[ 51.765377] audit: type=1800 audit(1541752157.805:26): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 51.784754] audit: type=1800 audit(1541752157.815:27): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 51.804341] audit: type=1800 audit(1541752157.835:28): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 53.598255] audit: type=1800 audit(1541752159.645:29): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.71' (ECDSA) to the list of known hosts. 2018/11/09 08:29:30 fuzzer started 2018/11/09 08:29:34 dialing manager at 10.128.0.26:38493 2018/11/09 08:29:34 syscalls: 1 2018/11/09 08:29:34 code coverage: enabled 2018/11/09 08:29:34 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/09 08:29:34 setuid sandbox: enabled 2018/11/09 08:29:34 namespace sandbox: enabled 2018/11/09 08:29:34 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/09 08:29:34 fault injection: enabled 2018/11/09 08:29:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/09 08:29:34 net packed injection: enabled 2018/11/09 08:29:34 net device setup: enabled 08:31:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x0, 0x8001}}) syzkaller login: [ 213.060015] IPVS: ftp: loaded support on port[0] = 21 [ 214.023680] ip (6199) used greatest stack depth: 53616 bytes left [ 215.128903] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.135588] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.144102] device bridge_slave_0 entered promiscuous mode [ 215.267261] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.273803] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.282192] device bridge_slave_1 entered promiscuous mode [ 215.401158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.522235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 215.895292] bond0: Enslaving bond_slave_0 as an active interface with an up link 08:32:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1f) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @loopback}}, 0x5c) [ 216.024659] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.646939] IPVS: ftp: loaded support on port[0] = 21 [ 216.904892] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.913077] team0: Port device team_slave_0 added [ 217.175360] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.183383] team0: Port device team_slave_1 added [ 217.481378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 217.489899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.498796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.745011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 217.752063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.760803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.964835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.972491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.981746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.183348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 218.190902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.199808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.723530] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.730008] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.738543] device bridge_slave_0 entered promiscuous mode [ 219.963834] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.970374] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.978795] device bridge_slave_1 entered promiscuous mode [ 220.206607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.340997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.502853] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.509327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.516329] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.522844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.531256] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.863325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.036237] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.234989] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.387300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 221.394541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.639084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 221.646260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:32:07 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) [ 222.338759] IPVS: ftp: loaded support on port[0] = 21 [ 222.494947] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 222.503063] team0: Port device team_slave_0 added [ 222.786741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.794828] team0: Port device team_slave_1 added [ 223.057326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 223.064561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.073276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.268960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.276241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.284934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.524595] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.532269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.541325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.864683] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 223.872280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.881323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.396959] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.403593] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.411929] device bridge_slave_0 entered promiscuous mode [ 226.680906] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.687530] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.696069] device bridge_slave_1 entered promiscuous mode [ 226.844418] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.850898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.857931] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.864468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.873122] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.954823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 227.133962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.211692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.110364] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.395378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.694052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 228.701083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.926359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 228.933599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:32:15 executing program 3: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={"0000000000000000000000000200", 0x20000005001}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='[', 0x1}]) [ 229.887327] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.895350] team0: Port device team_slave_0 added [ 230.066118] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.074105] team0: Port device team_slave_1 added [ 230.256263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 230.263591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.272267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.303304] IPVS: ftp: loaded support on port[0] = 21 [ 230.649733] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.656975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.665893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.930233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.938878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.946532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.955425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.256177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.263938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.272696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.235780] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.466706] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.473245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.481292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.605478] ip (6635) used greatest stack depth: 53504 bytes left [ 234.735470] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.935738] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.942202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.949186] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.955700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.964052] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.533562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.544002] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.550441] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.558959] device bridge_slave_0 entered promiscuous mode [ 235.915623] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.922090] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.930662] device bridge_slave_1 entered promiscuous mode [ 236.250025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 236.591146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.580838] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.953194] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.286961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 238.294098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.634350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.641400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:32:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000010000000000000000000000076d4001"]) [ 239.357133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.534065] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.541881] team0: Port device team_slave_0 added [ 239.910803] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.918881] team0: Port device team_slave_1 added [ 240.297024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 240.304373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.313195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.617081] IPVS: ftp: loaded support on port[0] = 21 [ 240.684691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 240.719710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.728408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.763043] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.073231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.080852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.089829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.412366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.420232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.429294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.238225] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.244754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.252648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:32:29 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1ff, 0x183e00) 08:32:29 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}) [ 243.738328] 8021q: adding VLAN 0 to HW filter on device team0 08:32:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x15f) 08:32:30 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$eventfd(r1, &(0x7f00000000c0), 0xffffff90) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x84002, 