, &(0x7f00000002c0), 0x18, 0x0) 14:48:39 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockname(0xffffffffffffff9c, &(0x7f0000000300)=@hci={0x1f, 0x0}, &(0x7f0000000380)=0x80) accept4$packet(0xffffffffffffff9c, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x80000) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000640)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000800)={0x0, @local, @multicast2}, &(0x7f0000000840)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000880)={@rand_addr, @multicast2, 0x0}, &(0x7f00000008c0)=0xc) accept4(0xffffffffffffff9c, &(0x7f0000000900)=@can={0x1d, 0x0}, &(0x7f0000000980)=0x80, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000009c0)={0x0, @initdev, @local}, &(0x7f0000000a00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000b40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001f40)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000002040)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002380)={0x0, @loopback, @empty}, &(0x7f00000023c0)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000004d80)={'bcsf0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004e00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005000)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000005100)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000005140)={@remote, 0x0}, &(0x7f0000005180)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000051c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000052c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000005700)={@broadcast, @remote, 0x0}, &(0x7f0000005740)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005780)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005880)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000005cc0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000005d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005d40)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000006680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006640)={&(0x7f0000005d80)={0x8b0, r1, 0x20, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x130, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xb594}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x160, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1, 0x80, 0x8, 0x200}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r11}, {0x190, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6cc}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r14}, {0x1a8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff7896}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x100, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x5, 0xfffffffffffffff9, 0x4, 0xfffffffffffffff8}, {0x6, 0x11, 0x4, 0x1}, {0x7, 0xffff, 0x1, 0x8}, {0x28, 0x8, 0x6, 0x1f}, {0x9, 0x6, 0xfff}, {0x3, 0x8000, 0x51, 0x10001}, {0x7, 0x8, 0x6, 0x8}, {0x8, 0x49606eef, 0xfffffffffffffffa, 0xfffffffffffffffd}, {0x0, 0x7, 0x5, 0xffffffff}, {0x9, 0x7, 0xf4, 0x7fffffff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x120, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xe1f5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r24 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r24, 0x127a, &(0x7f0000000000)) r25 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FICLONERANGE(r24, 0x4020940d, &(0x7f00000000c0)={r24, 0x0, 0xff, 0x3, 0x6}) connect(r25, &(0x7f0000000040)=@generic={0x11, "ac56089ef42fa75a62b3298f4596c2c663f91edc5fcaea35778cbcae80784d851115f40c09bedfed0724eef7ea9377eeac5eacdeb56ecab3b5995c78c59a66fc6159cc3cda9cd54e38ee5a078463b6b415e0a55468174e4635b9a08e7627e66cff5fef0276199008982baeafd8b4fd68e342a7f200d7e9b6bc6dc7689d8b"}, 0x80) 14:48:39 executing program 3: r0 = socket(0x8, 0x803, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @loopback, 0x1, 0x4, [@multicast1, @broadcast, @multicast2, @multicast1]}, 0x20) write(r0, &(0x7f0000000040)="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", 0xfc) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000380)=0xfffffffffffffffa) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005480)=[{&(0x7f00000001c0)=""/3}, {&(0x7f0000000200)=""/200}, {&(0x7f0000000300)=""/88}], 0x3b0, &(0x7f0000004480)=""/4096, 0x1000}, 0x12000) 14:48:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:39 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0xc2, 0x1}, 0xffff}}, 0x18) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000280)={0x1, 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000200)={r1, &(0x7f0000000100)=""/199}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0xfff}, {0x4}}) 14:48:39 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10800, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='bpq0\x00', 0x4, 0x80000000, 0x54}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xffff, 0x2) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r1, 0x127a, &(0x7f0000000000)) 14:48:39 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0x1) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000013000/0x4000)=nil) dup2(r1, r2) 14:48:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0), 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x8, 0x4, 0x4, 0x234, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa, 0x300]}, 0x2c) 14:48:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff800, 0x400000) write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x6a, 0x2, 0x7}, 0x9}}, 0x18) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x4, 0x4) 14:48:40 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x9, @ipv4={[0x80fe], [], @local}}, 0x1c) socket$inet6(0xa, 0x3, 0x0) 14:48:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000040)=0x80000000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000500)={0x9, 0x108, 0xfa00, {r2, 0x6c, "0100", "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"}}, 0x110) 14:48:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000100)) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e24, 0xffffffffffff0000, 0x4e21, 0x0, 0x0, 0xa0, 0x20, 0x32, 0x0, r2}, {0x1, 0x100000001, 0x7, 0x3, 0xdd, 0x81, 0x4, 0x8}, {0x10000, 0x9, 0xd06, 0x7}, 0x1, 0x6e6bb9, 0x0, 0x1, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3}, 0xa, @in6=@remote, 0x3501, 0x0, 0x3, 0x13812428, 0x7, 0x2, 0x4}}, 0xe8) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1692, 0x80) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000080)=""/48) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0), 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x242080, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$apparmor_current(r2, &(0x7f00000000c0)=@hat={'permhat ', 0x2, 0x5e, ['\x00']}, 0x1c) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x0, 0xfd1b, &(0x7f00000000c0)}) 14:48:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x32, "750161ee4bcbf54544e84f1bd700a413fe16a214242680e2ee6d70ad45c69bd69537fd3290953f59b70ebad7a754532b550e"}, &(0x7f0000000140)=0x3a) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x4, 0x20}, &(0x7f00000001c0)=0xc) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000040)={0x1}) 14:48:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0), 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x8000) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:41 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x1, 0x4) r0 = socket$inet(0x2, 0x3, 0x1) mknod(&(0x7f0000000080)='./file0\x00', 0x800, 0x1ff) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000004}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) syz_emit_ethernet(0x30b, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004501e94e00002a97207abe6a46e280763692bff7746e5aa0c9048552db77e402d62f30e62101428b416c0264844f411de281dfe7a5dbd9d87ac44d59461a8b0975e4128949e732e8727028af22d54ed684b5d65c6f92514885b6e250d90000000000000000000000000000"], 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x2, 0x81, 0x0, &(0x7f0000000140)={r1, r2+30000000}, &(0x7f0000000180), 0x0) 14:48:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x475b, 0x80) 14:48:41 executing program 2: accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x12) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc05c6104, &(0x7f0000000300)) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400) 14:48:41 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x2000000000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x50, &(0x7f0000000280)}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000001740)=""/155, 0xfffffffffffffde3}, {&(0x7f00000001c0)=""/11, 0xffb5}, {&(0x7f0000000300)=""/102, 0x66}], 0x239, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) ioctl(r0, 0xc2604110, &(0x7f0000000000)) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 14:48:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) 14:48:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$key(0xf, 0x3, 0x2) io_setup(0x7, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) io_submit(r2, 0x76, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040), 