Warning: Permanently added '10.128.0.103' (ECDSA) to the list of known hosts. 2018/11/11 23:55:39 fuzzer started syzkaller login: [ 87.540729] cc1 (6615) used greatest stack depth: 54384 bytes left [ 88.070261] as (6616) used greatest stack depth: 53904 bytes left 2018/11/11 23:55:44 dialing manager at 10.128.0.26:42475 2018/11/11 23:55:44 syscalls: 1 2018/11/11 23:55:44 code coverage: enabled 2018/11/11 23:55:44 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/11 23:55:44 setuid sandbox: enabled 2018/11/11 23:55:44 namespace sandbox: enabled 2018/11/11 23:55:44 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/11 23:55:44 fault injection: enabled 2018/11/11 23:55:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/11 23:55:44 net packed injection: enabled 2018/11/11 23:55:44 net device setup: enabled 23:58:30 executing program 0: socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 255.857430] IPVS: ftp: loaded support on port[0] = 21 [ 257.841129] ip (6652) used greatest stack depth: 53696 bytes left [ 258.262160] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.268651] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.277520] device bridge_slave_0 entered promiscuous mode [ 258.419494] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.426134] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.435165] device bridge_slave_1 entered promiscuous mode [ 258.574299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 258.712597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 258.870597] ip (6666) used greatest stack depth: 53664 bytes left [ 259.220172] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 259.367946] bond0: Enslaving bond_slave_1 as an active interface with an up link 23:58:34 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) [ 259.656064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 259.663240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.319806] IPVS: ftp: loaded support on port[0] = 21 [ 260.415698] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 260.423902] team0: Port device team_slave_0 added [ 260.708644] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 260.717074] team0: Port device team_slave_1 added [ 261.008112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 261.015257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.024382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.218364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 261.225587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.234627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.416332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 261.424173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.433587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.690795] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 261.698707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.707860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.796434] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.803648] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.812387] device bridge_slave_0 entered promiscuous mode [ 263.991739] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.998231] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.007277] device bridge_slave_1 entered promiscuous mode [ 264.262221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 264.285537] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.292166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.299137] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.305766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.314760] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 264.472909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 264.721840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.129208] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 265.379549] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 265.616281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 265.624798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.834527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 265.841763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 23:58:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) [ 266.533465] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 266.541849] team0: Port device team_slave_0 added [ 266.856100] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 266.864266] team0: Port device team_slave_1 added [ 267.160039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 267.167249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.176289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.422616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 267.429697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.438855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.514813] IPVS: ftp: loaded support on port[0] = 21 [ 267.769488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 267.777667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.787001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.978872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 267.986762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.996161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.046708] ip (6843) used greatest stack depth: 53216 bytes left [ 271.355135] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.361723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.368705] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.375332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.384733] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 272.161888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.646636] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.653216] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.661824] device bridge_slave_0 entered promiscuous mode [ 272.917394] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.923985] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.932721] device bridge_slave_1 entered promiscuous mode [ 273.244698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 273.567059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 274.334548] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 274.596147] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 274.887353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 274.894586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.157485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 275.164688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 23:58:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x706000, 0x0, 0x2}}) [ 275.962054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.151850] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 276.160055] team0: Port device team_slave_0 added [ 276.461825] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 276.469956] team0: Port device team_slave_1 added [ 276.708852] IPVS: ftp: loaded support on port[0] = 21 [ 276.882806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 276.889942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.899062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.226372] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 277.262832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 277.269896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.279022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.563588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 277.571205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.580399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.946297] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 277.954179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.963567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.530122] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 278.537057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.545193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.975732] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.861852] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.868365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.875431] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.882047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.890838] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 282.252074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.920601] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.927308] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.936054] device bridge_slave_0 entered promiscuous mode [ 283.323359] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.329850] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.338665] device bridge_slave_1 entered promiscuous mode [ 283.700051] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 284.057724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 285.226065] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 285.479820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.592372] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 285.957137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 285.964401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.298326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 286.305537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.779726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 287.377634] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 287.386084] team0: Port device team_slave_0 added 23:59:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2b0, 0x4c000000) utimensat(r0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}, 0x100) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) [ 287.771399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 287.780887] team0: Port device team_slave_1 added [ 288.158290] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 288.164860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.173194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.313456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 288.320516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.329609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.738673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 288.746066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.755001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.069314] IPVS: ftp: loaded support on port[0] = 21 [ 289.261349] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 289.269223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.278602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.306282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:59:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x64) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) [ 289.730603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 289.738432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.747694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.927296] 8021q: adding VLAN 0 to HW filter on device team0 23:59:05 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x24000) read(r0, &(0x7f0000000180), 0x0) finit_module(r0, &(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0xca, ""/202}) 23:59:05 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x7f) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x7, "7caa56c09c36e8"}, &(0x7f0000000080)=0x2b) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 23:59:06 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x109081) write$P9_RREADDIR(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="490000002901000800000010040000000000000000002000090000000000000084205bd03b5216f56dec2307002e2f66696c6530480100000005000000000000000000010000000000"], 0x49) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000040b060501ff0080ff0a00002f0a0000000c000100060000007d0a00010c0007f3dff792d7f500b20200000022ff02f10000"], 0x2c}}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x30, r1, 0x0) 23:59:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x80400000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x0, &(0x7f0000000080)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0x40000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000001c0)={{0x0, 0x3, 0x8, 0x1, 0x8}, 0xf02f, 