0x0) 08:32:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x7, 0x81, 0x0, 0x7, 0x100, {0x1, 0x7fdec17b}, 0x1}) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r1, &(0x7f0000004080)=@xdp, &(0x7f0000004100)=0x80) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) 08:32:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)=ANY=[@ANYBLOB="05003f"]) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[]) [ 245.630825] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.637483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.644456] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.650925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.659414] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 245.776391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 245.863125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 08:32:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40000500) r1 = epoll_create1(0x80004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0xfc) syz_open_pts(r0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0xc) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0)) inotify_init1(0x800) ioctl$TCFLSH(r2, 0x540b, 0x2) 08:32:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0xfffffc, 0x8201) pread64(r0, &(0x7f0000000100)=""/195, 0xc3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0x15, &(0x7f0000000040)='/dev/bus/usb/00#/00#\x00'}, 0x30) syz_open_procfs(r1, &(0x7f00000000c0)='net/ipv6_route\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x20323, 0x1}) [ 246.716576] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.723145] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.731423] device bridge_slave_0 entered promiscuous mode [ 246.777190] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 246.853150] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 247.164983] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.171449] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.179900] device bridge_slave_1 entered promiscuous mode [ 247.553361] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 247.853130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 248.935818] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 249.307318] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 249.353161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.622259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 249.629458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.967230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 249.974366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.533151] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 250.858720] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 250.866690] team0: Port device team_slave_0 added [ 251.237109] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 251.245300] team0: Port device team_slave_1 added [ 251.500364] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 251.507575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.516419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.723863] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 251.733809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.741583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.759196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 251.766379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.775264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 08:32:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x0, 0x8001}, {0xf}}) [ 252.058707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 252.066429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.075620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.347069] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 252.354782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.363755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.685630] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.529407] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.535961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.543003] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.549446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.557768] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 254.564463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.149448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.956148] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:32:43 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/118) [ 257.657305] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 257.663932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.671603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.166143] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.745314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.149893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.156843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.205389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.242503] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:32:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0x80000000000006, &(0x7f00000003c0)) [ 261.655915] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 261.662301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.670201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.945342] 8021q: adding VLAN 0 to HW filter on device team0 08:32:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003740)=""/221, 0xdd}, {&(0x7f0000000540)=""/28, 0x1c}], 0x2, &(0x7f0000003d00)=""/104, 0x68}, 0x84dd}], 0x1, 0x0, &(0x7f0000005740)={0x77359400}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x400000102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 08:32:49 executing program 0: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0x2, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0xc4, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000080)=""/96, 0x60}], 0x4, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000000)=""/64, 0x40}}], 0x40000ca, 0x0, &(0x7f0000000300)={0x77359400}) getsockname(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000440)=0x80) 08:32:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup3(r0, r0, 0x80000) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000000)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'dummy0\x00', @ifru_hwaddr=@broadcast}}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x2c}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000003c0)={0x2, &(0x7f0000000280)=[{}, {}]}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x100110, r1, 0x80000000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000400)=0x8) semget$private(0x0, 0x0, 0x450) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000440)={0x6, 0x5, 0x8000, 0x5, 0x80, 0x200, 0x0, 0x9, 0x0}, &(0x7f0000000480)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000004c0)={r3, 0x400}, &(0x7f0000000500)=0x8) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000540)="48438ad814399a98a406496ecc27ea2bd333b13038a5446b5103297751771ab7d7a9205be9847a43f47c7227ee912bb410403e5481f5fb7e7cfdda0acaa4db84450d0789269b3b3b72174d49855b5b225f286bcf09f9205302eb0dbb8f66ff545843ad3e9fdde09b93710c8d801d05b131d095c87c839c34770fddbafdbd96f18edc2f8e489e7c4e5dcc6739578356a3fd341cb775d12bbf2fb91f03d58700eb20fbf094871108e6a36b57d5228f7353279d753eb574e159b6346b598205d59de96a3c3828e4e1f81ca2d0c7816dd06a30") socket$inet_dccp(0x2, 0x6, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000640)=""/118) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r1, 0x10, &(0x7f00000007c0)={&(0x7f00000006c0)=""/249, 0xf9, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r4, 0x4) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000880)=""/164) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000940)=0x2, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000980)=r3, 0x4) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/full\x00', 0x10000, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000a00)=0x4) ioctl$LOOP_CLR_FD(r5, 0x4c01) syz_open_dev$audion(&(0x7f0000000a40)='/dev/audio#\x00', 0x2, 0x2) futimesat(r5, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={{0x77359400}}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000b40)=@req={0x28, &(0x7f0000000b00)={'syzkaller1\x00', @ifru_hwaddr}}) 08:32:49 executing program 2: msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)=""/91) 08:32:49 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socket$inet6_udplite(0xa, 0x2, 0x88) 08:32:49 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$seccomp(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x4, 0xf87, 0x0, 0x7fff}]}) [ 263.920705] kauditd_printk_skb: 1 callbacks suppressed [ 263.920752] audit: type=1326 audit(1541752369.965:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7533 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 263.955637] hrtimer: interrupt took 51453 ns [ 264.017109] audit: type=1326 audit(1541752370.025:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7533 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 08:32:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31c958ae5e13a9e058a0f9c773d668fe6afd6ae2470a417760376ff88272052872baf485c50023934860653afae3d24e721316", 0xc0}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0xfffffffffffffffa, 0x0, 0x0, 0x7fffffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 08:32:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 08:32:50 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socket$inet6_udplite(0xa, 0x2, 0x88) [ 264.549131] can: notifier: receive list not found for dev tap0 08:32:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000600)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)=""/34, &(0x7f0000000340)=0x22) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) close(r0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 264.648094] audit: type=1326 audit(1541752370.695:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7533 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 264.670415] audit: type=1326 audit(1541752370.695:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7533 comm="syz-executor3" exe="/root/syz-executor3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 264.769720] can: notifier: receive list not found for dev tap0 08:32:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}]}, 0x30}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) 08:32:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003740)=""/221, 0xdd}, {&(0x7f0000000540)=""/28, 0x1c}], 0x2, &(0x7f0000003d00)=""/104, 0x68}, 0x84dd}], 0x1, 0x0, &(0x7f0000005740)={0x77359400}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x400000102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 08:32:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) 08:32:51 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socket$inet6_udplite(0xa, 0x2, 0x88) [ 265.319197] can: notifier: receive list not found for dev tap0 [ 265.367903] binder_alloc: 7577: binder_alloc_buf, no vma [ 265.374429] binder: 7577:7579 transaction failed 29189/-3, size 0-0 line 2970 [ 265.399648] binder: BINDER_SET_CONTEXT_MGR already set [ 265.405202] binder: 7577:7580 ioctl 40046207 