0x7f916ea5d000}]) 14:48:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x8000, 0x0) mmap(&(0x7f0000134000/0x1000)=nil, 0x1000, 0x3000008, 0x35, r1, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r2 = dup3(r0, r0, 0x80000) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40800, 0x0) 14:48:41 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = timerfd_create(0x0, 0x0) r1 = dup2(r0, r0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 14:48:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x800000000000003f, 0x2000) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x8000001000004, 0x81010, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x8) r2 = shmget(0x3, 0x2000, 0x40, &(0x7f000020a000/0x2000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@empty, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) r4 = getgid() r5 = getuid() getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000340)={{0xffffffff, r3, r4, r5, r6, 0x40, 0x3}, 0x6, 0x0, 0x8, 0x480000000000000, r7, r8, 0x80000001}) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{}, 'syz1\x00', 0x13}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 14:48:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, 0x0, 0x0) dup3(r1, r2, 0x0) 14:48:42 executing program 3: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000080)) [ 322.046124] input: syz1 as /devices/virtual/input/input5 14:48:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = dup(r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'veth0_to_team\x00', 0x2}, 0x18) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x20000000}) fcntl$getflags(r0, 0x409) [ 322.105004] input: syz1 as /devices/virtual/input/input6 14:48:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, 0x0, 0x0) dup3(r1, r2, 0x0) 14:48:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x103000) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x0, 0x7, 0x100004000006, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x180, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) write$P9_RSTATu(r2, &(0x7f0000000480)={0x78, 0x7d, 0x2, {{0x0, 0x56, 0x3, 0x8, {0x0, 0x3, 0x7}, 0x10000, 0x8, 0x3, 0x8, 0x2, '*{', 0x7, 'queue1\x00', 0xd, '/dev/snd/seq\x00', 0xd, '/dev/snd/seq\x00'}, 0xd, '/dev/snd/seq\x00', r3, r4, r5}}, 0x78) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x101, 0xffffffff00000000]) 14:48:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, 0x0, 0x0) dup3(r1, r2, 0x0) 14:48:42 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x203ff) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x3, '\x00\x00\x00'}, 0x4) 14:48:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20c081, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x100000000}, 0x8) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000040)) 14:48:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300), 0x10) dup3(r1, r2, 0x0) 14:48:42 executing program 2: msync(&(0x7f0000f5f000/0x1000)=nil, 0x1000, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0xf4, 0x6, 0x1000, 0x10, 0x1, 0x8}, 0x2c) 14:48:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x6) 14:48:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x404800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x3f, 0x3}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, &(0x7f0000000200)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x10000000800002c1, 0x40000001, 0x3], [0xc1]}) 14:48:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300), 0x10) dup3(r1, r2, 0x0) 14:48:43 executing program 2: unshare(0x8020000) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/pid\x00') semget$private(0x0, 0x408, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') semop(0x0, &(0x7f0000000080)=[{0x0, 0x4, 0x1800}], 0x1) setns(r1, 0x0) [ 323.184845] kvm [11737]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 14:48:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x0, 0x2) write$nbd(r1, &(0x7f0000000280)={0x67446698, 0x0, 0x1, 0x3, 0x2, "68ee4589709101eafd831f35dc1b4deb04b597ad905f03ef22d0bd79c9626568bf2eeb3aba7ff054565f2a74ad9eec03f9d0d4b9fd1f729d679692b2458ec1145f4f1619dec7bbbcdd74634a6b749284f5e80a5e6119a2f5df65e2a024c96f956d948755b13b8defa4ca4de18357b6bd65ed3c753dd9589358ad8938f097cf616e69dd0b0328a52a762834a708fc10780f3f66daa96334cc1dc99eefd1e200720783befc3061c2b44b3a91ee13899aaae8aacab50477532475f2"}, 0xca) pipe(&(0x7f0000000200)) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x101010, 0xffffffffffffffff, 0x0) socketpair(0x5, 0x80001, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0xc40, 0x0) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f00000001c0)={0x7, 0x50}) recvfrom$rxrpc(r2, &(0x7f0000000080)=""/77, 0x4d, 0x0, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x24) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x8000000000000002) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300), 0x10) dup3(r1, r2, 0x0) 14:48:43 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) chroot(&(0x7f0000000280)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) unshare(0x20400) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x2}, 0x28, 0x2) 14:48:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x40102, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/109) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x1b, 0x0, 0x587], [0xc2]}) 14:48:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = accept$alg(0xffffffffffffff9c, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x800, 0x5, 0xffff}) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(0xffffffffffffffff, r3, 0x0) 14:48:43 executing program 2: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7f) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffd000/0x3000)=nil, 0x6) 14:48:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3d, &(0x7f0000000000)=0xfffffffffffffffe, 0xffffffffffffff38) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) sendmmsg(r0, &(0x7f0000006500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1000000000000000000000000061ae2d"], 0x10}}], 0x1, 0x0) 14:48:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x22, "9df14ddc6d4673bed463dfa2694ed21ef5ef776aad20b470cd5521cb988d41f01156"}, &(0x7f0000000080)=0x2a) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x101}, &(0x7f0000000100)=0x8) 14:48:44 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2040, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000180)={0xa10000, 0x2, 0x3, [], &(0x7f0000000100)={0x990a92, 0xffffffffffffffe1, [], @p_u32=&(0x7f00000000c0)=0x800}}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000140)=0x5, 0x4) listen(r1, 0x0) listen(r0, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x15, 0x4, @thr={&(0x7f0000000200)="9aaeea6e855c522dbc7e413c4ecec2af09989b01b5e74155bf3bb8fa0da235a66b12ed3111c4d14b26f23fd727e6cbcc2802d93c27bc76f64868055443541264cf7a770e8003", &(0x7f0000000280)="80324b0493d95993f0338a0281e69ae1257a16484377d88a183bfd2a6652e93697ac140a8bd7cbc171293afd2e8c85ae5db8aea95189eafdc32f39fbb774f8978e546156bceba2e2e3abe82109065d6055c798ea8856b79f2a8a7831a77f517dd369e3dff79ce991ef8b7c81105b83c62b4316f2c5f9d05eeb99e1854d37d6b7835e29f649095de61be60177f98c8104fe487e257b47424a6b0d15aee2dfad4ddb621c7b0095a91e35d309f1a666905388abb53b7d7af2c2082385d86f"}}, &(0x7f0000000340)=0x0) timer_delete(r3) 14:48:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(0xffffffffffffffff, r3, 0x0) 14:48:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0xba) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x0, 0x0, {0x30, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x2000000, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x10], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) [ 324.174133] QAT: Invalid ioctl [ 324.203798] QAT: Invalid ioctl 14:48:44 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10000, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x29, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x290}}, 0x0) 14:48:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r2}) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(0xffffffffffffffff, r3, 0x0) 14:48:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000040)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400000, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff060000000000000000000000000000040000000b00e9b6b85d65762f6c6f7f7023000000000000"], 0x34) [ 324.500182] netlink: 628 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.509206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:48:44 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@dev, @multicast1, 0x0}, &(0x7f0000000100)=0xc) recvfrom$packet(r0, &(0x7f0000000000)=""/161, 0xa1, 0x2000, &(0x7f0000000140)={0x11, 0x8, r1, 0x1, 0x7}, 0x14) write(r0, &(0x7f0000000200)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 14:48:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) 14:48:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x6c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xd275}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0xc) 