0x5cb}) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000100)={0x4, 0xa5, 0x2, 0x7, 0x15, 0x2}) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000240)={{0x1, 0x3, 0x75, 0x3, 0x1}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000810000)={0x0, 0x2}, 0x3a) 23:59:07 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1f, 0x0, "8c0eb7912a86ff3e23764a3c01af55410c3d3f813a4513a691be997c7ee1235982875b8ae5c27fc73eb383beca956b51a34191ad3a9f70ebee5f1d003dcd4427c273be993dd363cc8f36cc7f609a2371"}, 0xd8) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000200)) fchmod(0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000580), 0x4) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000140)}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(r3, 0x6, 0x16, &(0x7f0000000080), 0x4) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) 23:59:07 executing program 0: r0 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x20, 0x40400) timer_gettime(0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3ff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2010000000203, 0x0) creat(&(0x7f0000001cc0)='./file0\x00', 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x800000000000, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0xffff, 0x5, 0x7}) setsockopt(r1, 0x10d, 0x1, &(0x7f0000000040), 0x0) [ 293.076861] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 293.382621] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app 23:59:08 executing program 0: unshare(0x24020400) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f00000001c0)=[@in={0x2, 0x4e23}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x1e}, 0x100}, @in6={0xa, 0x4e21, 0x8001, @local, 0x3}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0x3, 0x0, 0x80000001, 0x3}, &(0x7f00000002c0)=0x18) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup(r2) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000040)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000100)=""/133, &(0x7f0000000000)=0x85) [ 294.721339] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.727924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.735047] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.741554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.750327] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 295.072161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.886304] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.892893] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.901543] device bridge_slave_0 entered promiscuous mode [ 296.210536] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.217115] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.225817] device bridge_slave_1 entered promiscuous mode [ 296.578899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 296.945866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 298.048752] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 298.408116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 298.429304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.729837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 298.737436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.165876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 299.173180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 23:59:14 executing program 1: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5}) r1 = epoll_create(0x81) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x30c42619907e03e8}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x36f, &(0x7f0000000040), 0x8) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) [ 299.713351] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 300.210283] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 300.218891] team0: Port device team_slave_0 added [ 300.520669] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 300.528876] team0: Port device team_slave_1 added [ 300.749662] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 300.756238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.764392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.781182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 300.789258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.798231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.077753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 301.085061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.093900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.285688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 301.293505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.302632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.569935] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.580169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 301.588003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.597157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.492113] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.499119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.506232] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.512797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.521498] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 304.528242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.233874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.049804] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 23:59:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) [ 306.937251] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 306.943867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.952023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.570003] 8021q: adding VLAN 0 to HW filter on device team0 23:59:26 executing program 3: quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet(0x2b, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x0, @local, 0x1}}, 0x0, 0xffffffffffffffff, 0x1, "a77768c2a7645bc401001d70912dda0c63dc036702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb232245f2604b9e07b8ab79ec15ef3818a17900"}, 0x36) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x204e23, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003140)) r2 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x400027f, 0x0, &(0x7f0000003180)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000840), 0x2c3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @remote}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x6) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400001, 0x0) utimensat(r4, 0xfffffffffffffffd, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) connect(0xffffffffffffffff, &(0x7f00000031c0)=@ax25={0x3, {"48be363c61f9c2"}, 0x2}, 0x371) syslog(0x0, &(0x7f00000005c0)=""/228, 0xff41) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080), 0x271) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'eql\x00', r3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 311.262964] hrtimer: interrupt took 169796 ns [ 311.683452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.974934] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 312.270111] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 312.276461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.284948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.575580] 8021q: adding VLAN 0 to HW filter on device team0 23:59:29 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) recvmsg(r0, &(0x7f0000000540)={&(0x7f00000003c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)=""/91, 0x5b}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x7fffff) 23:59:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="660f383cfc66b8d1000f00d0c744240000680000c744240237250000c7442406000000000f011424c4e255bcf3c744240008000000c74424029bd1d9d7c7442406000000000f011c2465da10b9fd0800000f32c4e2450096002000000f300f0130", 0x61}], 0x1, 0x0, &(0x7f0000000380)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = accept4(r0, &(0x7f0000000040)=@ethernet={0x0, @link_local}, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000140)={0x0, 0x2}, 0x2) 23:59:29 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) ptrace(0x4208, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2082, 0xb) ioctl$NBD_DO_IT(r1, 0xab03) syslog(0x0, &(0x7f0000000080)=""/119, 0x77) r2 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x1, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x204, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x8000) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000280)={0x0, 0xfff, [], @bt={0x80000000, 0x7, 0x3b2, 0x3, 0xffff, 0x9, 0x11, 0x8}}) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000340)={0x2, 0x5, 0x939a, 0x80000, r1}) ioctl$EXT4_IOC_RESIZE_FS(r4, 0x40086610, &(0x7f0000000380)=0xfffffffffffffffa) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000400)={0x9, {{0xa, 0x4e23, 0x81, @mcast2, 0xfffffffffffffdc4}}, {{0xa, 0x4e21, 0xd, @local, 0x400}}}, 0x108) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x7, 0x400, 0x3ec400000, 0xc0000000000000}, &(0x7f0000000600)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000640)={r6, 0x5}, &(0x7f0000000680)=0x8) r7 = syz_open_procfs(r0, &(0x7f00000006c0)='net/udp\x00') ioctl$KVM_SIGNAL_MSI(r7, 0x4020aea5, &(0x7f0000000700)={0x7000, 0x10004, 0x6, 0x10000, 0x9}) ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000000740)={'veth0_to_team\x00', 0x8}) ioctl(r5, 0x7ff, &(0x7f0000000780)="e92b0772813089165dadf3c992b887f8d703") socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000007c0)) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, &(0x7f0000000880)={{&(0x7f0000000800)=""/21, 0x15}, &(0x7f0000000840), 0x20}, 0x20) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000008c0)=0x800, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000900)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000980)={0x4, 0x8, 0xfa00, {r8, 0x2}}, 0x10) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000009c0)={0x0, @reserved}) setsockopt$inet_buf(r7, 0x0, 0x23, &(0x7f0000000a80)="8315a1cd3da48d79747287f3341ce22eb7615e9fb78ce88ffd1eae169ee44aa5299b2c1dcef4ff102385be21fa574e9b1a5fc69b17f2a001d61654dcce79361ddb701c4c7238341d898d7c20187cf38f381e885d6be19d1ca912d291306c9d7acf9b88c9d7ef29f0f82b7c04c8b91e7eaf18fc4ca0578a92cb8a466adfa0116c96c6db022c9b9027cffcb2cc81f7d1ec8fdefef7d4f16c9a60acde46c0d393", 0x9f) 23:59:29 executing program 2: clone(0x4008501, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x67e, 0x4) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r1, &(0x7f0000000040), 0x1e8, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000600)=0x1ff, 0x4) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x0, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f00000000c0)) 23:59:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f00000000c0)=""/53, 0xffffffffffffff1b, &(0x7f0000000040)=""/82, 0x2}}, 0x144) close(r0) 23:59:29 executing program 3: quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet(0x2b, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x0, @local, 0x1}}, 0x0, 0xffffffffffffffff, 0x1, "a77768c2a7645bc401001d70912dda0c63dc036702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb232245f2604b9e07b8ab79ec15ef3818a17900"}, 0x36) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x204e23, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003140)) r2 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x400027f, 0x0, &(0x7f0000003180)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000840), 0x2c3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @remote}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x6) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400001, 0x0) utimensat(r4, 0xfffffffffffffffd, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) connect(0xffffffffffffffff, &(0x7f00000031c0)=@ax25={0x3, {"48be363c61f9c2"}, 0x2}, 0x371) syslog(0x0, &(0x7f00000005c0)=""/228, 0xff41) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080), 0x271) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'eql\x00', r3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 314.707254] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 314.719293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:59:30 executing program 4: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, &(0x7f0000000480)) setxattr$security_ima(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000001c0)=@ng, 