0 returned -16 [ 265.436304] binder_alloc: 7577: binder_alloc_buf, no vma [ 265.441978] binder: 7577:7579 transaction failed 29189/-3, size 0-0 line 2970 [ 265.467621] binder: undelivered TRANSACTION_ERROR: 29189 [ 265.494629] binder: undelivered TRANSACTION_ERROR: 29189 [ 265.858915] IPVS: ftp: loaded support on port[0] = 21 [ 267.129686] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.136208] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.144525] device bridge_slave_0 entered promiscuous mode [ 267.218669] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.225214] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.232958] device bridge_slave_1 entered promiscuous mode [ 267.306054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.378333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 267.594717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 267.670264] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 267.812056] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.819120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.035419] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 268.043162] team0: Port device team_slave_0 added [ 268.115526] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 268.123317] team0: Port device team_slave_1 added [ 268.196332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.271750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.346557] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 268.353909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.362407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.436801] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 268.444149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.452739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.734541] ip (7669) used greatest stack depth: 53216 bytes left [ 269.286559] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.293036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.299736] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.306261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.313987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 269.803076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.302170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.573618] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 272.846795] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 272.853132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.860715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.135432] 8021q: adding VLAN 0 to HW filter on device team0 08:33:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x8}, {r1}], 0x2, &(0x7f0000000140)={0x0, r2+10000000}, &(0x7f0000000180), 0x8) 08:33:00 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) socket$inet6_udplite(0xa, 0x2, 0x88) 08:33:00 executing program 4: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x10001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0), 0x0, 0x101, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000003380), 0x4) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000840)='user\x00', &(0x7f00000006c0)={'syz'}, &(0x7f0000000880)='d', 0x1, r2) keyctl$setperm(0x5, r3, 0x10000) keyctl$get_security(0x11, r3, &(0x7f0000000740)=""/134, 0x86) 08:33:00 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80800) ioctl(r0, 0xffff, &(0x7f0000000100)="586153d9c8b37f90ee4d4f75996505a4e7f8ec0230b5ef34c724171934138f47c0db96ad8fa44b0220d9377923f0e7c0da467262286b2fbc530dc6a01e5063edf4c8462bcae3fefbba7c5daa60c3ea3174489d6cc11edf63cbb6041687c5e575cec069686cd5") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_flowlabel\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000500)={'filter\x00', 0xef, "812c8b13f215093d98e08f87402f0cf28e687de0289be5f4943b503f17adab81cbe11ce4d12897a893c3c35a919cbb8ff34b62a7c816e3c8bdd1a7ea205c0d55d0ae67886520d0fdf0f7bd32a6f6d83d97fb8a9f0aaa47b3c91326382bce3db25faf94578633b7c0ba14e65bb7bf52a2d0bb1a8db1da17cdedc398ba16cf71bdaa60909719cf8b76f02ec1e454b50358554d80b75338227d512cf667efa294d5de220c1e3fcd00e310c673b716014b85ce42b151e0615324abcc6cadc290b077eb53a78e359455533d6d37f381595108ecab0cb14cfd0981b3ad6e5b76ed09011740c9e619e700171f090555d0c1c3"}, &(0x7f0000000240)=0x113) preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) 08:33:00 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)) 08:33:01 executing program 0: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x10001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r2, 0x12) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0), 0x0, 0x101, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000003380), 0x4) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x2, 0x3, 0x0, 0x9, 0x0, 0xffffffff, 0x6, 0x7f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x7, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x3, 0x0, 0x0, 0x5, @perf_config_ext={0x1, 0x5}, 0x20000, 0x3, 0xfffffffffffffffc, 0x0, 0x2, 0x20}, 0x0, 0x0, r0, 0x1) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r3, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 08:33:01 executing program 4: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x10001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0), 0x0, 0x101, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000003380), 0x4) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) 08:33:01 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 08:33:01 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}) 08:33:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa30000}}, 0x20, 0x0, 0x0) 08:33:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x8}, {r1}], 0x2, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={0x70000000}, 0x8) 08:33:01 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)) 08:33:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fcca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1, &(0x7f00000020c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006340)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:33:02 executing program 0: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x10001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r2, 0x12) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0), 0x0, 0x101, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000003380), 0x4) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x2, 0x3, 0x0, 0x9, 0x0, 0xffffffff, 0x6, 0x7f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x7, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x3, 0x0, 0x0, 0x5, @perf_config_ext={0x1, 0x5}, 0x20000, 0x3, 0xfffffffffffffffc, 0x0, 0x2, 0x20}, 0x0, 0x0, r0, 0x1) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r3, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:02 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) 08:33:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xe, 0x4, 0x3, 0x1, r1}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) 08:33:02 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000840)='user\x00', &(0x7f00000006c0)={'syz'}, &(0x7f0000000880)='d', 0x1, r1) keyctl$setperm(0x5, r2, 0x10000) keyctl$get_security(0x11, r2, &(0x7f0000000740)=""/134, 0x86) 08:33:02 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) 08:33:02 executing program 3: clone(0x0, &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000001180)) readlinkat(0xffffffffffffffff, &(0x7f000090fff8)='./file0\x00', &(0x7f00000000c0)=""/145, 0x91) 08:33:02 executing program 2: prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x0, 0xfff}, 0x0) 08:33:02 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)="f068cdca171d15461d93683a8a3818a00e807ea5a8b0a4a486c6a0c79fac1581dcecb9e57fe03b62e2c073f1440deb1d2bb38b01d827c9047e4b98a6f9c1f2bbbc486c93bc60d46752872a22a605a35070477068497070986923de5d3a5a03d04ce8f1fc8f94a1a007e4a36c4c65dbee14fa4f960c8e95907c39459374e7c5bb3bc1c68f4dfabfc8d0e89a040f3ea0196b13b5c7b37e10f4895159b257fbb7fd1259880f629f7bc0983d8138ca0fcc0f3ca2131c8d960e5569b122c568e0e3fd20d0e1b7a6d8ae195e60a1247f3fd77824e29519fc2925be7af673192a3eb3c2fc57402f6d009983adf2e34050ea43414c2edfa7dc6c386dd5", 0xf9}], 0x1, 0x0) setpriority(0x3, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000280)={r1, 0x0, 0x4, 0x1}) finit_module(r1, &(0x7f0000000140)='security.evm\x00', 0x2) capget(&(0x7f0000000180)={0x20080522}, &(0x7f0000000240)={0x6, 0x1000, 0x101, 0x2, 0x1, 0x6}) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000002c0), &(0x7f0000000300)=0x4) recvfrom(r2, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) poll(&(0x7f0000000200)=[{r1}, {}, {}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x100}, {r1, 0x8}], 0x1ffffffffffffd24, 0x3) read(r2, &(0x7f0000000380)=""/172, 0xffffff88) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) 08:33:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fcca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1, &(0x7f00000020c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006340)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 276.938103] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:33:03 executing program 4: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x81000100) read(r0, &(0x7f0000000140)=""/229, 0xe5) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) 08:33:03 executing program 2: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire], 0xc00000000000000, 0x0, &(0x7f00000000c0)}) 08:33:03 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) 08:33:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="681604", 0x3}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0xfffffffffffffffa, 0x0, 0x0, 0x7fffffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) [ 277.418576] binder: 7952:7953 Acquire 1 refcount change on invalid ref 0 ret -22 08:33:03 executing program 3: mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire], 0x0, 0x0, &(0x7f00000000c0)}) 08:33:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0xc, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/118) 08:33:03 executing program 2: r0 = socket$nl_xfrm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) [ 277.710022] binder: 7961:7962 Acquire 1 refcount change on invalid ref 0 ret -22 08:33:03 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 08:33:04 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000000100)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x3) r1 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000780)="f068cdca171d15461d93683a8a3818a00e807ea5a8b0a4a486c6a0c79fac1581dcecb9e57fe03b62e2c073f1440deb1d2bb38b01d827c9047e4b98a6f9c1f2bbbc486c93bc60d46752872a22a605a35070477068497070986923de5d3a5a03d04ce8f1fc8f94a1a007e4a36c4c65dbee14fa4f960c8e95907c39459374e7c5bb3bc1c68f4dfabfc8d0e89a040f3ea0196b13b5c7b37e10f4895159b257fbb7fd1259880f629f7bc0983d8138ca0fcc0f3ca2131c8d960e5569b122c568e0e3fd20d0e1b7a6d8ae195e60a1247f3fd77824e29519fc2925be7af673192a3eb3c2fc57402f6d009983adf2e34050ea43414c2edfa7dc6c386dd5", 0xf9}], 0x1, 0x0) setpriority(0x3, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000280)={r1, 0x0, 0x4, 0x1}) finit_module(r1, &(0x7f0000000140)='security.evm\x00', 0x2) capget(&(0x7f0000000180)={0x20080522}, &(0x7f0000000240)={0x6, 0x1000, 0x101, 0x2, 0x1, 