14:48:44 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@dev, @multicast1, 0x0}, &(0x7f0000000100)=0xc) recvfrom$packet(r0, &(0x7f0000000000)=""/161, 0xa1, 0x2000, &(0x7f0000000140)={0x11, 0x8, r1, 0x1, 0x7}, 0x14) write(r0, &(0x7f0000000200)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) 14:48:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000040)) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x71b0000000, 0x10000) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e20, 0x2, @ipv4={[], [], @local}, 0x400}, {0xa, 0x4e24, 0x1, @remote, 0x9}, 0x80000000, [0x401, 0x40, 0x2dca, 0x7, 0x3, 0x1f, 0x4, 0xffffffff]}, 0x5c) 14:48:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) 14:48:45 executing program 2: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2080, 0xffffffffffffffff) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340), 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x80b, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) 14:48:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000c09000/0x2000)=nil, 0x2000, 0x402, 0x1d, r0, 0xfffffffffffffffb) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) 14:48:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x1000000000004e20, 0x0, @loopback}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/187) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)=0x7) close(r0) 14:48:45 executing program 3: socketpair(0x2000800000001, 0x803, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x254, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xc4, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75bb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd71}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba4e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd0a2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbfb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x284061bf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc3d9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e01fa0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = getegid() r3 = getgid() setgroups(0x3ab, &(0x7f0000000140)=[r2, r3]) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x2, [{}, {}]}, 0x48) write$cgroup_int(r0, &(0x7f00000000c0), 0xffffff19) 14:48:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = gettid() ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x20002, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x10b1, r0, 0xfffffffffffffffd) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) 14:48:45 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x100000000000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x200, @remote, 0x6}, @in6={0xa, 0x4e23, 0x7fff, @loopback}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @broadcast}, 0x4}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}], 0x64) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x880) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @local}], 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), 0x4) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x600, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000040)=0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100), 0x0) 14:48:45 executing program 3: r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000300)={@broadcast, @broadcast, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@getqdisc={0x4c, 0x26, 0x0, 0x70bd2c, 0x25dfdbfc, {0x0, r1, {0xffff, 0x17}, {0x2, 0xfff3}, {0x0, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="290000001800190000003fffffffda0602007a00fde80001084000040d0005000005000000060000ff", 0x29}], 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000a00000/0x600000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000b5e000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000b47000/0x4000)=nil, &(0x7f0000c69000/0x3000)=nil, &(0x7f0000eaa000/0x12000)=nil, &(0x7f0000ed0000/0x12000)=nil, &(0x7f0000f08000/0x3000)=nil, &(0x7f0000000100)="a3075836203076990e84bd7841bcfead7971d497c84e4754a10dd4e50880158c6f4db41eb612df2def3d42c42b4a466b04db4cc87fd50321497166a466c73d0605b379c47f272edcf01073a537dd992bc6a90fb2f738a35845a3ca117f6714f6447a0e0df7744ba5ce", 0x69, r0}, 0x68) mkdir(&(0x7f0000000000)='./file0\x00', 0x120) 14:48:45 executing program 0 (fault-call:10 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 325.800518] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 14:48:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x90000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x68000001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x900, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) [ 325.929111] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 14:48:46 executing program 2: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x84, 0x9, &(0x7f0000000080), &(0x7f0000000040)=0x30) close(r1) 14:48:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) 14:48:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 14:48:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x686, 0x400) r1 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x10}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r1, 0x127a, &(0x7f0000000000)) 14:48:46 executing program 2: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) getpriority(0x1, r2) 14:48:46 executing program 3: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x7) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000340), 0x1000000}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x2, 0x0, [{0x7fffffff, 0x3, 0x0, 0x0, @adapter={0x100000001, 0xe8c6, 0x7fff, 0x9, 0x40}}, {0x0, 0x0, 0x0, 0x0, @sint={0x753, 0x55a}}]}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0xffff}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x8}, 0x8) 14:48:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) r4 = dup3(r1, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x1, 0x5, 0x8, 0x5, r4, 0x8}, 0x2c) 14:48:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x1fd1, 0x0, 0x1, 0xffffffffffffff9c}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000080)=0x5, 0x4) [ 326.755292] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:48:46 executing program 3: add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)="3082008bc8718e41645f36cb63ed7801fcc569ce49db476cfdd0d88cd8b934ccc08a36e362ef5a29500246e10ff2f66fc6cdbf55fef375329420a959f6bae207b9671002ca32de199b0be222f0d8a073d768777c52a193b60e8182d00f06866a5d9402525061d91c02bb117b933eec4fc8d341c42d6f849f212a24a5a8fda22b134d853a0b86489faea61518d2a3ed", 0x8f, 0xfffffffffffffffd) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40000) ioctl$TIOCNXCL(r0, 0x540d) 14:48:46 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x45) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000100)=""/253, &(0x7f0000000200)=0xfd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000280)=0x800000000001000, 0x218) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0xffffffffffffc4c2, 0x9, 0x1f}) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x0, r3}, 0x10) dup3(r2, r4, 0x0) 14:48:46 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000056c0)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x2, 0x28081) r2 = shmget(0x1, 0x1000, 0xa, &(0x7f0000ffd000/0x1000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x7000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup(r5) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x2, 0x3, 0x7fffffff}}, 0x28) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x1, 0x3a, 0x200000000000002}], 0x176) 14:48:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfffffffffffffffd, 0x0) mmap(&(0x7f00008a5000/0x400000)=nil, 0x400000, 0x2, 0x31, r0, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) 14:48:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pause() ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x7ffffffffffffffc}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40001) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0xfd88) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r2, 0x0, 0xffe4) 14:48:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, r3}, 0x10) close(r1) r4 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2280) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000140)={0x8, "7842efc3aa5f113e7b8ad5e7280a834f7b6ea09d211d3b77e134fd389bb46c24", 0x3, 0x1}) dup3(r2, 0xffffffffffffffff, 0x0) 14:48:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x20801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x141800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xa8c9) [ 327.357046] IPv4: Oversized IP packet from 127.0.0.1 [ 327.363053] IPv4: Oversized IP packet from 127.0.0.1 [ 327.485893] input: syz0 as /devices/virtual/input/input7 14:48:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x7ffffffffffffffc}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r2, 0x40001) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0xfd88) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r2, 