0x2, 0x0) 23:59:30 executing program 3: clone(0x13102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x20000801, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 23:59:30 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data}) 23:59:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x4000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x2e9) 23:59:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 23:59:30 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x2b0, 0x4c000000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0x6) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) 23:59:30 executing program 3: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=""/16, &(0x7f0000000200)=0x10) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f00000007c0)) renameat2(r0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cdd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x1, 0x0, 0x10000101) [ 315.867817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 315.942210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 23:59:31 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) [ 316.407793] IPVS: ftp: loaded support on port[0] = 21 [ 317.864117] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.870560] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.878747] device bridge_slave_0 entered promiscuous mode [ 317.957606] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.964187] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.972162] device bridge_slave_1 entered promiscuous mode [ 318.051036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 318.128469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 318.371960] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 318.454267] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 318.535859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 318.543012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.623193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 318.630163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.868355] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 318.876047] team0: Port device team_slave_0 added [ 318.954431] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 318.962510] team0: Port device team_slave_1 added [ 319.039746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.118797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.201139] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 319.208515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.217959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.291338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 319.298787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.308151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.173064] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.179616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.186607] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.193090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.200897] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 320.512155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.524664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.820521] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 324.119277] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 324.125658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.134037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.431412] 8021q: adding VLAN 0 to HW filter on device team0 23:59:41 executing program 5: 23:59:41 executing program 0: r0 = socket$packet(0x11, 0x1000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="030400000708000000000000fff59e1dfa93827d29fb3780398d5375000000007929301ee616d5c01843e06590080053c08385472da7222a2bb42f2dbd94c3b50004000000000000005dffff00000000aeba53429a4bae1356642494a7b5020000000000", 0x64, 0x0, &(0x7f0000000140)={0xa, 0x200800800, 0x6, @dev}, 0x1c) 23:59:41 executing program 1: 23:59:41 executing program 4: 23:59:41 executing program 3: 23:59:41 executing program 2: 23:59:41 executing program 1: 23:59:41 executing program 4: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000003c0)=ANY=[]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{}, 'port1\x00', 0x19, 0x0, 0x0, 0x3, 0x80000000, 0xe0000, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x5) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f00000005c0)=""/163) poll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x2002}], 0x2, 0x0) munlockall() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000380)=""/85, &(0x7f0000000240)=0x55) 23:59:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x18000, 0x0) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) fstatfs(r2, &(0x7f0000000040)=""/2) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0xa24, 0x4) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() getresuid(&(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)=0x0) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)={0x3e8, 0x0, 0x6, [{{0x6, 0x2, 0x0, 0x7, 0x7fffffff, 0x4, {0x0, 0x7fff, 0x6, 0xd01e, 0x42, 0xfff, 0x80000001, 0x6, 0x200000000000000, 0x960, 0x3, r3, r4}}, {0x3, 0x6, 0xc, 0xfffffffffffffffb, '/dev/rfkill\x00'}}, {{0x1, 0x2, 0xffffffffffffffff, 0x80000000, 0xfffffffffffffff7, 0x6, {0x6, 0x3, 0x1, 0x7, 0x3f, 0xffffffff, 0x0, 0x6, 0x9, 0x2, 0x7ff, 0x0, r5, 0x3, 0x10000}}, {0x2, 0x7, 0xc, 0x7fff, '/dev/rfkill\x00'}}, {{0x1, 0x1, 0xea3, 0x5, 0x5, 0x4, {0x2, 0x1, 0x0, 0x0, 0x3, 0x2, 0x9, 0x7, 0x696, 0x200, 0x6, 0x0, r6, 0x4, 0x400}}, {0x3, 0x3714, 0xc, 0x7fffffff, '/dev/rfkill\x00'}}, {{0x0, 0x2, 0x5699dad3, 0x3c, 0x1, 0x1ff, {0x6, 0x6bbd, 0x7, 0x6, 0xc9d, 0x9, 0x27c, 0x9, 0x4, 0xab, 0x0, r7, r8, 0x6, 0x9}}, {0x2, 0x7, 0x7, 0x0, '$eth1&^'}}, {{0x3, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x7fffffff, {0x6, 0x9, 0x6, 0x6, 0x0, 0x6, 0x3, 0x5, 0x6, 0x5, 0x9, 0x0, r9, 0x8, 0x5}}, {0x3, 0x6, 0x1, 0x1ff, "a9"}}, {{0x4, 0x1, 0x2, 0xee2, 0x3, 0x81, {0x1, 0x5c, 0x7, 0x800, 0x101, 0x0, 0x10000, 0x5, 0x5, 0x9, 0x8, r10, r11, 0x3f, 0xfffffffffffffff8}}, {0x6, 0xa7d6, 0x5, 0x400, 'wlan0'}}]}, 0x3e8) 23:59:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000240)={0x10, 0x4170000}, 0x517, &(0x7f0000001400)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0xb8}}, 0x0) 23:59:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f00000000c0)=""/53, 0xffffffffffffff1b, &(0x7f0000000040)=""/82}}, 0x144) close(r0) 23:59:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="660f383cfc66b8d1000f00d0c744240000680000c744240237250000c7442406000000000f011424c4e255bcf3c744240008000000c74424029bd1d9d7c7442406000000000f011c2465da10b9fd0800000f32c4e2450096002000000f300f0130", 0x61}], 0x1, 0x0, &(0x7f0000000380)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = accept4(r0, &(0x7f0000000040)=@ethernet={0x0, @link_local}, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000140)={0x0, 0x2}, 0x2) 23:59:42 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fd) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r7 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) r9 = geteuid() getgroups(0x6, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0x0, 0x0, 0xee01]) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000540)=[0xee00, 0xee01, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x1}, [{0x2, 0x2, r4}, {0x2, 0x4, r5}, {0x2, 0x2, r6}, {0x2, 0x4, r7}, {0x2, 0x5, r8}, {0x2, 0x1, r9}], {0x4, 0x4}, [{0x8, 0x3, r10}, {0x8, 0x2, r11}, {0x8, 0x0, r12}, {0x8, 0x0, r13}], {0x10, 0x3}}, 0x74, 0x2) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x8000a0, 0x700, 0x0, 0x0, 0x4, 0x0, 0x400000000000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="580000000000000014010000090000000000000000000000", @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcf082184533f6a132b87d083ccb62aa2965c79f44584d25602accc1ce71a085d69b88944bc5edd09b4054f41de904314d270ed7fa5c0e1712b647aac956aa4d6b5f970294bb8e3feccb525c6b0845f75c8f7dd02358f5186869b6bb80027fe43b8a3fa0b9c9af17daf90c78fdd335d32214d6c75570b649c9a78312c0c6154d38c14232782877779c04275671d24d377274039b9a758a7ba4bed6c1b3ae0c6"], 0x58}, 0x0) 23:59:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) [ 327.386186] atomic_op 000000001d07695a conn xmit_atomic (null) 23:59:42 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x5) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = dup2(r1, r0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 23:59:42 executing program 2: unshare(0x30000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000000c0)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20402, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)) r2 = dup(r0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r2}) 23:59:42 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fd) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r7 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) r9 = geteuid() getgroups(0x6, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0x0, 0x0, 0xee01]) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000540)=[0xee00, 0xee01, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x1}, [{0x2, 0x2, r4}, {0x2, 0x4, r5}, {0x2, 0x2, r6}, {0x2, 0x4, r7}, {0x2, 0x5, r8}, {0x2, 0x1, r9}], {0x4, 0x4}, [{0x8, 0x3, r10}, {0x8, 0x2, r11}, {0x8, 0x0, r12}, {0x8, 0x0, r13}], {0x10, 0x3}}, 0x74, 0x2) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x8000a0, 0x700, 0x0, 0x0, 0x4, 0x0, 0x400000000000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="580000000000000014010000090000000000000000000000", @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcf082184533f6a132b87d083ccb62aa2965c79f44584d25602accc1ce71a085d69b88944bc5edd09b4054f41de904314d270ed7fa5c0e1712b647aac956aa4d6b5f970294bb8e3feccb525c6b0845f75c8f7dd02358f5186869b6bb80027fe43b8a3fa0b9c9af17daf90c78fdd335d32214d6c75570b649c9a78312c0c6154d38c14232782877779c04275671d24d377274039b9a758a7ba4bed6c1b3ae0c6"], 0x58}, 0x0) 23:59:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) [ 328.041532] atomic_op 00000000c596d9bc conn xmit_atomic (null) 23:59:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r1, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="e5003dd0f7fa8ac33c064c79d000505d15dde1b1284b6ba98ca856df66528168cd248a228c1d60474bd5e226396515c9ebeb614235fa28e07e6f73c25418caab7117281f401ccf79523c8e0f9147a70b2fd76a4b0c41f4f038d7d8d112ca672112d6642e71fdd1237c08ba69b033d2d18e3ebec585ef57ca8461bf8468bbfcda8037d03d2516f14099709e14cc8dace54150bcab5ba4640fd7c116", 0x9b) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x63, "25358ae57fac0d9ea50712d9df5185b78328d9836902232725da3cb0d3b114f3899c25c473ca2b4d87550f91f4d1283f145c1a359e8752d3556e6c87d83caf01b2c17fbfef74dc9deb4f938c7279b8289f06becaa44bdbaa8dcc69be0254b929c29b1e"}, &(0x7f0000000140)=0x6b) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000380)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)={r4}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r6, 0x8}}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r5, 0x8, 0x1f, 0x7fff}, 0x10) 23:59:43 executing program 5: unshare(0x8000400) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000140)={0x3, 0x1, 0x8001, 0x2}) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedsend(r2, &(0x7f00000000c0), 0xffffffffffffffd7, 0x0, &(0x7f0000000040)) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000080)=0x8001, &(0x7f00000000c0)=0x1) 23:59:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x9c7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r2, 0x7fff}, &(0x7f00000001c0)=0x8) r3 = epoll_create1(0x0) connect(r1, &(0x7f0000000080)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000cd8ff4)) listen(r0, 0x3ff) epoll_wait(r3, &(0x7f00000002c0)=[{}], 0x1, 0x0) 23:59:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f00000000c0)=""/53, 0xffffffffffffff1b, &(0x7f0000000040)=""/82}}, 0x144) close(r0) 23:59:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x80) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f00000000c0)=""/53, 0xffffffffffffff1b, &(0x7f0000000040)=""/82}}, 0x144) close(r0) 23:59:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000140), 0x0, r4}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000280), 0x0, r4, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 