0x6}) sendto$inet(r2, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000002c0), &(0x7f0000000300)=0x4) recvfrom(r2, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) poll(&(0x7f0000000200)=[{r1}, {}, {}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x100}, {r1, 0x8}], 0x1ffffffffffffd24, 0x3) read(r2, &(0x7f0000000380)=""/172, 0xffffff88) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) 08:33:04 executing program 3: syz_execute_func(&(0x7f0000002540)="3666440f50f56664400f9f3241c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") socket(0xa, 0x0, 0x0) 08:33:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) 08:33:04 executing program 2: r0 = socket$nl_xfrm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 08:33:04 executing program 5: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) set_mempolicy(0x0, &(0x7f0000001300), 0x0) 08:33:04 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:04 executing program 5: io_setup(0xb87c, &(0x7f00000003c0)) io_setup(0x63a5, &(0x7f0000000200)) 08:33:04 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000080)=0x4) 08:33:04 executing program 2: semget$private(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x800000, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setfsuid(0x0) clock_gettime(0xfffffffffffffffa, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x28, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000000c0)={&(0x7f0000000080)=""/1, 0x1}) 08:33:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) 08:33:05 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x3ffffffffffff3c, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:05 executing program 3: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}, 0xaf8}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) 08:33:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000079c0)=ANY=[@ANYBLOB], &(0x7f0000005800)=0x1) modify_ldt$write(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x7222, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x3f00000000000000}, 0x7ffff000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 08:33:05 executing program 4: sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:05 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3, 0x1c) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:05 executing program 5: io_setup(0xb87c, &(0x7f00000003c0)) io_setup(0x63a5, &(0x7f0000000200)) 08:33:06 executing program 1: ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:06 executing program 2: semget$private(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x800000, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setfsuid(0x0) clock_gettime(0xfffffffffffffffa, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x28, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000000c0)={&(0x7f0000000080)=""/1, 0x1}) 08:33:06 executing program 3: semget$private(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x800000, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setfsuid(0x0) clock_gettime(0xfffffffffffffffa, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x28, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000000c0)={&(0x7f0000000080)=""/1, 0x1}) 08:33:06 executing program 4: sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:06 executing program 1: perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)) 08:33:06 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x3, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:06 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x8004510b, &(0x7f0000b18000)) 08:33:08 executing program 3: semget$private(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x800000, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setfsuid(0x0) clock_gettime(0xfffffffffffffffa, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x28, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000000c0)={&(0x7f0000000080)=""/1, 0x1}) 08:33:08 executing program 0: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r2, 0x12) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{&(0x7f0000002900)=@un=@abs, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002b40)=""/28, 0x1c}], 0x1}}], 0x1, 0x101, 0x0) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3f, 0xffffffff, 0x6, 0x7f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x401, 0xd6, 0x7, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x3, 0x0, 0x0, 0x5, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x1f}, 0x0, 0x0, r0, 0x0) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r3, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:08 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x3ff, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:08 executing program 5: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000400)) 08:33:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade31d2544d2581fe8653d0cff54369df8c2fce21dcb1cb965669f9a75345ac3479cd51dc7de364c9c272c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065cfca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bdd") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flistxattr(r0, &(0x7f0000000080), 0xfffffffffffffec5) 08:33:08 executing program 2: socket$unix(0x1, 0x0, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x80, &(0x7f0000000180)={0xa, 0x0, 0x9, @ipv4={[], [], @remote}}, 0x1c) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000440)) preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='team\x00', 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000480)={0x1}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000540)={0xd5c, 0x9, 0x4, 0x7}, 0x14) 08:33:08 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046302}], 0x0, 0x0, &(0x7f0000000380)}) 08:33:08 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x3, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:08 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) [ 282.574042] binder: BC_ACQUIRE_RESULT not supported [ 282.579288] binder: 8108:8111 ioctl c0306201 20000100 returned -22 08:33:08 executing program 3: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x4, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000000c0)}) [ 282.688703] binder: BC_ACQUIRE_RESULT not supported [ 282.694188] binder: 8108:8122 ioctl c0306201 20000100 returned -22 08:33:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f00000000c0), 0x0) write(r2, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 08:33:08 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xca, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) [ 282.824530] binder: 8124:8125 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 08:33:09 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) 08:33:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) [ 282.910343] binder: 8124:8130 unknown command 0 [ 282.915604] binder: 8124:8130 ioctl c0306201 20a20000 returned -22 08:33:09 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 08:33:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 08:33:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'eql\x00', {0x2, 0x0, @rand_addr}}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x4ffd) 08:33:09 executing program 2: socket$unix(0x1, 0x0, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x80, &(0x7f0000000180)={0xa, 0x0, 0x9, @ipv4={[], [], @remote}}, 0x1c) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000440)) preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='team\x00', 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000480)={0x1}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000540)={0xd5c, 0x9, 0x4, 0x7}, 0x14) 08:33:09 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5100, &(0x7f0000b18000)) 08:33:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, [{}, {}, {0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}) 08:33:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000540)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x15, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}}, 0xfd79}}, 0x0) 08:33:09 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0), &(0x7f0000000100)) 08:33:10 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) 08:33:10 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:10 executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 08:33:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 08:33:10 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r0, &(0x7f0000000000)=""/17, 0x11, 0x40, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @reserved}, 0xfffffe8f) 08:33:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000000100)=@md0='/dev/md0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x40000, &(0x7f0000000140)='posix_acl_accesswlan0keyring/nodev#*md5sumcgroup\x00') 08:33:10 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x80000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) init_module(&(0x7f00000000c0)='em0\x00', 0xffdb5, &(0x7f00000002c0)='team0\x00') setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000180), 0x4) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000340), 0x0, 0x0) request_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000280)='\x00', 0xfffffffffffffffe) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000006c0)=""/139, &(0x7f0000000000)=0x8b) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200), 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000780)={'syz', 0x3}, &(0x7f00000007c0), 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000002c0), 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffffd, 0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'gre0\x00', @ifru_names='ip6_vti0\x00'}}) 08:33:10 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:11 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000804000)) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') 08:33:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000000100)=@md0='/dev/md0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x40000, &(0x7f0000000140)='posix_acl_accesswlan0keyring/nodev#*md5sumcgroup\x00') ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)=ANY=[]) 08:33:11 executing program 4: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000180)=0x6, 0x2000005) 08:33:11 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000240)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, '/dev/snd/seq\x00'}}, 0x36) [ 285.341515] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 08:33:11 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x20, 0x0, 'client1\x00', 0x0, "ebba231d5b28154b", "d46bcf841d4d1b180e4f4969e8167c0f48f2509f149bfcd067d06f8e5f8e2ca3"}) 08:33:11 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x0, 0x0) signalfd(r3, &(0x7f0000000340), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)={0x10}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) listen(r2, 0x0) getuid() shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) getresgid(&(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00'}) 08:33:11 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:11 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 08:33:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000002c0)='threaded\x00', 0x9) ftruncate(r1, 0x4000004) fcntl$setstatus(r1, 0x4, 