0x0, 0xffe4) 14:48:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r4, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:47 executing program 2: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x602000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={r3, 0x3}, &(0x7f0000000180)=0x8) shutdown(r0, 0x1) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) [ 327.798622] IPv4: Oversized IP packet from 127.0.0.1 [ 327.804641] IPv4: Oversized IP packet from 127.0.0.1 14:48:48 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000200)=@in={0x2, 0x4e20}, 0x80) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x9, 0xfffffffffffffff7, &(0x7f00000000c0)=0x2}) syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rpc\x00') write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) 14:48:48 executing program 2: r0 = socket$inet(0x28, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x3) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, @dev, 0x0, 0x3, 'rr\x00\x18\xad\x8f\xc1z\xbf\xb9lV\x00'}, 0xff0b) 14:48:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) fanotify_init(0x2, 0x101800) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 328.050641] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:48:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r4, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) write(r1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) close(r1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x3, 0x8, 0x80, 0x6, 0x64, 0x4800000000000, 0x0, {0x0, @in={{0x2, 0x4e21, @rand_addr=0x3}}, 0x0, 0xffffffff, 0x4, 0x4, 0x4}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r3, 0xe68a, 0x400, 0x4, 0x0, 0x1b7b817c, 0x9, 0x0, {r4, @in6={{0xa, 0x4e24, 0x8, @remote, 0x1}}, 0x52, 0x3, 0x100, 0x80000000, 0x4}}, &(0x7f0000000100)=0xb0) sendmmsg$alg(r2, &(0x7f00000006c0), 0x4924924924926e4, 0x7fffffff) ioctl(r0, 0x1000008912, &(0x7f0000000880)="0adc1f023c123f3188a070") 14:48:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x12\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendfile(r0, r2, &(0x7f0000000000), 0x5) fcntl$addseals(r2, 0x409, 0x8) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 14:48:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x90040, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x44000) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x7fffffff}}, 0x0, 0x6}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x3, 0x30, 0x7ca7694a, 0x3f}, &(0x7f0000000100)=0xfffffffffffffe47) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44090) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r3, 0x6}, &(0x7f0000000480)=0xffffffa6) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r3, 0x720}, 0x8) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000080)) 14:48:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000180)={r2, &(0x7f0000000100)=""/122}) 14:48:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x0, r3}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xa0480, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000100)={0x1, 0x0, 0x103, 0x3, {0x1, 0x3, 0x1, 0x80}}) dup3(r5, r1, 0x80000) 14:48:48 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x20, 0x30140) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x804, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x41) write(r1, &(0x7f00000001c0), 0xfffffef3) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x10001, 0x40840) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000080)={0x7, 0x7e00, 0x4, 0xffffffff, 0x5, [{0x6, 0xb673, 0x614300000000000, 0x0, 0x0, 0x8}, {0x10000, 0xdf, 0x4, 0x0, 0x0, 0x200}, {0x8, 0x10000, 0x1000, 0x0, 0x0, 0x880}, {0x80000001, 0x0, 0x4, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x1000}]}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 14:48:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101080, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), 0x4) 14:48:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x401, 0x42) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000100)={0xe1bd, {{0xa, 0x4e23, 0x5, @local, 0x8001}}}, 0x88) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz0', "f8560772ecd0c2af88bec42df6595b5fb4b09c4d61dc7d8684356fa7ca9994dbd2babdb9bf120ca535edd966d4925b72aa962f249555eb902006e768aac6c3cf8b35677f06671ed0efdc3e8c4f062fc621c4"}, 0x56) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r4, 0x0) [ 329.264477] IPVS: ftp: loaded support on port[0] = 21 14:48:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'syzkaller0\x00', 0x9}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000180)) [ 329.612613] chnl_net:caif_netlink_parms(): no params data found 14:48:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x84, 0xff33) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) [ 329.801348] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.808041] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.816538] device bridge_slave_0 entered promiscuous mode [ 329.890382] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.897654] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.906418] device bridge_slave_1 entered promiscuous mode [ 330.014561] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 330.033199] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 330.095824] team0: Port device team_slave_0 added [ 330.104895] team0: Port device team_slave_1 added [ 330.179175] device hsr_slave_0 entered promiscuous mode [ 330.212984] device hsr_slave_1 entered promiscuous mode [ 330.377846] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.384476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.391633] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.398276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.495857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.503636] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.513586] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.528650] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 330.558707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.566500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.583898] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.599805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.609459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.617678] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.624239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.675877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.684540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.692767] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.699358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.707131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.716328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.725493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.734542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.743321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.752301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.760886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.769270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.783928] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.792063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.800708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.813934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.860590] 8021q: adding VLAN 0 to HW filter on device batadv0 14:48:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r4, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:51 executing program 3: r0 = epoll_create1(0x0) r1 = dup2(r0, r0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x7707) r2 = epoll_create1(0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) clock_getres(0x6, &(0x7f0000000040)) 14:48:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f00005aa000/0x4000)=nil, 0x4000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000040)) 14:48:51 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x200400) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x5, 0x200000000000015, 0x835b, 0x9, "cebe877b27dd79eb1f02856179c5fb400c864fd3638c76c4fe31fc017601509c"}) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000080)) 14:48:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40100, 0x0) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000100)={0xe36, "a73325abe45e58cb3a7f011832752c75bc31319edc67d3ea27b98c95b567353a", 0x1, 0x1}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x4000, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0xffffffffffffffe0, 0x7}]}, 0xc, 0x1) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x0, r4}, 0x10) dup3(r3, r5, 0x0) 14:48:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r4, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r4, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) 14:48:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r2, 