23:59:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000002200)=""/4096, 0xffffffffffffffc0}], 0x1, 0x0) 23:59:44 executing program 2: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000000) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x8000, 0x200) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8) inotify_rm_watch(r1, r2) 23:59:44 executing program 3: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000000c0)) 23:59:44 executing program 5: r0 = socket(0x10, 0x802, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x80000001, 0x800) write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x80, 0xfffffffffffffff9, 0xc520, 0x6, 0x2, 0x5, "247bb8ae50eb97267ad76987328487e0ec6df3170cc43cd8fa5819f95058c7866974159c9f6628537e1081b6c7c8f70a27dc108398cf2e234e996553777d86415794153266a282a3a7ad99a5e474dca1363bf1bd5a9119d377cfdb4b62876daa1c83a89a0d2a6bea8acb7a631d4226c5ff8558f2e00792b36f207317e6a69231"}, 0x198) write(r0, &(0x7f0000000040)="240000001a0025f0116bbc04fef71f1c22b30fb95aaddb8d8000080008000900ec0062e74dc41462a55a155ce4d6a3cd422600001bc3c1f272d4245ba53889d202386234b5f9d1e435e8222bf4a05f4af49f871066986b704f28f39ab07f0cb0b41bad4de25923899f1521431dc381ad554a09c91515061f847bc5f6a955a52d8617515ea94a747c849ceea4bad637f4bf213eb3d59c160b0968206fd9939a550324499408a564394bbcc8f472271088b0ae2e69388756798cc4cc9771e37c3c8d28a450be2087012ef4f27bca77747ccdf502000000000000000000", 0x2d) 23:59:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xfffff7ffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x800) setsockopt$inet_dccp_buf(r2, 0x21, 0x8e, &(0x7f0000000100)="6e666990262e5081ca707cc394fd8c98ff1b434ae88e66683b90f28ab06f532b7ffb3805760669ec0d15a3ecab994135a5af1a7ee02120e530803eb9c427edc95446dc2e2e88a288d2bb05a6102896d04b6c9ced4fffd36f26b1d574123ba0276074b079d2167764f819d2f8617f110e33479abdba5a", 0x76) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = creat(&(0x7f0000000880)='./file0\x00', 0x20) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000900)="1d92f9b7d147268f853bd488507f5c996032a674d5104e3c9c76ecf9ff0c00621681b501628367612d20efbdab5b61c837eafcee7e5220ee9a2676d5be065d825997b6cc9014b7038dc1679c09f2395bd2ad9300bc0e0cd9f05026cb7f16da29d326938f830fe7edcbdee29853df3f0e660415af88c909f93490b966bb732cd5e5429051b39134bd8e00204052d41a4aae8d56e2955ed8e6f9ef47f573471fbb785c702dcf3e063f809b678ba0beb1b07d4b3eb3d2a0aacc53d514ac56041f36e28e9ed4586c44eac930926b95cea2cb752da3d548de659c") ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f00000008c0)={0x0, 0x100000}) ioctl(r3, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r5 = creat(&(0x7f0000000180)='./file0\x00', 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) write$FUSE_ENTRY(r5, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x1, 0x1, 0x8001, 0x1, 0xfffffffffffffffb, 0x0, {0x1, 0x6, 0x5, 0x2, 0xc2, 0x1, 0x81, 0x75, 0x9, 0xffffffffffffffff, 0x1, r6, r7, 0x6, 0x3d92}}}, 0x90) ioctl$KVM_SET_PIT2(r1, 0xae64, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) nanosleep(&(0x7f0000000600), &(0x7f0000000640)) r8 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c80064972eb9976b3e41fe18eafbf86e89d24f590b2530", @ANYRES16=r9, @ANYBLOB="00012abd7000fedbdf250b0000000c00020008000700d4eb0000080004000200000008000600010000001c000100080002003b000000080005000100000008000600776c6300080005000900000048000300080001000100000014000200766c616e300000000000000000000000080008000100000008000300030000000800030003000000080008000700000008000500ffffffff2c000300080005000000000308000400020e00000800030003000000080004007f0000000800030000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x40005) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x50, 0x0, &(0x7f0000000440)=[@release, @clear_death={0x400c630f, 0x2, 0x4}, @release={0x40046306, 0x1}, @free_buffer, @increfs_done={0x40106308, r8, 0x3}, @clear_death={0x400c630f, 0x4, 0x4}], 0xf6, 0x0, &(0x7f00000004c0)="38f91e34747469587dd6fb367204d6a69cbcc86658fad28fbec40f481bc3097448e595b336bb3a034012a38c2145ad1ee44d68d2be6a70508eb342ca1810acd640fa716effa8d0fa1a2745406e43894808732aa20caf09f9ada0ed172fdd281d0360cf4846f8107aa9aae78966b15c4de3083421f4ef47b023584d70c1a81005080ecc7d195d48d4b02cbf19a331448af748e38959f4a847734901c91539b9f515402d683e616313bf88982e544296633aa6038cfcfab53a2e2d288dabfba2924892410995d1bf1234f50a44810703994dd8532d3ba46785d9871f04ee8e4e745975540984985732324cc14a29199251f03c19f8d62a"}) 23:59:44 executing program 2: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000400)) readv(r1, &(0x7f0000f46000)=[{&(0x7f0000000180)=""/101, 0x65}], 0x2c9) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x240400) 23:59:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000640)='/dev/cec#\x00', 0x2, 0x2) getsockname(r1, &(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000700)=0x80) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)=',\x00', 0xfffffffffffffffe) syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7f, 0x10000) r3 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3ff) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000540)=0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r4, 0x416, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffe7, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3db942bae5b065ed, 0x0, &(0x7f00000001c0)}) 23:59:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x6558, 0x2}, 0xfef1, &(0x7f0000000080), 0x0, &(0x7f0000dda000), 0x4}], 0x47db4121991f9c, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x6560, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1ff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23}}}, 0x84) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xffffffff}, 0x4) 23:59:45 executing program 5: r0 = socket(0x10, 0x803, 0x5) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xa44, 0x80100) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x4, 0xffffff, "39325c4f273e90e265620f3aa7dd455965db5e10a3450a0e", {0x1000, 0x7}, 0x2}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000180)="7bfcc41ddf3136bf6e957e5fe5542e51f56d5ca2c0f5c5b7b1e419f97483b7d9"}) [ 329.945274] binder: 8413:8415 ioctl 40087602 20000540 returned -22 23:59:45 executing program 3: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000000c0)) 23:59:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff00000000, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x8001, 0x4, 0x2, 0x4, 0x1, 0x1}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) bind$unix(r2, &(0x7f0000000200)=@abs={0x1}, 0x6e) [ 330.054916] binder: 8413:8415 unknown command 1078485801 [ 330.060579] binder: 8413:8415 ioctl c0306201 20000000 returned -22 23:59:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x10) [ 330.222082] binder_alloc: binder_alloc_mmap_handler: 8413 20010000-20013000 already mapped failed -16 [ 330.253589] binder: BINDER_SET_CONTEXT_MGR already set [ 330.258970] binder: 8413:8415 ioctl 40046207 0 returned -16 [ 330.406952] binder: 8413:8417 ioctl 40087602 20000540 returned -22 23:59:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x303101, 0x0) 23:59:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071108c00001200000000000000000000950000000000000028de8a152b1b2ba14cf4a7c21fb99882dce895"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 23:59:45 executing program 3: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000000c0)) 23:59:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000004fff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r1, &(0x7f0000000100)=@random={'os2.', "0000000000000000000000000200"}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000001740)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}, @udp={0x0, 0x0, 0x8}}}, 0x26) [ 330.741993] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 23:59:45 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x0, 0x3001}}) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) [ 330.888339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.895312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.963288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 23:59:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x303101, 0x0) [ 331.258570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:59:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x6558, 0x2}, 0xfef1, &(0x7f0000000080), 0x0, &(0x7f0000dda000), 0x4}], 0x47db4121991f9c, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x6560, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1ff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23}}}, 0x84) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xffffffff}, 0x4) 23:59:46 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = dup2(r2, r1) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x200000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) r7 = getpgid(0x0) setpgid(r6, r7) pread64(r5, &(0x7f0000000380)=""/205, 0xcd, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000040), 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f00000002c0)={'broute\x00', 0x0, 0x4, 0x8a, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/138}, &(0x7f0000000200)=0x78) 23:59:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80006, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002240)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000003a40)=0x8) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x16) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x86, 0xcea000000000, 0x80000000, 'queue1\x00', 0x40}) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x10, 0x0, 0x1f}, 0x10) 23:59:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000004fff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r1, &(0x7f0000000100)=@random={'os2.', "0000000000000000000000000200"}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000001740)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}, @udp={0x0, 0x0, 0x8}}}, 0x26) 23:59:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x9, 0x8, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dhcp_etc_t:s0\x00', 0x20, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x4000, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'broute\x00'}, &(0x7f0000000280)=0x78) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) 23:59:47 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000000)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x303101, 0x0) [ 331.999484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:59:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = getpgrp(0x0) fcntl$lock(r0, 0x10000000000025, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, r1}) fcntl$setstatus(r0, 0x4, 0x1ffc) 23:59:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffffffffffffff80, 0x4000) write$P9_RFLUSH(r1, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0xea) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8, 0x5) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x12, r0, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x408000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000180)) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 23:59:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f00000003c0)='bdev\x00', 0x100000, &(0x7f0000000380)='em0vmnet1\x00') mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)="760001b076", 0x3080, &(0x7f0000000200)) msgget(0x2, 0x0) mount(&(0x7f0000000240), &(0x7f0000000080)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) umount2(&(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0x2) r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x1, 0x20000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x5, 0x4) 23:59:47 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000000c0)) 23:59:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0xc0044dff, &(0x7f0000000040)) 23:59:47 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x8000) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x0, @vbi={0x1, 0x4, 0xcc7, 0x20363059, [0x0, 0xc3bc], [0x5, 0xcc76], 0x13a}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3d, &(0x7f0000000080), 0x4) 