0x4003) truncate(&(0x7f0000000240)='./bus\x00', 0x4a00) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) lseek(r1, 0x8000, 0x0) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) truncate(&(0x7f0000000000)='./bus\x00', 0x0) 08:33:12 executing program 3: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r2, 0x12) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0), 0x0, 0x101, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000003380), 0x4) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x9, 0x0, 0xffffffff, 0x6, 0x7f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x7, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x3, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x20, 0x1f}, 0x0, 0x0, r0, 0x1) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r3, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/11, 0xb) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)) 08:33:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xe, 0x4, 0x3, 0x1, r1}, 0x2c) 08:33:12 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:12 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 08:33:12 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2, @mcast1, @mcast2, 0x1, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 08:33:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000200012000800010073697400140002000800100000000000080002002ae5bb40e2ab6315b110d5736debc4bccb9d9518e14964433c478070eeda132cdf4973079a8c198c2ac2bc9d81e1ee66c1a0d2ceeef1dda2916ee7ee06c428419c62776f1654dabaf31c880df5153f4e7f294b1b060c5dd9034a70687bf1196b1a890a78d4def7c4ac958604cc744a91e0bd9676d6e5ea6e4b9bac25ce44608bfb9f5b47fe65d8bd0d7759c62b22848f1c659f501e13c62145439f333e1c6c60aa3799a931f61971779e3c1cfb89df184213", @ANYRES32=0x0], 0x2}}, 0x0) [ 287.071125] raw_sendmsg: syz-executor4 forgot to set AF_INET. Fix it! [ 287.097073] ptrace attach of "/root/syz-executor3"[8292] was attempted by "/root/syz-executor3"[8293] 08:33:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="660ffdbe0d0000000f01be0f000000b9c9010000b8a0550000ba000000000f30676666410f7d2966baf80cb8c18b3a83ef66bafc0cb005eec744240063000000c7442402518e0000ff2c24b9310a00000f32460f01b7000000808f08489e4d0009400f01cf", 0x65}], 0x2bd, 0x0, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:33:14 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x0, 0x0) signalfd(r3, &(0x7f0000000340), 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)={0x10}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) listen(r2, 0x0) getuid() shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) getresgid(&(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00'}) 08:33:14 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:14 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') lseek(r0, 0x0, 0x3) 08:33:14 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000540)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000300)='sysfs\x00', 0x1, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00') 08:33:14 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x1000004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001d00)) getresgid(&(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00'}) 08:33:14 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 08:33:14 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)) dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setfsuid(0x0) clock_gettime(0x0, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x28, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) 08:33:14 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50) 08:33:14 executing program 0: semget$private(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x800000, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setfsuid(0x0) clock_gettime(0x0, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x28, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=""/1, 0x1}) 08:33:15 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000003380), 0x4) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:17 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000740), 0x800000bf) 08:33:17 executing program 4: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x1, 0x5}, 0x20000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x20, 0x1f}, 0x0, 0x0, r0, 0x1) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:17 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "4f4c8e", 0x8, 0x0, 0x0, @local, @empty, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000000)) 08:33:17 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)='h', 0x1}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 08:33:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={0x0, 0x5, 0x2, 0xfffffffffffffffd, &(0x7f0000ffb000/0x3000)=nil}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) 08:33:17 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xe4, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:17 executing program 2: setpriority(0x0, 0x0, 0xfffffffffffff0f7) 08:33:17 executing program 0: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0]) r1 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000840)='user\x00', &(0x7f00000006c0)={'syz'}, &(0x7f0000000880)='d', 0x1, r1) keyctl$setperm(0x5, r2, 0x10000) keyctl$get_security(0x11, r2, &(0x7f0000000740)=""/134, 0x86) 08:33:17 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x1000004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@loopback, @local}, 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) getresgid(&(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00'}) 08:33:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={0x0, 0x5, 0x2, 0xfffffffffffffffd, &(0x7f0000ffb000/0x3000)=nil}) setregid(0x0, 0x0) 08:33:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000008060501ff0080fffdffff2e0a0000000c000100060000007d0a00010c000200000022ff02f10000"], 0x2c}}, 0x0) 08:33:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x2c9) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000040)={@empty, @rand_addr}, &(0x7f0000000080)=0x8) 08:33:17 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:17 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc) [ 292.050385] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 292.058027] netlink: 'syz-executor4': attribute type 1 has an invalid length. 08:33:18 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}}) 08:33:18 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:18 executing program 2: semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 08:33:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x10001d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da15}}, 0x14}}, 0x0) 08:33:18 executing program 0: socket$inet6(0xa, 0x0, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00007c040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) exit(0x81) 08:33:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000001380)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)) 08:33:19 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:19 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 08:33:19 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x1000004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@loopback, @local}, 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) getresgid(&(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00'}) 08:33:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a80)=[{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)="979ebcded65c5dad3f5a446f760d3125169d0aadb89d038124d3c2bc65348df510ca421ab36dc8f1d2f533ee302f7293d1abcf8eaf93ef835d286fff057dc647de30d273e95197218dd102be6145ce3408dee7dce9a4e758e470380b4c7c49c824290f0eb34636a4d8dc81307b7ec1fb28b6b46c5fb1239f61cf438757a934a7c9262788a5e53699288715d3323bfaaf3ba882548e115a4d7bc0dc6850f7a297ce", 0xa1}], 0x1, &(0x7f00000009c0)}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x34910}], 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x6, 0x7fffffff) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000500)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r3, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000700f8003b02000008100da20600000000000000f0a1ac7f930001004e23000056c7291ad6df92eec2e09a3b0383038e18eda899a9ffe733c7d3ff143248f972ee639b9e8d4b054289587d4d0acfed395ae449b4eaf9c506dcd1e977c76a8cd6e5bd2dc6be2d0b91f613b51608a4649c547d20990216c41a"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0096e236664f5e67913b6d7488cff9a87c545de7584b2dd2a16e33c31de3cf8c1df81b2489ad07e191bb3b7566f242cdfebba36f5e7d44a500040000e928dfa9ca23187d384327be933e203d340daf6f00000180ffff8289684b782f758b5e0f714c4d88180dcd2689f82cd9f14cf500"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x200) dup2(r8, r7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000780)='/dev/midi#\x00', 0x4, 0x4200) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) 08:33:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x10001d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da15}}, 0x14}}, 0x0) 08:33:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) [ 293.986308] bond0: Releasing backup interface bond_slave_1 08:33:20 executing program 4: unshare(0x8020000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r0, 0x0) 08:33:20 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) 08:33:20 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) 08:33:21 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x2100c0, 0x0) r0 = socket(0x400000000010, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r1, 0x0) open(&(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0) 08:33:21 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f000000b000), &(0x7f000000dfe0)) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 08:33:21 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:21 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x1000004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getresgid(&(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00'}) 08:33:21 executing program 4: unshare(0x8020000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r0, 0x0) 08:33:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a80)=[{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)="979ebcded65c5dad3f5a446f760d3125169d0aadb89d038124d3c2bc65348df510ca421ab36dc8f1d2f533ee302f7293d1abcf8eaf93ef835d286fff057dc647de30d273e95197218dd102be6145ce3408dee7dce9a4e758e470380b4c7c49c824290f0eb34636a4d8dc81307b7ec1fb28b6b46c5fb1239f61cf438757a934a7c9262788a5e53699288715d3323bfaaf3ba882548e115a4d7bc0dc6850f7a297ce", 0xa1}], 0x1, &(0x7f00000009c0)}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x34910}], 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x6, 0x7fffffff) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000500)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r3, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000700f8003b02000008100da20600000000000000f0a1ac7f930001004e23000056c7291ad6df92eec2e09a3b0383038e18eda899a9ffe733c7d3ff143248f972ee639b9e8d4b054289587d4d0acfed395ae449b4eaf9c506dcd1e977c76a8cd6e5bd2dc6be2d0b91f613b51608a4649c547d20990216c41a"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0096e236664f5e67913b6d7488cff9a87c545de7584b2dd2a16e33c31de3cf8c1df81b2489ad07e191bb3b7566f242cdfebba36f5e7d44a500040000e928dfa9ca23187d384327be933e203d340daf6f00000180ffff8289684b782f758b5e0f714c4d88180dcd2689f82cd9f14cf500"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x200) dup2(r8, r7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000780)='/dev/midi#\x00', 