0x3}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000002c0)=0x3, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 14:48:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000001c0)=0x219, 0x4) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x840, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000080)=""/235) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000880)={{{@in=@local, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000980)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000a00)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000a40)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000a80)={@dev, 0x0}, &(0x7f0000000ac0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000c00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000d40)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000dc0)={@dev, 0x0}, &(0x7f0000000e00)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002240)={&(0x7f0000000e40)={0x3bc, r3, 0x428, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x21c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xd3fb}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r8}, {0x170, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r9}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x0, 0x7, 0x89c8, 0x7fff}, {0x8, 0x6, 0x101, 0x800}, {0x100000000, 0xfffffffffffffff8, 0x6, 0x6}, {0xb3, 0x302, 0x6d, 0x7f}, {0x6, 0x100, 0xffffffffd07382f4, 0x1}, {0x5, 0x1, 0x6, 0x3}, {0x3, 0xfffffffffffffffd, 0x7, 0x29ce}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x137f}}}]}}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 14:48:51 executing program 0: modify_ldt$read_default(0x2, &(0x7f0000000340)=""/53, 0x35) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000480)={"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"}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001fd) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r6, &(0x7f00000000c0)={'stack ', ':\xad9\xc4\x11V\xe4:\n'}, 0xf) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r7, 0x500, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x118}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbd3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x24000080) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:51 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) munmap(&(0x7f0000007000/0x2000)=nil, 0x2000) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x7, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x5, @remote, 0x4000000000000000}, @in6={0xa, 0x4e20, 0x5, @rand_addr="e7266ccaa350426191ca6eb948d48257", 0x80}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @remote}], 0x68) [ 332.023438] QAT: Invalid ioctl 14:48:52 executing program 2: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x4) lseek(r0, 0xfffffffffffffffd, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3f, 0x10000) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) [ 332.066277] QAT: Invalid ioctl [ 332.072876] kauditd_printk_skb: 3 callbacks suppressed [ 332.072907] audit: type=1400 audit(1552574932.124:31): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAD39C41156E43A pid=12080 comm="syz-executor.0" 14:48:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r3, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) 14:48:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, r0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) 14:48:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x5) 14:48:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xefefeef3bfffffac, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8, 0x3f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @rand_addr=0x8}]}, &(0x7f0000000200)=0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') 14:48:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffffc, 0x8000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000100)) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x7fffffffffffffff, 0xffffffffffffff2b) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0xffffffffffffff26) 14:48:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r3, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000300)={0x8, 0xc04e27d3b503e3dd}) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000240)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9f9d, 0x0) pipe(&(0x7f00000002c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xc0102, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 14:48:52 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='/dev/vbi#\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000080), &(0x7f00000041c0)=0x4) r2 = add_key(&(0x7f0000000180)='.dead\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="83e0440861cd805647b2fa3a4c174eb8560465f6d0b5378a440ea65c367e5e90bb6210726ed5ffc08340c13a3a1a305b79a36590c1ccbba8b0fc7405053cbf11487617ed89bc471824c6d85491682a65ccaf560a942b353a14db627eee6045cf1e015f9d759d5326f68b4324fc250c5dd9926b4800ce25fa23e326310ff55e2f6045d2d04ac784980927902efcf8", 0x8e, 0xfffffffffffffffa) keyctl$describe(0x6, r2, &(0x7f0000000340)=""/152, 0x98) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x2, 0x1, 0xaf, 0x2, 0x9, 0x0, 0x4bc, 0x6, 0x1f, 0x0, 0xfffffffffffffffd, 0xffffffffffff8001, 0x4, 0xffff, 0x6, 0x9, 0x2, 0x7fff, 0x7f, 0x0, 0xfffffffffffffff7, 0x3f, 0x7, 0x1, 0x3, 0x3, 0x5, 0x6, 0x1, 0x9, 0x8001, 0x8]}) 14:48:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x0, r3}, 0x10) dup3(r1, r0, 0x80000) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) write$P9_RXATTRWALK(r4, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x80000000}, 0xf) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 14:48:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:53 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xe0000400) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0xffffff87) prctl$PR_SET_FPEXC(0xc, 0x40000) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='bond_slave_0\x00') setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, 0x8) 14:48:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fcntl$notify(r0, 0x402, 0x31) exit(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)={0x5, 0x0, [{0x4004, 0x50, &(0x7f0000000000)=""/80}, {0xf002, 0xad, &(0x7f0000000140)=""/173}, {0x3007, 0xb0, &(0x7f0000000200)=""/176}, {0x1f002, 0x85, &(0x7f00000002c0)=""/133}, {0xd000, 0x18, &(0x7f00000000c0)=""/24}]}) getdents64(r0, 0x0, 0x0) 14:48:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000180)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000040)={0x4, 0x0, [{0x0, 0xb8d0, 0x7, 0x4, 0x3, 0x6}, {0xc0000003, 0xffff, 0x4, 0x1, 0xfffffffffffff8d7, 0x100000000, 0x2}, {0x40000001, 0x2, 0x0, 0x6, 0x101, 0x5, 0x4}, {0xd, 0x0, 0x1, 0x0, 0x7, 0x9, 0x9a6}]}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x9}, 0x8) 14:48:53 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000003c0)={{0x2001ffffff94, 0xc}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x0, r3}, 0x10) dup3(r2, r4, 0x0) 14:48:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:53 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3ff, 0x204800) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01041800000000000000400000005f00000004000000b4e52f37aace4a7c8ac74c9620fc37cf3f68c48dead1392e10d0394b6e53d37e87a59346062554e4e2c4c98ef728fd1fca869a000eca929c0c912d0ba5b60178688c9455cef3379191049b68b981cee4c7c82513cd54e11f748f3d152a5971777475647a850e85a01cc8b6026bc46617cfc5b767dc33320703921fa9372083d6a75d23704b39d45874246481ac16d1c23dbb99537fd97efda30ebba37c034a7a5105b408aed1c55075ca94b5c918e1bf89dca38b00af0d705c1d3e87e3e805cf45d1f79159eb5de0192dba3e69a40e"], &(0x7f0000000280)=""/189, 0xda, 0xbd}, 0x20) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0x9, 0x4, 0x1, 0xfff, 0x1, [{0x4, 0x5, 0x1, 0x0, 0x0, 0x1}]}) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000000)={0x3, 0x100000000, 0x783eb0ba, 0xc9a1}) 14:48:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000040)) mmap(&(0x7f0000c3f000/0x2000)=nil, 0x2000, 0x0, 0x810, r0, 0x0) 14:48:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x141) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x0, r3}, 0x10) dup3(r1, r4, 0x80000) 14:48:54 executing program 3: r0 = socket$inet6(0xa, 0x401000000001, 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000080)={0x1, {r2, r3+10000000}, 0x1ff, 0xffffffffffffff12}) close(r0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ftruncate(r5, 0x2007fff) sendfile(r0, r5, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, 0x0, 0x0) 14:48:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000575000/0x4000)=nil, 0x4000, 0x2, 0x50, r0, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x900, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/238) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x5, 0x1, 0x5, 0x7, 0x6222}, &(0x7f0000000380)=0x14) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e23, 0x0, @local, 0x100}}}, 0x84) 14:48:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r3, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fcntl$notify(r0, 