23:59:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x500000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140100688f6f4b20010000000000004a41000400dc5c96336c7da0ba05c8109768f47ef4abf9b701842bf4da38318901edda900003b1968e279827e802bab26d769b88cab3159d52356aded7a53133c553eb8e42f48725bd24ab5c0c91eca15f39903bdcc284a5a362f25c8735039fc3ac0bb5a2fc7daccf4c06d92d2bb00557a757b40cf0f484d2159b858ac4f865fcc7e86af47b6c289ea983f35a8cd2f77b297c2e1af907da3ad50945bb793a6611c0934bc07d1a4887a1267a8be0ec3620086d5d53bb398718ae3fc057"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x410, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff00000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1e}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffff7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x24004000) 23:59:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @empty, 0xe567}}, {{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0xf}, 0xffffffff80000000}}}, 0x108) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x6, 0x604076d1bc0b2fd6, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0xc99}}, 0xffff, 0xffff}, 0x90) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000300)={{r3, r4+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000000340)) openat$cgroup_subtree(r0, &(0x7f0000000440)='0group.subtree_control\x00', 0x2, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f00000003c0)={r6, r7/1000+30000}, 0x10) 23:59:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="92a08dcac98c0100000400000000000000000065750ede91a1f98937702d8f9523b12ed909ce8b6c2fbb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc3559414d055deb4357df02d2eed24a7ca7189c3003b2cbdae69c72000000080000000710e13"], 0x66) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x8000) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000180)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x10000, 0x1, 0x2, 0xfff, 0x0, 0x5f9}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)) 23:59:48 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000000c0)) 23:59:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x4000, 0x0) syz_open_pts(r1, 0x20000) sendto$inet(r0, &(0x7f00000006c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e24, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000580)=""/216, 0xd8}, {&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000004c0)=""/175, 0xaf}], 0x6, &(0x7f00000007c0)=""/160, 0xa0}}], 0x4000180, 0x208802, &(0x7f00000083c0)={0x77359400}) writev(r2, &(0x7f000051c000)=[{&(0x7f0000000280)="480000001400190d095b63164cbd9cce004beafd0d8c560284470080ffe00800000000000000a2bc5603ca000069200000020101ff0000000309ff5bffff00c7e5ed5e00000000000000000000000000dd03cefa55f199c435ccc3744c77c1a5cc047b1b797327ab74ae62b631288b7609", 0x71}], 0x1) 23:59:48 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x21, 0x1, 0x0, "0f348062d210669f0e613600fa33fac1d718583a70ea62b24d0a0e2e4065af66"}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x1) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x2, 0x4}) 23:59:48 executing program 4: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x200, 0x1) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000300)=0x2000, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/240, &(0x7f0000000280)=0xf0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x7fffffff, 0x1, 0x8, 0x7, 0xff}, 0xc) r4 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000000009) socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r4, 0xc0185500, &(0x7f0000000000)={0x20123, 0x8000000006}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 23:59:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x40) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000002c0)={r2, 0x6, &(0x7f00000001c0)=[0x0, 0x101, 0x80000001, 0x30, 0x6, 0x4], &(0x7f0000000200)=[0x9, 0x81, 0x5, 0x99f2, 0x8, 0x3, 0x6, 0xffffffffffffff70, 0x5], 0x40, 0x8, 0x278d472d, &(0x7f0000000240)=[0x9, 0x3a2f846a, 0x9, 0x4, 0xe1, 0x1, 0x7, 0x2], &(0x7f0000000280)=[0x10000, 0x7e9, 0x1, 0x8000, 0x3]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local}], 0x10) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 333.704034] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 23:59:48 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000000c0)) 23:59:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300008002000030100000000000000000220000000000000000000001100010008000b000000000008e5000000000000"], 0x30}}, 0x0) 23:59:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0xc00c55ca) 23:59:49 executing program 1: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x800000010f, 0x80, &(0x7f00004ad000), &(0x7f0000a3c000)=0xfffffffffffffff5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x2c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={r1, 0xc7, "02e7a0694ed9be76d64b82ba933e5b4afe491b59118572d402923b42497f27c5de8ce2d7dc134676a27850b02e54ec4dfe5d8d0e009992ec1b4f782ac019cbc8a04a3fb291895e02e40844d93d4e066bcb366df4f605451d1a9008fe51f00846735c8a064cd31da8f98df2bdfda7a3b6dc2e901f2dfd1db74ceba1fcbda68ddef2de795cb8515d2414064849e4c5a3d40fc28c8a4c877f566e2e0b13bcda7868fdcc62b6cc460f4f1790cab4b7e88a863915a67964ca0beba1aff6d90f6144ad8e3c430edd7425"}, &(0x7f0000000180)=0xcf) 23:59:49 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_setattr(r1, &(0x7f0000000000)={0x1000, 0x3, 0x0, 0x3, 0xfffffffffffffffc, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x0, &(0x7f0000000140)=""/194, &(0x7f0000000240)=0xc2) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x200, 0x2100) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000040)) r4 = socket(0x10, 0x802, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00', 0xfdfdffff}) 23:59:49 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, r0, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=""/181, &(0x7f0000000180)=0xb5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='cgroup\x00', r1}, 0x10) 23:59:49 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0285629, &(0x7f0000000480)={0x3, 0x0, [], {0x0, @reserved}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) r2 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev={0xfe, 0x80, [], 0x20}, @in6=@loopback, 0x4e20, 0x0, 0x4e20, 0x4, 0xa, 0x20, 0xa0, 0x6, 0x0, r2}, {0x20, 0x6, 0x0, 0x86a, 0x4, 0x5, 0x80000000, 0xfff}, {0x7ff, 0x100000000, 0x7fff, 0x1}, 0x5, 0x6e6bc0, 0x1, 0x0, 0x2, 0x2}, {{@in=@broadcast, 0x4d2, 0x33}, 0x2, @in=@remote, 0x3502, 0x1, 0x3, 0x7, 0xfffffffffffffffa, 0x3, 0x9}}, 0xe8) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) 23:59:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x4000, 0x0) syz_open_pts(r1, 0x20000) sendto$inet(r0, &(0x7f00000006c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e24, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000580)=""/216, 0xd8}, {&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000004c0)=""/175, 0xaf}], 0x6, &(0x7f00000007c0)=""/160, 0xa0}}], 0x4000180, 0x208802, &(0x7f00000083c0)={0x77359400}) writev(r2, &(0x7f000051c000)=[{&(0x7f0000000280)="480000001400190d095b63164cbd9cce004beafd0d8c560284470080ffe00800000000000000a2bc5603ca000069200000020101ff0000000309ff5bffff00c7e5ed5e00000000000000000000000000dd03cefa55f199c435ccc3744c77c1a5cc047b1b797327ab74ae62b631288b7609", 0x71}], 0x1) 23:59:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000082) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x1}, 0x28, 0x3) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000000140)='u', 0x1}], 0x1, &(0x7f0000000180)}}], 0x1, 0x0) shutdown(r1, 0x1) shutdown(r1, 0x1) 23:59:49 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x1ff, 0xfffffffffffffffe) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40002, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080), 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x1, 0x0) 23:59:50 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xd9e, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) write$cgroup_pid(r0, &(0x7f00000001c0)=r1, 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f0000000040), 0x8) poll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0) 23:59:50 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x5, &(0x7f00000012c0), 0x7) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000540)={{&(0x7f0000230000/0x2000)=nil, 0x2000}, 0x1}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)=0x1000) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x2) sigaltstack(&(0x7f0000231000/0x1000)=nil, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, 0x36, "30b5bc6dcf4ce9a667ce0589959f3cd9dbd9e0ac6d2be43d03df56f3208af939a1eac0f60b71081795d413f51970da30b9c6a8b41991"}, 0x3c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x7c, r2, 0x410, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)) keyctl$set_reqkey_keyring(0xe, 0x7) [ 335.064053] device team0 entered promiscuous mode [ 335.069213] device team_slave_0 entered promiscuous mode [ 335.075230] device team_slave_1 entered promiscuous mode 23:59:50 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net//..\x00', 0x0, 0x0) sched_yield() 23:59:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x1ff, @mcast1, 0x1}}, [0x0, 0x88, 0xffff, 0x100000000, 0x4, 0xfffffffffffff4c2, 0x8001, 0x64, 0x7f, 0x36a, 0x1000, 0x7, 0x9, 0x200, 0x7]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x7}, 0x8) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)) 23:59:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_setattr(r1, &(0x7f0000000000)={0x1000, 0x3, 0x0, 0x3, 0xfffffffffffffffc, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x0, &(0x7f0000000140)=""/194, &(0x7f0000000240)=0xc2) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x200, 0x2100) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000040)) r4 = socket(0x10, 0x802, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00', 0xfdfdffff}) 23:59:50 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x7f0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0xc, 0x16, [@typed={0x8, 0x0, @fd}]}]}, 0x97}}, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) 23:59:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff, 0x40000) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xfffffffffffffff8, 0x5, 0x44, 0x80000000}, 0x8) 23:59:51 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x5, &(0x7f00000012c0), 0x7) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000540)={{&(0x7f0000230000/0x2000)=nil, 0x2000}, 0x1}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)=0x1000) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x2) sigaltstack(&(0x7f0000231000/0x1000)=nil, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000001500)=""/4096, 0x1000}], 0x1) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, 0x36, "30b5bc6dcf4ce9a667ce0589959f3cd9dbd9e0ac6d2be43d03df56f3208af939a1eac0f60b71081795d413f51970da30b9c6a8b41991"}, 0x3c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x7c, r2, 0x410, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)) keyctl$set_reqkey_keyring(0xe, 0x7) 23:59:51 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local, @local, {[], @tcp={{0x0, 0x20480, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, [], [{0x8000, 0x8fe, 0x6, 0x2, 0x9cc, 0x9f1}, {0xb7e3, 0x3ff, 0x0, 0x10000, 0xfffffffffffffffc, 0x7}], [[], []]}) 23:59:51 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3fe, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x2000) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x4, [@broadcast, @random="84711bb27258", @empty, @empty]}) 23:59:51 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de441100d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f00000002c0), 0x21}, 0x0) 23:59:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x100) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0xf, 0xd, 0x0, 0x9, 0xa, 0x8, 0x1, 0x6}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000180)=0x9, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', @random="0f607000"}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x4, 0x1ff}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xffffffffffff0000) 23:59:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x101000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x604080, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80400202) unshare(0x8000000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x3010, r0, 0x0) clone(0x1047ffd, &(0x7f0000597f1c), &(0x7f0000000280), &(0x7f00000001c0), &(0x7f0000000240)) 