0x4, 0x4200) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) 08:33:21 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f000000b000), &(0x7f000000dfe0)) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 08:33:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x3f00000000000000}, 0x7ffff000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 08:33:21 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r0, &(0x7f00000002c0)=""/229, 0x53) 08:33:22 executing program 4: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8410000000000084) bind$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 08:33:22 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:22 executing program 0: ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000140)) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00007c040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) exit(0x81) 08:33:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a80)=[{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)="979ebcded65c5dad3f5a446f760d3125169d0aadb89d038124d3c2bc65348df510ca421ab36dc8f1d2f533ee302f7293d1abcf8eaf93ef835d286fff057dc647de30d273e95197218dd102be6145ce3408dee7dce9a4e758e470380b4c7c49c824290f0eb34636a4d8dc81307b7ec1fb28b6b46c5fb1239f61cf438757a934a7c9262788a5e53699288715d3323bfaaf3ba882548e115a4d7bc0dc6850f7a297ce", 0xa1}], 0x1, &(0x7f00000009c0)}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x34910}], 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x6, 0x7fffffff) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000500)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r3, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000700f8003b02000008100da20600000000000000f0a1ac7f930001004e23000056c7291ad6df92eec2e09a3b0383038e18eda899a9ffe733c7d3ff143248f972ee639b9e8d4b054289587d4d0acfed395ae449b4eaf9c506dcd1e977c76a8cd6e5bd2dc6be2d0b91f613b51608a4649c547d20990216c41a"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0096e236664f5e67913b6d7488cff9a87c545de7584b2dd2a16e33c31de3cf8c1df81b2489ad07e191bb3b7566f242cdfebba36f5e7d44a500040000e928dfa9ca23187d384327be933e203d340daf6f00000180ffff8289684b782f758b5e0f714c4d88180dcd2689f82cd9f14cf500"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x200) dup2(r8, r7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000780)='/dev/midi#\x00', 0x4, 0x4200) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) 08:33:22 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x1000004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getresgid(&(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00'}) 08:33:22 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:23 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000240)=""/170, 0xaa, 0x10040, 0x0, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000300)) stat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@remote, @in=@remote}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000740)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@mcast1, @in=@loopback}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000008c0)=0xe8) getresgid(&(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)) getegid() getgid() getresgid(&(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)) getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) getgroups(0x1, &(0x7f0000000bc0)=[0xee00]) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x80, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000040), 0x20000040}]) fcntl$dupfd(r1, 0x406, r0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) 08:33:23 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000a80)=[{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)="979ebcded65c5dad3f5a446f760d3125169d0aadb89d038124d3c2bc65348df510ca421ab36dc8f1d2f533ee302f7293d1abcf8eaf93ef835d286fff057dc647de30d273e95197218dd102be6145ce3408dee7dce9a4e758e470380b4c7c49c824290f0eb34636a4d8dc81307b7ec1fb28b6b46c5fb1239f61cf438757a934a7c9262788a5e53699288715d3323bfaaf3ba882548e115a4d7bc0dc6850f7a297ce", 0xa1}], 0x1, &(0x7f00000009c0)}], 0x1, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x34910}], 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x6, 0x7fffffff) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x141080, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000500)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a000, 0x0) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000380)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc") r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0) sendto$inet(r3, &(0x7f00000000c0)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, &(0x7f0000000180)={0x2, 0x4e22}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="000028bd7000fddbdf25020000000700f8003b02000008100da20600000000000000f0a1ac7f930001004e23000056c7291ad6df92eec2e09a3b0383038e18eda899a9ffe733c7d3ff143248f972ee639b9e8d4b054289587d4d0acfed395ae449b4eaf9c506dcd1e977c76a8cd6e5bd2dc6be2d0b91f613b51608a4649c547d20990216c41a"], 0x1}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0096e236664f5e67913b6d7488cff9a87c545de7584b2dd2a16e33c31de3cf8c1df81b2489ad07e191bb3b7566f242cdfebba36f5e7d44a500040000e928dfa9ca23187d384327be933e203d340daf6f00000180ffff8289684b782f758b5e0f714c4d88180dcd2689f82cd9f14cf500"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x200) dup2(r8, r7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000780)='/dev/midi#\x00', 0x4, 0x4200) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc) 08:33:24 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xd) recvmmsg(r1, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002640)=""/230, 0xe6}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/221, 0xdd}, {&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f0000003840)=""/98, 0x62}, {&(0x7f00000038c0)=""/81, 0x51}, {&(0x7f0000003940)=""/214, 0xd6}, {&(0x7f0000003a40)=""/159, 0x9f}, {&(0x7f0000003b00)=""/47, 0x2f}, {&(0x7f0000003b40)=""/224, 0xe0}], 0xa, &(0x7f0000003d00)=""/104, 0x68, 0x4}, 0x84dd}, {{&(0x7f0000003d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003e00)=""/234, 0xea}, {&(0x7f0000003f00)=""/80, 0x50}], 0x2, &(0x7f0000003fc0)=""/79, 0x4f, 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/193, 0xc1}, {&(0x7f00000041c0)=""/83, 0x53}, {&(0x7f0000004240)=""/39, 0x27}, {&(0x7f0000004280)=""/43, 0x2b}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/27, 0x1b}, {&(0x7f0000005980)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0x2}, 0xfffffffffffffff8}, {{&(0x7f0000005380)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005400)=""/189, 0xbd}, {&(0x7f0000006980)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/138, 0x8a}], 0x3, 0x0, 0x0, 0x9}, 0x80000000}], 0x4, 0x101, &(0x7f0000005740)={0x77359400}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000005780)={@multicast2, @local, r2}, 0xc) epoll_pwait(r1, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1, &(0x7f0000000440)={0x1}, 0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000480)=0xfffffffffffffff0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000580)="9dde16d333e5cbf2cd61c103b81b94aae21726a0a830531ac30d2dc4ec46029eb92a4c270eb98c63fc00e342bfca671ca8475294a15b705693d08a5bf7626eb5a06bccda80857df1086d90a248c5e2979fce50a5810cfdba1016a151485926ea69ac08938d97d31119f38bd0d67e345eb1fa44bf529c68079c660582c4f43e46bec8bb3352ee20cbde99ac7d1abb6ac2a2543fa311c192a4ff8335b45a0cb5b4e4853a876c17b3a571aee4bd520636b059ff", 0xb2}], 0x1, 0x81806) getrandom(&(0x7f0000000380)=""/186, 0xba, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000004140)={0x0, 0x81}, &(0x7f0000004180)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000079c0)=ANY=[@ANYBLOB="0100060001803f00000001c68c0615627dccb200f003e302d3222fc62e1d985022e8916dd4da6a706b4257fc1077850b6e8bc52573adca03000000000000001dedd38a3bea2bc999d25a64de9fed952ec40b65c3160885982267d3b824db94f3c81c5182bcf1470095faa70461910c99c9b43125f32b89cf919b5315e8a57baffb15d16f3be1525906ffbe750f254793416860c609a6b0f6ce5100000000"], &(0x7f0000005800)=0x1) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000000c0)) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000140)) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000180)={0x4, 0x1}) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001640)=""/4096) modify_ldt$write(0x1, &(0x7f00000002c0)={0xbdb, 0x1000, 0xffffffffffffffff, 0x5, 0x7222, 0xff, 0x9947, 0x7fffffff800000, 0x9, 0x3}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x400000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x3f00000000000000}, 0x7ffff000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 08:33:24 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@loopback}, &(0x7f0000001640)) r1 = memfd_create(&(0x7f0000001280)='+GPLuser*/&^\x00', 0x0) r2 = eventfd2(0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x20141042, 0x0) ioctl$TIOCEXCL(r3, 0x540c) lsetxattr$trusted_overlay_redirect(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='trusted.overlay.redirect\x00', &(0x7f0000001600)='./file0\x00', 0x8, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) linkat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) ftruncate(r3, 0xb3d4) sendfile(r2, r3, &(0x7f0000000040), 0x2008004fffffffe) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) setsockopt$inet_buf(r1, 0x0, 0x3f, &(0x7f0000000340)="5d4fcb295fd15bfd9c20a1eff74bc1a4a213e9427282bef6c72293159d5f0016be78d3359a9ba01f234229ee23406afdc6b7738c8854f99bc6948884f245b47d5c382bf66479f985468bf7858e5d3128134d7fbe4dacc904edfc14dfc7c48435719481130df3d06e5c2c73", 0x6b) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0), 0x0, 0x0, 0x0) getpid() getpid() 08:33:24 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x80000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) init_module(&(0x7f00000000c0)='em0\x00', 0xffdb5, &(0x7f00000002c0)='team0\x00') setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000180), 0x4) request_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000280)='\x00', 0xfffffffffffffffe) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000006c0)=""/139, &(0x7f0000000000)=0x8b) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200), 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000780)={'syz'}, &(0x7f00000007c0), 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000002c0), 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffffd, 0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'gre0\x00', @ifru_names='ip6_vti0\x00'}}) 08:33:24 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:33:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000100)="0a5c2d0240316285717070") syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "4f4c8e", 0x8, 0x0, 0x0, @local, @empty, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000000)) 08:33:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1, 0x40012}], 0x1, 0xff) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000e00000020b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 08:33:25 