0x402, 0x31) exit(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)={0x5, 0x0, [{0x4004, 0x50, &(0x7f0000000000)=""/80}, {0xf002, 0xad, &(0x7f0000000140)=""/173}, {0x3007, 0xb0, &(0x7f0000000200)=""/176}, {0x1f002, 0x85, &(0x7f00000002c0)=""/133}, {0xd000, 0x18, &(0x7f00000000c0)=""/24}]}) getdents64(r0, 0x0, 0x0) 14:48:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$CAPI_INSTALLED(r1, 0x80024322) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x2, 0x3, 'client1\x00', 0x3, "9410aff4e41f3cef", "03b9033d2d28f38a9fa6c380c2518fe77313535c406cd5bbc34732a1de4fceda", 0x3, 0xaad9}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0x10) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r3, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) r4 = dup3(r1, r3, 0x0) openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 14:48:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000100)={0x0, 0x2, 0xffffffffffffffe1, 0x9, r2}) 14:48:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r3, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0xffffffffffffffb0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0xfffffffffeffffff, r2, 0x4}, 0xffffff2c) dup3(r1, r3, 0x0) kexec_load(0x80000001, 0x9, &(0x7f0000000700)=[{&(0x7f0000000100)="f3d9c8e3eb2c5020279d6b28e3c3f01affdf12c7673e17afe346ea1f5bc721a0434f5f3dd93bb09e2e75d9d9a57d32e73e8ff3cbdb971ad2ef93907fb6994d0a9aa2548cc2264335b71b0907fa069a1cd129e69301e375134ff9b5b24d8aca557bf149cc3b0051bc59ffd050824a5106257139720e7b2c24f3572adcd58eb2654354abc5ffe6fbbc5a941e9956309ddb43376fc7bfd23da1a6d6ed34c62c7ac13f9ce15c1077045505a1d06ce08fd2917097692b2486ac5b8c37623246bd12ff5dc4641bd3ec90fbbf00e31427b8ed2f88efa6838d07fcbd2719db5887ba9003a900e2a8a30889c74127489201ab9b8b527b949a22", 0xf5, 0xffffffff, 0x8001}, {&(0x7f0000000200)="bec299ae82d247ccc623948135169a3424c2a2c3fed67d28183756f5da2e778d79b1658714a7944d9db6584397f77ca3e95856b27153e5a4dcb1d82f46e3fa187644e4c0927d5ec5b5b46b64186ecd9c66b832f7844bb7", 0x57, 0x4ca, 0x1000}, {&(0x7f0000000900)="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", 0x1000, 0x0, 0x8f}, {&(0x7f0000000340)="8f505b2fc3ec908b8c18f7dd9a378a61c4cc7409691c3cf5b7c82b023fd5efe2d22c7b9e25f1ecc75ae32bcd676fc343d6b61c405ddf02903b5e23fe220c6c9cccb395b890", 0x45, 0x6, 0xec18}, {&(0x7f00000003c0)="2679d00faf705830a70fb4dd0797ecbd307fe140a0b1db3765f580682397e987ef20cd84625e3e8d9a62dfa136f47e74de469122266e5ec947612d8bdd0bdb45356b479ac02b60545bdbb2f4b064759bf89f5a0338af99663d79f1489bd1", 0x5e, 0x6, 0x3}, {&(0x7f0000000480)="eec7b81976ab50f34daa1af437d1d01db9681133038ad83bac3b0cfe271079412f48f14a42e1719bdff685ad143614e7a354dfb5bee5278adb1eccb5a6fa2850cf36dff7871e2487b189706d94d937ea12c17a700eb3fd6f1994580e819f51decd21686c73eb64200b0c74cdd9f00c039a2280", 0x73, 0x4, 0x100000001}, {&(0x7f0000000500)="bebb1499e35381b000eb746587c6cce6a31cbe536038b63c71003edbc493186b50ee001a20722af5ca7c8c855f2358e742f7a4fe1899bddc33d515b2f6e6c40ebabee719e5e7a53bbac591ec1da58eb67ee0ff7d492a54da22d49b582339cb585e550defcf81358cbbcd5484a30e", 0x6e, 0x3f, 0x600000000000000}, {&(0x7f0000000580)="7904f954122a72ec3d2b0bd21bfde32982965a535af0b20f15a4ac6763532e9f72c062dc1b4c32e4e63bffd8fedbc56ad96d61b62dd1fb4d7114849faec580208c93697e5727c8a9c5d42783eaa4de7b7ebb710bcb6a7411dd0488581e239c539e170cbce06db6a65fad0dfc629011008ed277d9efc2a8a83c3cbf55b2a54cd68a473ae40a28192a65bd1f387cc9ba3a378e8591b08ee6855a2b932822e66b73515ac62be8ac0fae8ffca2cdfd8c57d3", 0xb0, 0x4, 0x40}, {&(0x7f0000000640)="3354b062632ed625cad17ab6beafc8fb2ff9dec44e34d2fd949e352645853d4a00f00f1bc89a221aadb21301bbf19a75f0f4b2d5a8b9667e3a53ab2da8ae5cca7cc5dcd3b5a17e3b60f2c0f02f7d8fd066fe2be7def97abd35c25b732d4cd9577e5c21b61df93af490e43184f4ea3d8a89c18c69b9218f68f8570e291ba74772bf0626be344914aade3671e969b4dea2e7741a86ca0c5bc7f2f9abe9e59fee4104a9f397f2aa38c4e4e12062d1523272125a6e24bbd174cd1371407e9b5a4808", 0xc0, 0xfff, 0x1f}], 0x2a0000) 14:48:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x422000, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x8029, 0x3}) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000540)) getpid() r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x7, 0x80100) r2 = add_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="57f4910a404645c36a1d52fb0d5b6c9469035418d973f5d40da69874930eaabcd52bb9622eb839c29e2fb02fb798a5ccad28a9c855ae56f27fb642f7ee140f2959067918a9a9318e4e8f9a521ad601cb6f90c3", 0x53, 0xfffffffffffffffa) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="b8f457c0ed9db4e97e1ce0ff52326bfb8e8a1022e0bb7a9f66bde89c5677e0dfa145ab8dba94da2a7885089b4a6ef61b949b2853508f588b470d90fc493048d4d8883a4206e2fdd3bf1827a588a6628c05fffe8accd6fb31c57b0683abb97489d3c9d86d2ce9526087ae2d5cb8a44da323d606d2164979f46e2ffd143c", 0x7d, r2) sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_deladdr={0x54, 0x15, 0x4, 0x70bd27, 0x25dfdbfb, {0x2, 0x7f, 0x40, 0x920b22a01cb49d57, r3}, [@IFA_ADDRESS={0x8, 0x1, @local}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'vcan0\x00'}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x204}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000090}, 0x40001) 14:48:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x26, 0x101000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000240)={0x7230, 0x4, 0x9, 0x2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000040)=[0x200, 0x8], 0x2, 0x0, 0x100, 0x0, 0x7f, 0x2, {0x3f, 0xffff, 0x7fff, 0x2, 0x100000000, 0x0, 0xffffffffffffffe1, 0x3b, 0x0, 0x6, 0x2, 0xff, 0x1, 0x79372743, "4d590c9f2cbd7b52f9c6856a7ad88e0a8e8ea62bb5c87aa89d5b8bf82b85ddeb"}}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') clock_gettime(0x7, &(0x7f00000007c0)) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0xc001) ioctl$int_out(r0, 0x2, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000800)=0x6, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000740)=ANY=[@ANYBLOB="e0000001ac1414bb0000000003000000ffffffffe0000001ac14140b8afd312e97ab86b838a8402826a214f59255c27b4a86947a7b43eb1bb76b721dc29a25c4c65761e75e78a6a24df78c3a8690c3f2a8184a78"], 0x1c) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000400)) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000280)={0x1, r0, 0x1}) r2 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x1000000) inotify_rm_watch(r0, r2) write(r0, &(0x7f00000002c0)="272aa54328c43c1a2359d1c31012ca965db30f326ccbaa7e025130b30e96fa5802ce7f6bbf3cad205f22348653da06bc7afe0f5c9429f4fef8f3f40e8dde8f7838d5eaff7c9aa3600b4956ff3c969d3ff0b49bad303ac7612767d767b1044bcfa3c1ed591a6df1a2d28bee480a088a4d969b1e7b8afebb429626233a64667b4f3aa49dcaec308e1552cb1c0edb1b984691db3c740aa5172a52083a0233c7dc871127c7fd7c681f3a92a4b4116a3eb305ff3f5d9795b8ec", 0xb7) close(r0) [ 335.444683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.523472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:48:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000040)=0x54) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x0, r3}, 0x10) r5 = fcntl$dupfd(r4, 0x406, r0) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000180)={0x4, [0x5, 0x95c, 0x4, 0xfffffffffffffffd]}) dup3(r2, r4, 0x0) 14:48:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000040)) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) r3 = getegid() r4 = geteuid() fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000480)) fstat(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/fuse\x00', 0x2, 0x0) r10 = geteuid() getgroups(0x9, &(0x7f00000004c0)=[0x0, 0xee00, 0xee01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00]) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000500)={0x340, 0x0, 0x1, [{{0x5, 0x1, 0xffffffffffffffff, 0x1, 0x4, 0x80, {0x2, 0x80, 0x101, 0xfffffffffffffffc, 0x400000000000, 0x155, 0x6, 0xffff, 0x3, 0x8, 0x1f, r2, r3, 0x1ff, 0x10000}}, {0x1, 0x96, 0xb, 0x1, '/dev/loop#\x00'}}, {{0x4, 0x0, 0xc2, 0x8, 0x200, 0x3, {0x4, 0x200, 0x7, 0xa000, 0x5, 0x7, 0x6cdab6bc, 0x8, 0xa73, 0x3, 0x4, r4, r5, 0x4, 0x100000001}}, {0x0, 0x338d, 0xb, 0x7, '/dev/loop#\x00'}}, {{0x5, 0x1, 0x7, 0x5, 0x5, 0x100, {0x0, 0x7fff, 0xfffffffffffffffa, 0x3, 0x10001, 0x7, 0x3, 0xffffffff, 0x4, 0x401, 0x400, r6, r7, 0x1, 0x52}}, {0x1, 0x800, 0x2, 0x81, '%d'}}, {{0x5, 0x1, 0x1, 0x7, 0x1, 0x2, {0x1, 0x7fffffff, 0x4, 0x1, 0x7, 0x80000001, 0x8, 0x100000001, 0x6, 0xffffffffffff8c23, 0x6, r8, r9, 0x2, 0x9}}, {0x6, 0x6, 0x0, 0x4}}, {{0x1, 0x0, 0x3, 0x2, 0xe0, 0x3, {0x3, 0xff, 0x822c, 0x8, 0x8, 0x696c, 0x7, 0x8000000000000, 0x5a9, 0x7, 0x80, r10, r11, 0x8000, 0x36}}, {0x3, 0x3, 0xb, 0x8, '/dev/loop#\x00'}}]}, 0x340) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000000)=0x55) 14:48:55 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') alarm(0x10001) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='ip6_vti0\x00', 0x0) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000240)='logon\x00', &(0x7f0000000280)='ip6_vti0\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r3, &(0x7f0000000140)=0x4) 14:48:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x26, 