23:59:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)="6e65742f69705f767300b24f05aa9d46f7a0d492ccec7639a11db046da4e0363c0f3710cc8a3a9f393da53fe76b8d8a01106df3370e5d3f64b87c65c4b08c2cab6d5820bc1fbb015bba8cd4ae22b0b99a6331b9986f3e9b285c886e6c81c4d1d01365af55c4af7d2457357ff91853362a9d78085ed300eebc1565ebe7d8fe5bdf33827882d54eaa468784a7f00b81a9c0bdc8797d306b0b085cab720ecd6b2e911453489c8220d77e168b4f38e0f07d93e1da52421270589e614") sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000000)=ANY=[]}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000001c0)={0x8001, {{0xa, 0x4e20, 0xfff, @mcast1, 0x5}}, {{0xa, 0x4e20, 0x100000000, @ipv4={[], [], @multicast1}, 0x836}}}, 0x108) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000000)=0x100000001) 23:59:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/112) 23:59:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000200)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)=r1) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) 23:59:52 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000180)={0x8000000000000079, 0x0, [0x7fe, 0x0, 0x5, 0x7]}) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0x0, 0x4, {0xffffffffffffffff}}, 0x18) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x1f, 0x9, 0x1], 0x1f000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:59:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x10003, 0x7ff}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r2, 0xa80a}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}) 23:59:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x100000001, 0x3}, &(0x7f0000000180)=0x8) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000180001000000000000000000060000000c000300ed08000000000000100006000c0000000000000000000000"], 0x30}}, 0x0) 23:59:52 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00003e2000/0x3000)=nil, 0x3000}, 0x4}) 23:59:52 executing program 2: io_setup(0x223, &(0x7f0000000040)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0xfffffffffffffffd, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/null\x00', 0x404c80, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f0000003700)=0xb9, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000100)) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x200, 0x1}, {0x5, 0x4}, {0x3f, 0xffffffffffffff7f}, {0x5, 0x5}]}) close(r1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f00000002c0)={0x0, 0x8, 0x0, 0x5, 0x0, r2, 0x0, 0x1f6, 0x0, 0x0, 0x0, r2}]) 23:59:52 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000100)={0xe, 0x9, 0x9, 0x2, 0xd9, "0432bf81be82e0d5e74273e381cddce9d827028c5e2ca62db3cdf5a729fba6152bfaae5bcd1522c4560c965ebc4354c0ffaf8f5d9faff4f23497671160cdf4498d6258957c2e43f70e285d422b837dfbb9156090a2e90a709848bc0fb245843fcdae8e56ddb688bb767436959dd13231afc2cead79a67bdd4025b3f0171f9c0a25d67a8e91e6e5cce9c4d3e39651bc49e65c9aa08a452f53b33217040b2c6c536d15acabab3f36e535a5ef1d04b5ee88dde32bbfa7c1e53cc00809b1f0589718e7b85f0d5c74fbea9621a64bc244effe5a6d5e024219cbb975"}, 0xe5) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x400, "1818412cdf8c2bfac36c3f6f2b2b88d7505b4239842f6d68df6d5aea40a9d03c", 0x1, 0x1}) 23:59:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0x200401) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f0000000140)="0a5c2d0240316285717070") sendto$inet6(r0, &(0x7f0000000000)="bc", 0x1, 0x20048081, &(0x7f0000000040)={0xa, 0x400080000024e22}, 0x1c) r4 = accept(r2, &(0x7f0000001480)=@l2, &(0x7f0000001500)=0x80) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x0, 0x1, {0xc, 0x23, 0x10, 0xe, 0x3, 0x8, 0x5, 0x126, 0x1}}) sendmsg$rds(r4, &(0x7f00000016c0)={&(0x7f0000001540)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001580)=""/135, 0x87}], 0x1}, 0x8000) close(r0) 23:59:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x101000) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getpeername$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001940)={'veth0\x00', 0x0}) getsockname(0xffffffffffffffff, &(0x7f0000001980)=@hci={0x1f, 0x0}, &(0x7f0000001a00)=0x80) accept4$packet(0xffffffffffffffff, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001b40)=0x14, 0x800) accept$packet(0xffffffffffffffff, &(0x7f0000001b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001bc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001c00)={0x284, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x170, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xf8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r4}, {0xf0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x4102, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x13], [], @remote}}]}]}, 0x2c}}, 0x0) 23:59:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x40) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000002c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0xc002, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001c00f604000000000002000000000000"], 0x14}, 0x8}, 0x0) 23:59:53 executing program 4: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)='x', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r2 = shmget(0x2, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) keyctl$dh_compute(0x17, &(0x7f0000000340)={r0, r1, r0}, &(0x7f0000000600)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000300)={'rmd256-generic\x00'}, &(0x7f0000000540)}) [ 338.334851] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:59:53 executing program 2: io_setup(0x223, &(0x7f0000000040)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0xfffffffffffffffd, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000036c0)='/dev/null\x00', 0x404c80, 0x0) setsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f0000003700)=0xb9, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000100)) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x200, 0x1}, {0x5, 0x4}, {0x3f, 0xffffffffffffff7f}, {0x5, 0x5}]}) close(r1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f00000002c0)={0x0, 0x8, 0x0, 0x5, 0x0, r2, 0x0, 0x1f6, 0x0, 0x0, 0x0, r2}]) 23:59:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:53 executing program 0: r0 = socket$inet6(0xa, 0x200000000006, 0x80000001) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1a0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000140)={0x6, 0xfffffffffffffff9}) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="b10b9386", 0x4}], 0x1, &(0x7f0000000200)}, 0x8000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="d05b0563ad2cb414278b6ae0bf8da8a3522c5e12b599bcbc4d5c539b0400a6eb9e1b4bcc9d22729232c246a86f98174a355ecdbacefd69f24748d39a15e260ce9d1fd9f6efbbc53696f284c6f411ba0075c592af88a5c85815eb7817f03a5e", 0x5f}], 0x1, &(0x7f00000000c0)}, 0x0) 23:59:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9602, 0x4000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x5, 0x8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 23:59:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xab) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000100000000000000000000030000000000000000000000000d000000ff"]) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000280)={0x1, 0x0, [{0x0, 0x0, 0x7}]}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80001, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) 23:59:53 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x338b, 0x8, 0x200000000, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078", 0xf7755f5c}) 23:59:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80400000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2480, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x1810c0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) 23:59:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x240200, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100, 0x30000) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x34, 0x1b, 0x5, 0x15, 0x7, 0x6, 0x6, 0x16b, 0x1}}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{0x0, 0x0, 0xfffff000}}) 23:59:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000200)={0x1, 0x3, 0xff, 0x3, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000100)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=r2) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x1, 0x0) 23:59:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fchmod(r0, 0x0) fchmod(r0, 0x0) fallocate(r0, 0x1, 0x6, 0x5) fallocate(r0, 0x1, 0x7, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x40000) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7fff, 0x562, 0x1, 0x7ff}, {0xffffffffffffff18, 0x0, 0x9, 0x68bd9581}]}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000000c0)) 23:59:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f4669482764f15f9f90217b269e926c70308b02d2e5e09e8e46b9148609827f"], 0x24) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c65302047504c2177d7b56e31"], 0x14) 23:59:54 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7ff, 0x62100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x8}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r1, 0x1}, &(0x7f0000000280)=0x6) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r2, 0x18b45db4}, &(0x7f0000000300)=0x8) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f0000000000)="0a5c2f0240316285717070") openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0xa0001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000a8eff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x2000000000007, &(0x7f0000000200), 0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x80, 0x0) r5 = memfd_create(&(0x7f0000000100)='dev ', 0x0) write(r5, &(0x7f0000000040)="16", 0x1) sendfile(r4, r5, &(0x7f0000000000), 0xffff) r6 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000400)="d88c4f51ce22f3bdcba7fe17279cabce49f78b499b237a09e9deec68804f8b1eb87f5cbeddfebd0c26acef797b54c2aa8adebe4bc79dab6b9bbf7af40c4ea5eb6d804c80c0440f52cd1dcd876104bffd48c31799e00a99dc142107b2d8af1422c82343e65079199ba8c54b312fcf0958a9ed721e9186d5567e7998c4533e93f217d8868f26c0dc58135a6a991e00ef1cd43073d226a376c8c52da3bd836c55", &(0x7f00000004c0)="4bb89064e70e6ba83b46244c87b04ad871a88ad124f4b2fd0d6b1600f991009c9201e69263dfe2440bc1d40dda0c7f8ecfe6f470a4f69ff0909aace197a90ef1256140f01a6a5aa5d92cb0f405c700f62026a622c6c3022733b52b47e3cec34aeb404591941dd97d78e2f8d0d25a95659a30b91523c46150ca5a714f06ecdd8320c9fa730a8eb3d9dad8b944565b3b6f9209321b3f3cecdfcc03339329b19aa8ea82bc1f7dde7ce7ee6a323a77b4d55f58f9a6fda9bb46b4fef4e4430720f96cc1f008980c622b8df4c80d76a6fb933a06dc922dc35f4c851e5ba75947a95c4a517998a1d357c5add5f169917a8a"}}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000013) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0xb98, @empty, 0x80}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0xb4d6, @mcast2, 0x1}, @in6={0xa, 0x4e22, 0x8001, @ipv4={[], [], @remote}, 0x10000}, @in={0x2, 0x4e22}], 0x84) 23:59:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xab) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000100000000000000000000030000000000000000000000000d000000ff"]) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000280)={0x1, 0x0, [{0x0, 0x0, 0x7}]}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80001, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) 23:59:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:55 executing program 0: io_setup(0x2b, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005001}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100)=0x9, 0x4) flock(r2, 0x4) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000001c0)={0x9, 0x5, 0x9, 0x5, 0x6, 0x8}) 23:59:55 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0x80000fffff020}, {0x16}]}, 0x10) 23:59:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff018}, {0x6}]}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f0000000040)="b5fe903714c49a9805336a05594917e3472c4ddc7277103c17d962fd34aa566d25c0e6214e5010007fb6bd9ea6", 0x2d) 23:59:55 executing program 3: rt_sigsuspend(&(0x7f0000000100)={0x10001}, 0xfffffffffffffd46) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)=r1) [ 340.187121] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 340.257923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 23:59:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x54}}, 0x0) r1 = getpgid(0x0) r2 = gettid() r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x142) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000040)={r3, r0, 