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:25 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x20141042, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) ftruncate(r0, 0x0) 08:33:25 executing program 5: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005780)={@multicast2, @local}, 0xc) epoll_pwait(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x1, &(0x7f0000000440), 0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000480)=0xfffffffffffffff0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x400000102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 08:33:25 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@loopback}, &(0x7f0000001640)) r1 = memfd_create(&(0x7f0000001280)='+GPLuser*/&^\x00', 0x0) r2 = eventfd2(0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x20141042, 0x0) ioctl$TIOCEXCL(r3, 0x540c) lsetxattr$trusted_overlay_redirect(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='trusted.overlay.redirect\x00', &(0x7f0000001600)='./file0\x00', 0x8, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) linkat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) ftruncate(r3, 0xb3d4) sendfile(r2, r3, &(0x7f0000000040), 0x2008004fffffffe) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) setsockopt$inet_buf(r1, 0x0, 0x3f, &(0x7f0000000340)="5d4fcb295fd15bfd9c20a1eff74bc1a4a213e9427282bef6c72293159d5f0016be78d3359a9ba01f234229ee23406afdc6b7738c8854f99bc6948884f245b47d5c382bf66479f985468bf7858e5d3128134d7fbe4dacc904edfc14dfc7c48435719481130df3d06e5c2c73", 0x6b) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0), 0x0, 0x0, 0x0) getpid() getpid() [ 299.624443] can: notifier: receive list not found for dev tap0 [ 299.770705] can: notifier: receive list not found for dev tap0 08:33:26 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xd) recvmmsg(r1, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002640)=""/230, 0xe6}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/221, 0xdd}, {&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f0000003840)=""/98, 0x62}, {&(0x7f00000038c0)=""/81, 0x51}, {&(0x7f0000003940)=""/214, 0xd6}, {&(0x7f0000003a40)=""/159, 0x9f}, {&(0x7f0000003b00)=""/47, 0x2f}, {&(0x7f0000003b40)=""/224, 0xe0}], 0xa, &(0x7f0000003d00)=""/104, 0x68, 0x4}, 0x84dd}, {{&(0x7f0000003d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003e00)=""/234, 0xea}, {&(0x7f0000003f00)=""/80, 0x50}], 0x2, &(0x7f0000003fc0)=""/79, 0x4f, 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/193, 0xc1}, {&(0x7f00000041c0)=""/83, 0x53}, {&(0x7f0000004240)=""/39, 0x27}, {&(0x7f0000004280)=""/43, 0x2b}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/27, 0x1b}, {&(0x7f0000005980)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0x2}, 0xfffffffffffffff8}, {{&(0x7f0000005380)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005400)=""/189, 0xbd}, {&(0x7f0000006980)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/138, 0x8a}], 0x3, 0x0, 0x0, 0x9}, 0x80000000}], 0x4, 0x101, &(0x7f0000005740)={0x77359400}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000005780)={@multicast2, @local, r2}, 0xc) epoll_pwait(r1, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1, &(0x7f0000000440)={0x1}, 0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000480)=0xfffffffffffffff0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000580)="9dde16d333e5cbf2cd61c103b81b94aae21726a0a830531ac30d2dc4ec46029eb92a4c270eb98c63fc00e342bfca671ca8475294a15b705693d08a5bf7626eb5a06bccda80857df1086d90a248c5e2979fce50a5810cfdba1016a151485926ea69ac08938d97d31119f38bd0d67e345eb1fa44bf529c68079c660582c4f43e46bec8bb3352ee20cbde99ac7d1abb6ac2a2543fa311c192a4ff8335b45a0cb5b4e4853a876c17b3a571aee4bd520636b059ff", 0xb2}], 0x1, 0x81806) getrandom(&(0x7f0000000380)=""/186, 0xba, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000004140)={0x0, 0x81}, &(0x7f0000004180)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000079c0)=ANY=[@ANYBLOB="0100060001803f00000001c68c0615627dccb200f003e302d3222fc62e1d985022e8916dd4da6a706b4257fc1077850b6e8bc52573adca03000000000000001dedd38a3bea2bc999d25a64de9fed952ec40b65c3160885982267d3b824db94f3c81c5182bcf1470095faa70461910c99c9b43125f32b89cf919b5315e8a57baffb15d16f3be1525906ffbe750f254793416860c609a6b0f6ce5100000000"], &(0x7f0000005800)=0x1) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000000c0)) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000140)) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000180)={0x4, 0x1}) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001640)=""/4096) modify_ldt$write(0x1, &(0x7f00000002c0)={0xbdb, 0x1000, 0xffffffffffffffff, 0x5, 0x7222, 0xff, 0x9947, 0x7fffffff800000, 0x9, 0x3}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x400000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x3f00000000000000}, 0x7ffff000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 08:33:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0xfffffffffffffffa}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 08:33:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{r2}, {0xffffffffffffffff, 0x1}, {r0, 0x44}, {r0}], 0x4, &(0x7f0000000380)={0x0, r3+30000000}, &(0x7f00000003c0), 0x8) 08:33:26 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x4, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:26 executing program 5: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005780)={@multicast2, @local}, 0xc) epoll_pwait(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x1, &(0x7f0000000440), 0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000480)=0xfffffffffffffff0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x400000102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 08:33:26 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:33:26 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0xd, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:26 executing program 4: inotify_init1(0x0) pipe2$9p(&(0x7f0000002f40), 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000002f00)='y\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{&(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/158, 0x9e}, {&(0x7f0000000640)=""/114, 0x72}, {&(0x7f00000006c0)=""/112, 0x70}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/208, 0xd0}], 0x5}, 0x10001}, {{&(0x7f0000000f00)=@nfc_llcp, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001140)=""/122, 0x7a}], 0x1, &(0x7f00000011c0)=""/40, 0x28}, 0x80000000}], 0x2, 0x101, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e23, 0x0, @mcast1, 0x6}, {0xa, 0x4e20}, 0x5, [0x0, 0x0, 0x0, 0xfffffffffffff001]}, 0x5c) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) 08:33:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)) 08:33:27 executing program 4: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x3, 0x0, 0x6, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1f}, 0x0, 0x0, r0, 0x1) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:27 executing program 5: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005780)={@multicast2, @local}, 0xc) epoll_pwait(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x1, &(0x7f0000000440), 0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000480)=0xfffffffffffffff0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x400000102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 08:33:27 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:27 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xd) recvmmsg(r1, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002640)=""/230, 0xe6}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/221, 0xdd}, {&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f0000003840)=""/98, 0x62}, {&(0x7f00000038c0)=""/81, 0x51}, {&(0x7f0000003940)=""/214, 0xd6}, {&(0x7f0000003a40)=""/159, 0x9f}, {&(0x7f0000003b00)=""/47, 0x2f}, {&(0x7f0000003b40)=""/224, 0xe0}], 0xa, &(0x7f0000003d00)=""/104, 0x68, 0x4}, 0x84dd}, {{&(0x7f0000003d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003e00)=""/234, 0xea}, {&(0x7f0000003f00)=""/80, 0x50}], 0x2, &(0x7f0000003fc0)=""/79, 0x4f, 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/193, 0xc1}, {&(0x7f00000041c0)=""/83, 0x53}, {&(0x7f0000004240)=""/39, 0x27}, {&(0x7f0000004280)=""/43, 0x2b}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/27, 0x1b}, {&(0x7f0000005980)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0x2}, 0xfffffffffffffff8}, {{&(0x7f0000005380)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005400)=""/189, 0xbd}, {&(0x7f0000006980)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/138, 0x8a}], 0x3, 0x0, 0x0, 0x9}, 0x80000000}], 0x4, 0x101, &(0x7f0000005740)={0x77359400}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000005780)={@multicast2, @local, r2}, 0xc) epoll_pwait(r1, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1, &(0x7f0000000440)={0x1}, 0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000480)=0xfffffffffffffff0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000580)="9dde16d333e5cbf2cd61c103b81b94aae21726a0a830531ac30d2dc4ec46029eb92a4c270eb98c63fc00e342bfca671ca8475294a15b705693d08a5bf7626eb5a06bccda80857df1086d90a248c5e2979fce50a5810cfdba1016a151485926ea69ac08938d97d31119f38bd0d67e345eb1fa44bf529c68079c660582c4f43e46bec8bb3352ee20cbde99ac7d1abb6ac2a2543fa311c192a4ff8335b45a0cb5b4e4853a876c17b3a571aee4bd520636b059ff", 0xb2}], 0x1, 0x81806) getrandom(&(0x7f0000000380)=""/186, 0xba, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000004140)={0x0, 0x81}, &(0x7f0000004180)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000079c0)=ANY=[@ANYBLOB="0100060001803f00000001c68c0615627dccb200f003e302d3222fc62e1d985022e8916dd4da6a706b4257fc1077850b6e8bc52573adca03000000000000001dedd38a3bea2bc999d25a64de9fed952ec40b65c3160885982267d3b824db94f3c81c5182bcf1470095faa70461910c99c9b43125f32b89cf919b5315e8a57baffb15d16f3be1525906ffbe750f254793416860c609a6b0f6ce5100000000"], &(0x7f0000005800)=0x1) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000000c0)) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000140)) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000180)={0x4, 0x1}) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001640)=""/4096) modify_ldt$write(0x1, &(0x7f00000002c0)={0xbdb, 0x1000, 0xffffffffffffffff, 0x5, 0x7222, 0xff, 0x9947, 0x7fffffff800000, 0x9, 0x3}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x400000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x3f00000000000000}, 0x7ffff000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 08:33:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) getuid() dup2(r1, r0) [ 301.586728] can: notifier: receive list not found for dev tap0 08:33:27 executing program 4: getrandom(&(0x7f0000000380)=""/186, 0xba, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x400000102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 08:33:28 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffe0}) [ 302.127241] can: notifier: receive list not found for dev tap0 08:33:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) socketpair(0x11, 0xa, 0x0, &(0x7f0000000040)) 08:33:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0xb1, 0x0, 0x0, 0xfffffffffff00000}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000018c0)=@ipx={0x3ab, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80), 