0x101000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000240)={0x7230, 0x4, 0x9, 0x2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000040)=[0x200, 0x8], 0x2, 0x0, 0x100, 0x0, 0x7f, 0x2, {0x3f, 0xffff, 0x7fff, 0x2, 0x100000000, 0x0, 0xffffffffffffffe1, 0x3b, 0x0, 0x6, 0x2, 0xff, 0x1, 0x79372743, "4d590c9f2cbd7b52f9c6856a7ad88e0a8e8ea62bb5c87aa89d5b8bf82b85ddeb"}}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') clock_gettime(0x7, &(0x7f00000007c0)) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0xc001) ioctl$int_out(r0, 0x2, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000800)=0x6, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000740)=ANY=[@ANYBLOB="e0000001ac1414bb0000000003000000ffffffffe0000001ac14140b8afd312e97ab86b838a8402826a214f59255c27b4a86947a7b43eb1bb76b721dc29a25c4c65761e75e78a6a24df78c3a8690c3f2a8184a78"], 0x1c) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000400)) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000280)={0x1, r0, 0x1}) r2 = inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x1000000) inotify_rm_watch(r0, r2) write(r0, &(0x7f00000002c0)="272aa54328c43c1a2359d1c31012ca965db30f326ccbaa7e025130b30e96fa5802ce7f6bbf3cad205f22348653da06bc7afe0f5c9429f4fef8f3f40e8dde8f7838d5eaff7c9aa3600b4956ff3c969d3ff0b49bad303ac7612767d767b1044bcfa3c1ed591a6df1a2d28bee480a088a4d969b1e7b8afebb429626233a64667b4f3aa49dcaec308e1552cb1c0edb1b984691db3c740aa5172a52083a0233c7dc871127c7fd7c681f3a92a4b4116a3eb305ff3f5d9795b8ec", 0xb7) close(r0) 14:48:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) [ 335.965509] can: request_module (can-proto-0) failed. 14:48:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280), 0x73f2, 0xfffffffffffffffc) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) ioctl$sock_proto_private(r3, 0x89eb, &(0x7f0000000900)="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") bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) write$FUSE_WRITE(r5, &(0x7f0000000140)={0x18, 0x0, 0x7, {0x7f}}, 0x18) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000000000000004fcff", 0x58}], 0x1) dup3(r1, r3, 0x0) [ 336.024295] can: request_module (can-proto-0) failed. 14:48:56 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1000, {}, {0x0, 0x0, 0x0, 0x0, 0x80, 0x1600000000000, "e1a8fe22"}, 0x1, 0x7, @userptr=0x4, 0x1ff}) 14:48:56 executing program 1: r0 = socket(0xf, 0x6, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) r1 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x3, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r1, 0x127a, &(0x7f0000000140)) 14:48:56 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x45, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) 14:48:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r1, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:56 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f00000000c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x12}}, 0x6e) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a8040000000000004001000000000000c0030000c0030000c0030000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008349d19db2ffe8b0216400000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb0000000000000000000000000000000000000000000000000000e0000001ac1414aa00000000000000000000000000000000000000000000000014ddeb6a7016000000000000000000000000000000000000000000000000000000000000000000002c5c197c87db0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079616d300000000000000000000000007663616e30000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00040010000008c34abe9000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb0000000000000000000000000000000000000000000000000000ac1e0000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000002e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000feffffff0000000055d6a06fc4eb55f97f74480e3cd8174786d87a1f882c92548e78c276a319b57fdf6b6577d2dd6844c7386f677749588ad7def74b4535878238949f88023d70676da340f963e18c3e1b6e9b23aaa9a70666174a45ce622e3b997ed911533a91470710756abcd47dae92814b770292bc685385e293f7aca794738683ffd3946724f71b115c2efde92201613f1f000000"], 0x4f8) close(r1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r2, r0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000880)={&(0x7f0000000040), 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x134, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x55b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) r6 = inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x22000000) inotify_rm_watch(r4, r6) ioctl$TCFLSH(r0, 0x540b, 0x9) 14:48:56 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7ffffffd, 0x0) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmdt(r1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x20323159, 0x280}) 14:48:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) fsetxattr$security_ima(r3, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v2={0x5, 0x2, 0x11, 0x3, 0xa7, "f19df0164a806e66e6bc6e58398dd00f1c2b265618379a9eba589e0bd97440365ad8c8c693cfaea6e2b9db28200085b5db45e28dcc3168e8924b3605dc9f2aaf457b5e9b74a1a6408ae604c4294314b43f6fc8647b2c6d80eb22c45cc7c567b5ef0603ea6b847f422100d624ec7941feb5cbfdb4c8d5cd04771c80d4fd5893a533cb7432c0e0ee8884e1c1b7082df7ba373c7c39c58eaa8524548712adb21a16699d86bcce88f8"}, 0xb1, 0x3) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000100)="9117b6363901f2", 0x7) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r1, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x9, 0x2}]]}}}]}, 0x7}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 14:48:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="210000000b0f2e24ca0000000000030000000400050033909c44a94888575db5632fc5d525cee5940e45161fe9e7eb"], 0x18}}, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000001240)={0x0, 0x0, 0x2080}) 14:48:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070") setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x103200, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='proc,{-em0nodev^\x00'}, 0x30) sched_setparam(r3, &(0x7f0000000180)=0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r2, &(0x7f0000000100), 0x0}, 0x18) 14:48:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x3e96}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') lseek(r2, 0x100000000, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0xfffffffffffffff9, 0x2, 0x2, "f661490c025899146407cf68806f6cf67e5fafbdd4e48771e26f02ba01431438", 0x3239565d}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000008c0)=0x200, 0xfe7321d1d1844244) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x0, r4}, 0x10) dup3(r3, r5, 0x0) 14:48:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffdffffffffc0, &(0x7f0000000040)="31ae799981ba413f") 14:48:57 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x6c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x2, 0x3f, 0x6, 0x50}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x7, 0x2, 0x1}, &(0x7f0000000200)=0x10) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:57 executing program 3: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) write(r0, &(0x7f00000001c0)="24ac068c1e", 0x5) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c621202e2f66696c653020757365722621262a366d6e657430760d3e7889016e8bd4e17f2b7e65623112776c616e3047504c63704a35531bf07b6359ec54de7573656e65742f7274365f73746574730020a72440766d6e656b657972696e676b657972696e67637175734a61c231643573756c7b0600000076766d6e6574306e6f6431eaa1a5e3"], 0x87) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000080)={r1, r2+30000000}) 14:48:57 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x107, 0x100000001, 0x8000000001}, 0x2c) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0xfffffffffffffff8, 0x6, 0x10001, 0x6, [], [], [], 0x4, 0xa39, 0x9, 0x0, "7c02dbdc73d010ee0491443d9bad47d4"}) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x740000, 0x0, 0x20820000, r1}, 0x2b) 14:48:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0xa, 0xc, 0xc, "aa2094c2ef3522f4c798849ceb7633f70b27d6da5038c972e5031c073deafce3adab70cefdd0f9c0d8a5d112f43f9d0e08289ddbc1ddc606666e5e46259106b1", "7ef1184c34c561c18687721eec9b0063847fb0153b259dcbccb8709689eb364d4b7bad75b32a3f9e3b3e216801d1abe81ea96725742a3f1f480cb1bc34b3e4cf", "01412d0001d51aacadf5f20c435fe84318a3ef7f316e889de94bd5eb82c311d0", [0x5, 0x2]}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x6, 0x4) 14:48:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x3c, @local, 0x4e23, 0x2, 'sed\x00', 0x2, 0x4, 0x54}, 0x2c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:57 executing program 3: syz_emit_ethernet(0x37, &(0x7f0000000340)={@local, @broadcast, [], {@arp={0x806, @generic={0x325, 0xfe, 0x6, 0x5, 0x3, @dev={[], 0xe}, "30a6d554e3", @remote, "4c4e3196b3746c2137041ca21406aa9c"}}}}, 0x0) 14:48:57 executing program 4: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:58 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000000c0), 0x4) 14:48:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000040)) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) 