0x4}) 23:59:55 executing program 1: r0 = socket$inet6(0xa, 0x400002006, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x40000000004) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc1, &(0x7f0000000180), &(0x7f0000000100)=0x7a) 23:59:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x200) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000300)="6e65702f7564da5a00b7f03d7ab4c1588c1e33c173ffc0ff2ce1db037cfbbd8fc1395bf599039a625acd047eb23ccd1a3847a83de5e2ff8e52198e08000000314a861de7c7cf50193862ab159e3013f85a07d070e5e90f0c953ef8cf1aff62fefb0611ff6fbd7e9cfd26f6dcd98930a3a74f64c95125481db760f23b5bd2ee0d46ad865088b35f8dc68edfd15ad9fa6b8cb0307f43aba0a1a893360e05e2e2bd1a6d68bcc72f2b6fd6e6c85e4a08bad87c3c6c5881e7f89c69940eeaeb12") preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}], 0x3, 0x0) ioctl$void(r0, 0x5450) clock_getres(0x0, &(0x7f00000000c0)) 23:59:55 executing program 0: r0 = socket$inet6(0xa, 0x8080f, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e24, @multicast1}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$getname(0x28, &(0x7f0000000240)=""/184) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x42000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x7) 23:59:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8995, &(0x7f0000000140)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_gstrings}) r1 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000300)=""/4096) 23:59:56 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x3d, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSCTTY(r1, 0x540e, 0x3) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000000)={0x5, 0x1, 0x9, 0x4}) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000580)="04", 0x1}], 0x1) tkill(r0, 0x1000000000015) 23:59:56 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x10001, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x5, 0x4) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x6, "e13f2e77e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258d8ba93c00", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x53dfdde0, 0x18040) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 23:59:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:56 executing program 4: r0 = socket$packet(0x11, 0x280000000000002, 0x300) sendmmsg(r0, &(0x7f0000007f00)=[{{&(0x7f00000001c0)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000540)}}, {{&(0x7f0000002ac0)=@hci, 0x80, &(0x7f0000002fc0), 0x0, &(0x7f0000003040)}}], 0xd8, 0x0) 23:59:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000180)="66ba4000ec66baf80cb878d0d48aef66bafc0cedb8010000000f01c10f01ca660f076536f30f2a20b805000000b9090000000f01d966ba400066b8fb7f66ef0f070fe78500080000", 0x48}], 0x1, 0x4, &(0x7f0000000000)=[@flags={0x3, 0x300000}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffbfe) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x1, 0x10001, 0x1, 0x3, 0x0, 0xe88fad3c00}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r4, 0x10}}, 0x10) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [0x40000073, 0xfff]}) 23:59:56 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x800, 0x0) write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000580)=0x200000003) 23:59:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000100)) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000140)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=r1) 23:59:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsync(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="0f01df3e660fe71366baf80cb8d0646d87ef66bafc0cedf20f0866ba4000b800800000efc4c16d6405ad1900000f61db9aca0000000a01b80a0000000f23c00f21f83502000a000f23f8660f2b3f", 0x4e}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:59:57 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x402172, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40, 0x0) 23:59:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x80000000006, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x100000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0xe8, "3b67bd6c2c888ef9017631bb55d574e20bf869f3ca6f2448aa1cf530b3d863b4d6d0a983d6d5531ddd284e4b0f972cacb40614691d88e678e3b1ff222f19788138fc1c2591c5a3dceb30deb24ee41a004d65873cdf62eed615d50bb60a1dab0a82b176ec67d761b2691702d751dd3e2114f07150f98a0fed707b7c88c8fd0ea83a4a913c2482b90b752c87dd4ca589e222ddafcfc1f55e0ee07a7accb824a3fa5eba92971a7c8d216d5e3f14dea6cbff97dfd89086ef9a7910fbb072a8f653a186f913af149b3dbc33bc9e96607094c29fe18df460076b986b8b3cdb9c7f05a92c78cf484e829c24"}, &(0x7f0000000240)=0xf0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:57 executing program 0: unshare(0x400) r0 = syz_open_dev$admmidi(&(0x7f0000000b40)='/dev/admmidi#\x00', 0x1ff, 0x101000) r1 = getuid() getgroups(0x5, &(0x7f0000000040)=[0x0, 0xee00, 0x0, 0xee01, 0xee01]) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) r4 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) r8 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000600)=0xe8) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd0, r10, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}]}]}, 0xd0}}, 0x8000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000d00)=0x9) r11 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000740)={0x3f8, 0x0, 0x8, [{{0x3, 0x2, 0x9e, 0x400, 0x1, 0x8001, {0x1, 0x3f, 0x101, 0xfffffffffffffff8, 0x3, 0xe4, 0x8000, 0x3f, 0x0, 0xd7, 0x10000000000000, r1, r2, 0x7, 0x3f}}, {0x0, 0x4, 0x0, 0x80000000}}, {{0x4, 0x0, 0xd1d, 0x5d43, 0xfff, 0x8, {0x5, 0x4, 0x9, 0x10001, 0x8, 0x7, 0x1, 0x7, 0x9, 0x7fff, 0x0, r3, r4, 0x7, 0x81}}, {0x5, 0x2, 0x2, 0xffff, '/-'}}, {{0x3, 0x3, 0x6, 0xfff, 0x4, 0x400, {0x1, 0x3, 0x5, 0x1, 0x80, 0x3, 0x5, 0x861c, 0x2, 0x8272, 0x1ff, r5, r6, 0x8, 0x10000}}, {0x1, 0x71b, 0x4, 0xffe00000000000, 'self'}}, {{0x0, 0x0, 0x5a, 0x8000, 0xffffffffffffff8a, 0x8e87, {0x6, 0x9c1b, 0x1, 0x7, 0x100, 0x7ff, 0x81, 0x0, 0x2, 0x7, 0x2, r7, r8, 0x3, 0x6}}, {0x2, 0x1, 0xa, 0x2, '-trusted:%'}}, {{0x4, 0x1, 0x1f, 0x10f38350, 0x8, 0x8, {0x5, 0x0, 0x6, 0x80000001, 0x7fff, 0x4, 0xfffffffffffffa64, 0x0, 0xffffffff, 0x2, 0xd3, r9, r11, 0x80000000, 0x81}}, {0x6, 0x5a2, 0x2b, 0x0, "2463707573657431707070312d5bb9242929256d696d655f74797065656d31707070302a766d6e6574315d"}}, {{0x3, 0x0, 0x9, 0x8, 0x8, 0x800, {0x4, 0x100, 0x3f, 0x0, 0xd9f, 0xfffffffffffffa25, 0x3f, 0x6, 0x7fff, 0x80000000, 0x2, r12, r13, 0xffffffffffffff2c, 0x81}}, {0x4, 0x100000000, 0x1, 0x6, '('}}]}, 0x3f8) r14 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r14, 0x10e, 0x2, &(0x7f0000000180)=0xd, 0x4) 23:59:57 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x21}}]}]}, 0x4c}}, 0x40000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x6040, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) 23:59:58 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0x163) unshare(0x400) tee(r2, r1, 0x8, 0x0) 23:59:58 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x94, &(0x7f0000000240)=[@in={0x2, 0x4e20}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x0, @ipv4}, @in6={0xa, 0x4e23, 0x5, @local, 0x5}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x12}, 0x3}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000340)={r2, 0x7ff}, &(0x7f0000000380)=0x8) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x9) pipe(&(0x7f00000003c0)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x0, 0x0, 0x70bd27}, 0x14}}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r3) r4 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000040)=0x2b6, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6gretap0\x00', 0x10) recvfrom$inet(r4, &(0x7f0000000200)=""/12, 0x2, 0x0, 0x0, 0x53) 23:59:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsync(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="0f01df3e660fe71366baf80cb8d0646d87ef66bafc0cedf20f0866ba4000b800800000efc4c16d6405ad1900000f61db9aca0000000a01b80a0000000f23c00f21f83502000a000f23f8660f2b3f", 0x4e}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:59:58 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x28002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000001140)={r1, &(0x7f0000000140)=""/4096}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x9, 0x240003) lsetxattr$security_smack_entry(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='security.SMACK64EXEC\x00', &(0x7f0000001200)='/dev/video#\x00', 0xc, 0x3) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)) 23:59:58 executing program 0: unshare(0x400) r0 = syz_open_dev$admmidi(&(0x7f0000000b40)='/dev/admmidi#\x00', 0x1ff, 0x101000) r1 = getuid() getgroups(0x5, &(0x7f0000000040)=[0x0, 0xee00, 0x0, 0xee01, 0xee01]) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) r4 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) r8 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000600)=0xe8) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd0, r10, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}]}]}, 0xd0}}, 0x8000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000d00)=0x9) r11 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000740)={0x3f8, 0x0, 0x8, [{{0x3, 0x2, 0x9e, 0x400, 0x1, 0x8001, {0x1, 0x3f, 0x101, 0xfffffffffffffff8, 0x3, 0xe4, 0x8000, 0x3f, 0x0, 0xd7, 0x10000000000000, r1, r2, 0x7, 0x3f}}, {0x0, 0x4, 0x0, 0x80000000}}, {{0x4, 0x0, 0xd1d, 0x5d43, 0xfff, 0x8, {0x5, 0x4, 0x9, 0x10001, 0x8, 0x7, 0x1, 0x7, 0x9, 0x7fff, 0x0, r3, r4, 0x7, 0x81}}, {0x5, 0x2, 0x2, 0xffff, '/-'}}, {{0x3, 0x3, 0x6, 0xfff, 0x4, 0x400, {0x1, 0x3, 0x5, 0x1, 0x80, 0x3, 0x5, 0x861c, 0x2, 0x8272, 0x1ff, r5, r6, 0x8, 0x10000}}, {0x1, 0x71b, 0x4, 0xffe00000000000, 'self'}}, {{0x0, 0x0, 0x5a, 0x8000, 0xffffffffffffff8a, 0x8e87, {0x6, 0x9c1b, 0x1, 0x7, 0x100, 0x7ff, 0x81, 0x0, 0x2, 0x7, 0x2, r7, r8, 0x3, 0x6}}, {0x2, 0x1, 0xa, 0x2, '-trusted:%'}}, {{0x4, 0x1, 0x1f, 0x10f38350, 0x8, 0x8, {0x5, 0x0, 0x6, 0x80000001, 0x7fff, 0x4, 0xfffffffffffffa64, 0x0, 0xffffffff, 0x2, 0xd3, r9, r11, 0x80000000, 0x81}}, {0x6, 0x5a2, 0x2b, 0x0, "2463707573657431707070312d5bb9242929256d696d655f74797065656d31707070302a766d6e6574315d"}}, {{0x3, 0x0, 0x9, 0x8, 0x8, 0x800, {0x4, 0x100, 0x3f, 0x0, 0xd9f, 0xfffffffffffffa25, 0x3f, 0x6, 0x7fff, 0x80000000, 0x2, r12, r13, 0xffffffffffffff2c, 0x81}}, {0x4, 0x100000000, 0x1, 0x6, '('}}]}, 0x3f8) r14 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r14, 0x10e, 0x2, &(0x7f0000000180)=0xd, 0x4) 23:59:58 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x3f, 0x800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x2, 0x0, 0x1, r1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x210002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x40, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x60bd4ad4a89652fc) r3 = semget(0x0, 0x7, 0x10) semtimedop(r3, &(0x7f0000000300)=[{0x5, 0x1, 0x800}, {0x1, 0x8, 0x1800}, {0x3, 0x3, 0x1800}], 0x3, &(0x7f0000000340)={0x0, 0x1c9c380}) dup(r2) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xa2eb) rt_sigprocmask(0x6, &(0x7f00000000c0)={0xfffffffffffffff7}, 0x0, 0x127) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x200001, 0x0) r5 = gettid() tkill(r5, 0x12) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) 23:59:58 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x41fffe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x4, 0x0, 0x0, 0x8d4, 0x1c, r0}, 0x2c) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/57) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffff9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffe}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)=0x40, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x2}, 0x48) 23:59:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) arch_prctl(0x1004, &(0x7f0000000100)="7d65a297e5c7c494152bb877f23d3e5e2fc1bae45d32fb942d9403c66a9f3f813c9a1ee66748b2c8978f595261156f8ec33e8b6492dd7c3ce7958ecb1f42f557ad2ebc253de2d1e62de54daf415467afdea19a9fbaba08fc4593ef940e75f733f8ca964461f931358931e25d73259a26ba7e5ba924bd4ad33a054a0c4a8359754ceb999c6ec5542323ddbe75ade8bcc0266d6260f52f7f76a47e76b79c52f6c13f3adcd215166578262f5cdfe0b60d12d3dcad3320031c004de9") ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsync(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="0f01df3e660fe71366baf80cb8d0646d87ef66bafc0cedf20f0866ba4000b800800000efc4c16d6405ad1900000f61db9aca0000000a01b80a0000000f23c00f21f83502000a000f23f8660f2b3f", 