14:48:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x7, 0x1, 0x3ff}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000008024, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_int(r2, 0x29, 0x15, 0x0, 0x317) close(r2) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000100)={0xb, 0x0, {0x0, 0xffff, 0x9c2, {0x9, 0x7}, {0x2, 0x5}, @period={0x5b, 0x40, 0x7, 0x0, 0x1, {0x284, 0x9, 0x3, 0x100000000}, 0x4, &(0x7f00000000c0)=[0x4, 0x4, 0x8000, 0x7fffffff]}}, {0x52, 0x7f, 0x100000000, {0x80000000, 0x67}, {0x0, 0x2}, @rumble={0x7, 0x9}}}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) close(r1) 14:48:58 executing program 4: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x127280) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000001c0), 0x0) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) dup3(r1, r3, 0x0) 14:48:58 executing program 4: r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f000086eff0)={0x2, 0x4e22, @multicast2}, 0x10) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @loopback}, 0xfffffffffffffe70) 14:48:58 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x88001) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000200)="6abdf2d6c854d6816e8cb1c8a4ee6177aae952d6a4bdec15359fd9b82356a7b8cd43833fd4f3a076494fc72afaa3da765ea63a37eb1e747224d0376b10f5c1a3ea361e7d3fe805f051c55a82b186567350e71826ce2229b5b7d691cc79cf160daf22054d08fd2b2e03ab57134f50cf9b53bd4b69f7080e", 0x77) r1 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000001c0)=ANY=[@ANYBLOB="31000000000036f2abb875359dad5683180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r1, 0x127a, &(0x7f0000000000)) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000100)={0x0, @frame_sync}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x5) 14:48:58 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x8000000000003, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x200) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xaa4322e, 0x7fe0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r3, 0xce, "973671ed64a5dbd5d35aee83261004342a7b164e1e76a4db6d370a1c29d5386f8bda70b1482addbc2e7327eaf17f1704a54f1a6127ee1fddace090888a1f3987f4c10754d1b040b6a785b1ad327308e37814fade43e2eb0e3428d0851381c0a9583695f729b9266c6ad3549a713fe2d2b5c6fd25f01e9399a301fd950826169f7b963a9fd10d221c76495f5251889af8fddd5c3e583202b8905ab91e10c5572ddecfe987437b326e68c48154bdde8fcf5ba6d42ffbb66ca43fca99a6496115857719b56db4cb4f7c0a362acfd9a4"}, &(0x7f0000000240)=0xd6) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) close(r1) 14:48:58 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x40001, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x900, 0x0) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000140)={{0x1, 0x5, 0x5, 0x9, 'syz0\x00', 0x1ff}, 0x6, 0x30, 0x2, r4, 0x1, 0x200, 'syz1\x00', &(0x7f0000000100)=['vcan0\x00'], 0x6, [], [0xc06, 0x7, 0x4, 0x8]}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x200070, 0x4) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000340)={0x7, {0xe48, 0x9, 0x2, 0xf7d1}}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000280)={0x2c, 0xffffffffffffffff, r1, 0x10000000002f, r2}, 0x10) dup3(r0, r2, 0x0) 14:48:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x218a9106a2342ea, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0xfffffe92) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2}}, 0x20) close(r0) 14:48:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:58 executing program 2: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/llc\x00') ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/23) io_setup(0x5fa3, &(0x7f00000002c0)) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)=""/14) 14:48:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x400, 0xfffffffff7fffffe) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r0, 0x127a, &(0x7f0000000000)) readahead(r0, 0x8001, 0x6) 14:48:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0xc6) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/17, 0x2000, 0x1000, 0x101}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x0, r2}, 0x10) r5 = dup3(r1, r3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 14:48:59 executing program 4: syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10) 14:48:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x6, {0x6, 0x7, 0x100000000, 0x7}}) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x2}) 14:48:59 executing program 1: r0 = fcntl$getown(0xffffffffffffffff, 0x9) waitid(0x2, r0, &(0x7f0000000040), 0x74b2ef11f53ad181, &(0x7f00000000c0)) r1 = add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="28e2b41b3c07d142eaf63b7f7f921756e2", 0x11, 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='/dev/loop#\x00', 0xfffffffffffffffc) keyctl$unlink(0x9, r1, r2) r3 = syz_open_dev$loop(&(0x7f0000001200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r3, 0x127a, &(0x7f0000000000)) 14:48:59 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x90000, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') write$P9_RSYMLINK(r3, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x10, 0x1, 0x4}}, 0x14) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0xb}}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x7539, 0x6560}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0x1b7e}}, 0x8, 0x5, 0x7, 0x1f, 0x80}, &(0x7f00000001c0)=0x98) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r4, 0x0) symlinkat(&(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file0\x00') sendfile(r2, r3, &(0x7f0000000040)=0x100000, 0x8001) [ 339.467049] ================================================================== [ 339.474523] BUG: KMSAN: uninit-value in __se_sys_waitid+0x32c/0xb30 [ 339.481442] CPU: 1 PID: 12426 Comm: syz-executor.1 Not tainted 5.0.0+ #12 [ 339.488388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.497753] Call Trace: [ 339.500389] dump_stack+0x173/0x1d0 [ 339.504052] kmsan_report+0x12e/0x2a0 [ 339.507884] kmsan_internal_check_memory+0xa62/0xb80 [ 339.513138] kmsan_check_memory+0xd/0x10 [ 339.517239] __se_sys_waitid+0x32c/0xb30 [ 339.521344] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 339.526827] ? prepare_exit_to_usermode+0x114/0x420 [ 339.531860] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 339.537075] ? syscall_return_slowpath+0xb2/0x650 [ 339.541949] __x64_sys_waitid+0x62/0x80 [ 339.545945] do_syscall_64+0xbc/0xf0 [ 339.549697] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 339.554896] RIP: 0033:0x458079 [ 339.558097] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 339.577018] RSP: 002b:00007ff0c0dbac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 339.584744] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458079 [ 339.592025] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000002 [ 339.599303] RBP: 000000000073bf00 R08: 00000000200000c0 R09: 0000000000000000 [ 339.606581] R10: 74b2ef11f53ad181 R11: 0000000000000246 R12: 00007ff0c0dbb6d4 [ 339.613945] R13: 00000000004c6e22 R14: 00000000004dc670 R15: 00000000ffffffff [ 339.621248] [ 339.622878] Local variable description: ----__pu_val120.i@__se_sys_waitid [ 339.629802] Variable was created at: [ 339.633527] __se_sys_waitid+0x18c/0xb30 [ 339.637597] __x64_sys_waitid+0x62/0x80 [ 339.641566] [ 339.643200] Bytes 0-3 of 4 are uninitialized [ 339.647619] Memory access of size 4 starts at ffff888034e7fe78 [ 339.653588] ================================================================== [ 339.660952] Disabling lock debugging due to kernel taint [ 339.666413] Kernel panic - not syncing: panic_on_warn set ... [ 339.672311] CPU: 1 PID: 12426 Comm: syz-executor.1 Tainted: G B 5.0.0+ #12 [ 339.680645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.690009] Call Trace: [ 339.692624] dump_stack+0x173/0x1d0 [ 339.696273] panic+0x3d1/0xb01 [ 339.699521] kmsan_report+0x293/0x2a0 [ 339.703355] kmsan_internal_check_memory+0xa62/0xb80 [ 339.708525] kmsan_check_memory+0xd/0x10 [ 339.712600] __se_sys_waitid+0x32c/0xb30 [ 339.716993] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 339.722545] ? prepare_exit_to_usermode+0x114/0x420 [ 339.727598] ? kmsan_get_shadow_origin_ptr+0x70/0x490 [ 339.732810] ? syscall_return_slowpath+0xb2/0x650 [ 339.737679] __x64_sys_waitid+0x62/0x80 [ 339.741676] do_syscall_64+0xbc/0xf0 [ 339.745416] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 339.750611] RIP: 0033:0x458079 [ 339.753812] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 339.772728] RSP: 002b:00007ff0c0dbac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 339.780440] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458079 [ 339.787801] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000002 [ 339.795081] RBP: 000000000073bf00 R08: 00000000200000c0 R09: 0000000000000000 [ 339.802359] R10: 74b2ef11f53ad181 R11: 0000000000000246 R12: 00007ff0c0dbb6d4 [ 339.809633] R13: 00000000004c6e22 R14: 00000000004dc670 R15: 00000000ffffffff [ 339.817733] Kernel Offset: disabled [ 339.821378] Rebooting in 86400 seconds..