0x4e}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:59:58 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x5, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xf7f, 0x85}, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040), 0x10) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) close(r4) close(r3) 23:59:58 executing program 5: unshare(0x20406) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x400000100, 0x0) timerfd_create(0x9, 0x80000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x3b) r2 = socket(0x2000000010, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[]}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001600050400000000000000000a000000", @ANYRES32=r3, @ANYBLOB="1480020000000000008f3e850c7e918d01d56a71b1a04a0000000000000000000001"], 0x2c}}, 0x0) 23:59:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0163404000000000000000000000000000000000000000000000000000000000000000002c93dd57159a2d6600000000000000000000000000000000cad97c18fc070988ff6bafd0fd1e477f80225c370427d6c67ef61b8a9e01f0a71c45e07e63d67479198d2a98f6a140294613", @ANYPTR=&(0x7f00000001c0)=ANY=[], @ANYPTR=&(0x7f0000000280)=ANY=[]], 0x0, 0x0, &(0x7f0000000500)}) [ 344.163217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 344.201397] binder: 8930 RLIMIT_NICE not set [ 344.206242] binder: 8930 RLIMIT_NICE not set [ 344.246689] binder: 8930 RLIMIT_NICE not set [ 344.251368] binder_alloc: 8929: binder_alloc_buf, no vma [ 344.257212] binder: 8929:8930 transaction failed 29189/-3, size 7362710382279758636-0 line 2970 [ 344.266398] binder: send failed reply for transaction 3 to 8929:8930 [ 344.303476] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 344.339170] binder_alloc: binder_alloc_mmap_handler: 8929 20001000-20004000 already mapped failed -16 23:59:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x80000000}) r3 = dup3(r2, r0, 0x0) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x1f, 0x3, 0x40, 0x9, 0xfffffffffffffffc, 0x5, 0x1}) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000140)={0x0, "da504124b0271c9aba756344cb26909011501884b65d1482a2f54017f6751898", 0x3, 0x2, 0x10001, 0x21, 0x0, 0x7, 0x6, 0x8}) 23:59:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x800) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x40000001) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x80000001, 0x50e7dffa}, &(0x7f0000000100)=0x10) syz_open_dev$vivid(&(0x7f0000000240)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e24, 0x8001, @remote, 0xd0}}, 0x7, 0x1}, &(0x7f0000000200)=0x90) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 23:59:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x20000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000001400)="f9632d3450fbf335f3267904165c2d31d591cf04e2d5078efd") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000013c0)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000002c0)="c8fbfac34cd56f704a07f5321a78a96eaed69c6aa481807d1c06e23e1fceb252538b29b816c0cdbc8c369169f3c5e07492821f2b66fdbddd8101"}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x2}, 0xfffffff0) eventfd2(0xfb2, 0x80801) 23:59:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000706000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000208000a00030000001bee728264225ac614eefe53c81b03f1ee102182b0f7398de659defce4143384dcec93c973ed63b8"], 0x28}}, 0x0) [ 344.369947] binder: BINDER_SET_CONTEXT_MGR already set [ 344.375609] binder: 8929:8930 ioctl 40046207 0 returned -16 [ 344.391082] binder_alloc: 8929: binder_alloc_buf, no vma [ 344.396922] binder: 8929:8935 transaction failed 29189/-3, size 0-0 line 2970 [ 344.474119] binder: 8930 RLIMIT_NICE not set [ 344.474254] binder: 8929:8942 got reply transaction with no transaction stack [ 344.486284] binder: 8929:8942 transaction failed 29201/-71, size 7362710382279758636-0 line 2762 [ 344.521501] binder: undelivered TRANSACTION_ERROR: 29189 [ 344.527241] binder: undelivered TRANSACTION_ERROR: 29190 [ 344.533127] binder: undelivered TRANSACTION_COMPLETE [ 344.538304] binder: undelivered TRANSACTION_ERROR: 29189 [ 344.626944] binder: undelivered TRANSACTION_ERROR: 29201 23:59:59 executing program 5: unshare(0x200) ioctl(0xffffffffffffffff, 0x82000004141, &(0x7f0000000040)) 23:59:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00'}, 0x10) socket$kcm(0x2, 0x8000000003, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x23ffe, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x200082}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'bond0\x00', @random="01003a1e2410"}) 23:59:59 executing program 4: r0 = socket(0x10, 0x200000000002, 0x0) write(r0, &(0x7f0000000100)="0c00f6000000490923000000e9c9007d6d738e49691c47c0109ab660", 0xfd42) 23:59:59 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) 00:00:00 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x101, 0x218000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigreturn() ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)={0xffff, 0xa, 0x4, 0x0, {r1, r2/1000+10000}, {0x3, 0x2, 0x6, 0x9, 0xfffffffffffff801, 0x0, "c6ad52c2"}, 0x0, 0x7, @planes=&(0x7f0000000100)={0x1, 0x101, @mem_offset=0x101, 0x5}, 0x4}) unshare(0x1fdffffe) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000180)=""/8, 0x8, 0x0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000040)) 00:00:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x2, 0x5, 0x3, 0x8000, 0x3, [{0x6, 0x9, 0x6, 0x0, 0x0, 0x500}, {0x6, 0x8, 0x40, 0x0, 0x0, 0x240c}, {0x8, 0xf828, 0x4, 0x0, 0x0, 0x180}]}) ioctl(r2, 0x8, &(0x7f0000002040)="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") getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000000)=0xb0) close(r2) close(r0) 00:00:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x301000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000140)={{0x401}, {0x6, 0x9cad}, 0x2, 0x5, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}, 0x0) sendmsg$unix(r4, &(0x7f0000000200)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r3) close(r0) [ 345.293827] PANIC: double fault, error_code: 0x0 [ 345.298704] CPU: 1 PID: 8972 Comm: syz-executor2 Not tainted 4.19.0+ #82 [ 345.305589] ================================================================== [ 345.312995] BUG: KMSAN: uninit-value in irq_work_claim+0x153/0x390 [ 345.319348] CPU: 1 PID: 8972 Comm: syz-executor2 Not tainted 4.19.0+ #82 [ 345.326211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.335589] Call Trace: [ 345.338193] <#DF> [ 345.340387] dump_stack+0x32d/0x480 [ 345.344142] ? irq_work_claim+0x153/0x390 [ 345.348342] kmsan_report+0x19f/0x300 [ 345.352208] kmsan_internal_check_memory+0x35f/0x450 [ 345.357355] ? __msan_poison_alloca+0x1e0/0x2b0 [ 345.362087] kmsan_check_memory+0xd/0x10 [ 345.366190] irq_work_claim+0x153/0x390 [ 345.370214] irq_work_queue+0x44/0x280 [ 345.374173] vprintk_emit+0x693/0x790 [ 345.378044] vprintk_default+0x90/0xa0 [ 345.381981] vprintk_func+0x26b/0x2a0 [ 345.385823] printk+0x1a3/0x1f0 [ 345.389181] dump_stack_print_info+0x2c4/0x3c0 00:00:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x2) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)) [ 345.393810] show_regs_print_info+0x37/0x40 [ 345.398172] show_regs+0x38/0x170 [ 345.401664] df_debug+0x86/0xb0 [ 345.404990] do_double_fault+0x362/0x480 [ 345.409114] double_fault+0x1e/0x30 [ 345.412771] RIP: 0010:kmsan_get_origin_address+0xa/0x370 [ 345.418253] Code: eb fe 0f 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 48 89 75 c8 48 89 fb 49 bc 00 00 00 00 00 78 [ 345.437188] RSP: 0018:fffffe000003d000 EFLAGS: 00010086 [ 345.442775] RAX: 00000000000001a8 RBX: 0000000000000000 RCX: 0000000000000001 [ 345.450076] RDX: 0000000000000001 RSI: 0000000000000088 RDI: fffffe000003d150 [ 345.457376] RBP: fffffe000003d018 R08: 0000000000000000 R09: 0000000000000000 [ 345.464682] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 345.471998] R13: fffffe000003d1c0 R14: fffffe000003d1a8 R15: fffffe000003d1a8 [ 345.479324] [ 345.481593] [ 345.484918] kmsan_memmove_origins+0xbd/0x1d0 [ 345.489466] ? kmsan_memmove_shadow+0xad/0xe0 [ 345.494010] __msan_memmove+0x6c/0x80 [ 345.497846] fixup_bad_iret+0x9b/0x130 [ 345.501787] error_entry+0xad/0xc0 [ 345.505346] RIP: 0000: (null) [ 345.509266] Code: Bad RIP value. [ 345.512646] RSP: a3fb7f:00007f8dba7809c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 345.520573] RAX: 0000000000000000 RBX: ffffffff8ae00e58 RCX: 000000000040393c [ 345.527871] RDX: e2648b7d21cde700 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.535166] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000072bf08 00:00:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xa102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0xc00000000000007, &(0x7f0000000000)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000002c0)={0x4}) [ 345.542475] R10: 000000000072bf00 R11: 000000000072bf0c R12: 0000000000000000 [ 345.549780] R13: 000000000072bf08 R14: 000000000072bf00 R15: 000000000072bf0c [ 345.557093] ? general_protection+0x8/0x30 [ 345.561371] ? general_protection+0x8/0x30 [ 345.565649] [ 345.569055] [ 345.570703] Local variable description: ----__ai_ptr@irq_work_claim [ 345.577133] Variable was created at: [ 345.580902] irq_work_claim+0x4b/0x390 [ 345.584824] irq_work_queue+0x44/0x280 [ 345.588722] [ 345.590367] Byte 7 of 8 is uninitialized [ 345.594457] Memory access of size 8 starts at fffffe0000045a38 [ 345.600459] ================================================================== [ 345.607854] Disabling lock debugging due to kernel taint [ 345.613320] Kernel panic - not syncing: panic_on_warn set ... [ 345.613320] [ 345.620722] CPU: 1 PID: 8972 Comm: syz-executor2 Tainted: G B 4.19.0+ #82 [ 345.628971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.638346] Call Trace: [ 345.640947] <#DF> [ 345.643145] dump_stack+0x32d/0x480 [ 345.646832] panic+0x57e/0xb28 [ 345.650276] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 345.655762] kmsan_report+0x300/0x300 [ 345.659654] kmsan_internal_check_memory+0x35f/0x450 [ 345.664796] ? __msan_poison_alloca+0x1e0/0x2b0 [ 345.669527] kmsan_check_memory+0xd/0x10 [ 345.673617] irq_work_claim+0x153/0x390 [ 345.677638] irq_work_queue+0x44/0x280 [ 345.681565] vprintk_emit+0x693/0x790 [ 345.685426] vprintk_default+0x90/0xa0 [ 345.689356] vprintk_func+0x26b/0x2a0 00:00:00 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000000006, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)) getegid() [ 345.693195] printk+0x1a3/0x1f0 [ 345.696545] dump_stack_print_info+0x2c4/0x3c0 [ 345.701177] show_regs_print_info+0x37/0x40 [ 345.705533] show_regs+0x38/0x170 [ 345.709021] df_debug+0x86/0xb0 [ 345.712334] do_double_fault+0x362/0x480 [ 345.716455] double_fault+0x1e/0x30 [ 345.720116] RIP: 0010:kmsan_get_origin_address+0xa/0x370 [ 345.725599] Code: eb fe 0f 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 48 89 75 c8 48 89 fb 49 bc 00 00 00 00 00 78 [ 345.744534] RSP: 0018:fffffe000003d000 EFLAGS: 00010086 [ 345.749929] RAX: 00000000000001a8 RBX: 0000000000000000 RCX: 0000000000000001 [ 345.757222] RDX: 0000000000000001 RSI: 0000000000000088 RDI: fffffe000003d150 [ 345.764515] RBP: fffffe000003d018 R08: 0000000000000000 R09: 0000000000000000 [ 345.771806] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000088 [ 345.779095] R13: fffffe000003d1c0 R14: fffffe000003d1a8 R15: fffffe000003d1a8 [ 345.786412] [ 345.788685] [ 345.792003] kmsan_memmove_origins+0xbd/0x1d0 [ 345.796538] ? kmsan_memmove_shadow+0xad/0xe0 [ 345.801080] __msan_memmove+0x6c/0x80 [ 345.804910] fixup_bad_iret+0x9b/0x130 [ 345.808849] error_entry+0xad/0xc0 [ 345.812417] RIP: 0000: (null) [ 345.816369] Code: Bad RIP value. [ 345.819752] RSP: a3fb7f:00007f8dba7809c0 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 345.827667] RAX: 0000000000000000 RBX: ffffffff8ae00e58 RCX: 000000000040393c [ 345.834967] RDX: e2648b7d21cde700 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.842262] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000072bf08 [ 345.849557] R10: 000000000072bf00 R11: 000000000072bf0c R12: 0000000000000000 [ 345.856848] R13: 000000000072bf08 R14: 000000000072bf00 R15: 000000000072bf0c [ 345.864156] ? general_protection+0x8/0x30 [ 345.868433] ? general_protection+0x8/0x30 [ 345.872717] [ 345.877037] Kernel Offset: disabled [ 345.880674] Rebooting in 86400 seconds..