0x3ab}}], 0x3ac, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 08:33:28 executing program 4: getrandom(&(0x7f0000000380)=""/186, 0xba, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x400000102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 08:33:28 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x5, 0xffffffffffffffff, 0x8) 08:33:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) socketpair(0x11, 0xa, 0x0, &(0x7f0000000040)) 08:33:28 executing program 5: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x10001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0), 0x0, 0x101, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000003380), 0x4) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x9, 0x3f, 0xffffffff, 0x6, 0x7f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x7, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x3, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x5}, 0x20000, 0x3}, 0x0, 0x0, r0, 0x1) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:28 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xd) recvmmsg(r1, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000002640)=""/230, 0xe6}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/221, 0xdd}, {&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f0000003840)=""/98, 0x62}, {&(0x7f00000038c0)=""/81, 0x51}, {&(0x7f0000003940)=""/214, 0xd6}, {&(0x7f0000003a40)=""/159, 0x9f}, {&(0x7f0000003b00)=""/47, 0x2f}, {&(0x7f0000003b40)=""/224, 0xe0}], 0xa, &(0x7f0000003d00)=""/104, 0x68, 0x4}, 0x84dd}, {{&(0x7f0000003d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003e00)=""/234, 0xea}, {&(0x7f0000003f00)=""/80, 0x50}], 0x2, &(0x7f0000003fc0)=""/79, 0x4f, 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/193, 0xc1}, {&(0x7f00000041c0)=""/83, 0x53}, {&(0x7f0000004240)=""/39, 0x27}, {&(0x7f0000004280)=""/43, 0x2b}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/27, 0x1b}, {&(0x7f0000005980)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0x2}, 0xfffffffffffffff8}, {{&(0x7f0000005380)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005400)=""/189, 0xbd}, {&(0x7f0000006980)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/138, 0x8a}], 0x3, 0x0, 0x0, 0x9}, 0x80000000}], 0x4, 0x101, &(0x7f0000005740)={0x77359400}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000005780)={@multicast2, @local, r2}, 0xc) epoll_pwait(r1, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1, &(0x7f0000000440)={0x1}, 0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000480)=0xfffffffffffffff0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000580)="9dde16d333e5cbf2cd61c103b81b94aae21726a0a830531ac30d2dc4ec46029eb92a4c270eb98c63fc00e342bfca671ca8475294a15b705693d08a5bf7626eb5a06bccda80857df1086d90a248c5e2979fce50a5810cfdba1016a151485926ea69ac08938d97d31119f38bd0d67e345eb1fa44bf529c68079c660582c4f43e46bec8bb3352ee20cbde99ac7d1abb6ac2a2543fa311c192a4ff8335b45a0cb5b4e4853a876c17b3a571aee4bd520636b059ff", 0xb2}], 0x1, 0x81806) getrandom(&(0x7f0000000380)=""/186, 0xba, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000004140)={0x0, 0x81}, &(0x7f0000004180)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000079c0)=ANY=[@ANYBLOB="0100060001803f00000001c68c0615627dccb200f003e302d3222fc62e1d985022e8916dd4da6a706b4257fc1077850b6e8bc52573adca03000000000000001dedd38a3bea2bc999d25a64de9fed952ec40b65c3160885982267d3b824db94f3c81c5182bcf1470095faa70461910c99c9b43125f32b89cf919b5315e8a57baffb15d16f3be1525906ffbe750f254793416860c609a6b0f6ce5100000000"], &(0x7f0000005800)=0x1) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000000c0)) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000140)) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000180)={0x4, 0x1}) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001640)=""/4096) modify_ldt$write(0x1, &(0x7f00000002c0)={0xbdb, 0x1000, 0xffffffffffffffff, 0x5, 0x7222, 0xff, 0x9947, 0x7fffffff800000, 0x9, 0x3}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x400000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x3f00000000000000}, 0x7ffff000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 302.643955] can: notifier: receive list not found for dev tap0 08:33:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) socketpair(0x11, 0xa, 0x0, &(0x7f0000000040)) 08:33:29 executing program 4: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x5, @perf_config_ext={0x1, 0x5}, 0x20000, 0x3, 0xfffffffffffffffc, 0x0, 0x2, 0x20, 0x1f}, 0x0, 0x0, r0, 0x1) sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:33:29 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 08:33:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) socketpair(0x11, 0xa, 0x0, &(0x7f0000000040)) 08:33:29 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) semget$private(0x0, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={0x0, 0x7f}, &(0x7f00000005c0)=0x8) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000200)) r4 = dup(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) close(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x800000, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setfsuid(0x0) clock_gettime(0xfffffffffffffffa, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x28, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x4, 0x5, 0x7}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f00000000c0)={&(0x7f0000000080)=""/1, 0x1}) 08:33:29 executing program 3: 08:33:29 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="fcffffffffffffff"], &(0x7f00000004c0)) 08:33:29 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:33:29 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000055000)={0xffb}, &(0x7f0000c5bff8), 0x8) r1 = getpid() r2 = gettid() readv(r0, &(0x7f0000000100)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x100000000000004c) tgkill(r1, r2, 0x1) 08:33:29 executing program 3: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x275, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7fe, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000007c0)='tunl0\x00', 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x1, &(0x7f0000000080)=""/120) ioctl(r1, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") write(r0, &(0x7f0000000200)="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", 0x595) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x1f4, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 08:33:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)=0x7ff, 0x4) epoll_create1(0x0) shutdown(0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/104, 0x68}], 0x1, &(0x7f0000000380)=""/96, 0x60}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000006c0)={'sit0\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000540)={'nat\x00', 0x4, "7dc7a2e2"}, &(0x7f0000000080)=0x28) socket$inet6(0xa, 0x40000000003, 0x4000200000087) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20000010, 0x3f00000000000000}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x1570, 0x0, 0x0, 0x0, 0x3}}, 0x20}, 0x1, 0xf000}, 0x0) 08:33:30 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x0, 0x0, &(0x7f0000005740)={0x77359400}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005780)={@multicast2, @local}, 0xc) epoll_pwait(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000440), 0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000480)=0xfffffffffffffff0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x400000102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 08:33:30 executing program 0: [ 304.196883] can: notifier: receive list not found for dev tap0 08:33:30 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) semget$private(0x0, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={0x0, 0x7f}, &(0x7f00000005c0)=0x8) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000200)) r4 = dup(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) close(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x800000, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setfsuid(0x0) clock_gettime(0xfffffffffffffffa, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x28, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x4, 0x5, 0x7}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f00000000c0)={&(0x7f0000000080)=""/1, 0x1}) 08:33:30 executing program 3: 08:33:30 executing program 0: [ 304.483093] can: notifier: receive list not found for dev tap0 08:33:30 executing program 1: 08:33:30 executing program 0: 08:33:30 executing program 3: 08:33:30 executing program 4: 08:33:31 executing program 2: 08:33:31 executing program 1: 08:33:31 executing program 0: 08:33:31 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) semget$private(0x0, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={0x0, 0x7f}, &(0x7f00000005c0)=0x8) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000200)) r4 = dup(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) close(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x800000, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setfsuid(0x0) clock_gettime(0xfffffffffffffffa, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x28, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x4, 0x5, 0x7}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f00000000c0)={&(0x7f0000000080)=""/1, 0x1}) 08:33:31 executing program 3: 08:33:31 executing program 4: 08:33:31 executing program 0: 08:33:31 executing program 2: 08:33:31 executing program 1: 08:33:31 executing program 4: 08:33:31 executing program 3: 08:33:31 executing program 0: 08:33:31 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) semget$private(0x0, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="2e2e640fc7a80900fdb8e8038ee0f2e053baf80c66b820bbcb8866efbafc0c66b80000000066ef0f95610166b8150000000f23c80f21f86635000040000f23f8b800008ee8640f9a8803003d0000", 0x4e}], 0x1, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={0x0, 0x7f}, &(0x7f00000005c0)=0x8) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000200)) r4 = dup(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) close(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x800000, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setfsuid(0x0) clock_gettime(0xfffffffffffffffa, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x1}, 0x28, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x4, 0x5, 0x7}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x202, &(0x7f00000000c0)={&(0x7f0000000080)=""/1, 0x1}) 08:33:31 executing program 2: 08:33:32 executing program 0: 08:33:32 executing program 1: 08:33:32 executing program 4: 08:33:32 executing program 3: 08:33:32 executing program 2: 08:33:32 executing program 4: 08:33:32 executing program 3: 08:33:32 executing program 1: 08:33:32 executing program 5: 08:33:32 executing program 0: 08:33:32 executing program 4: 08:33:32 executing program 2: 08:33:33 executing program 3: 08:33:33 executing program 5: 08:33:33 executing program 1: 08:33:33 executing program 0: 08:33:33 executing program 3: 08:33:33 executing program 4: 08:33:33 executing program 2: 08:33:33 executing program 1: 08:33:33 executing program 5: 08:33:33 executing program 0: 08:33:33 executing program 3: 08:33:33 executing program 1: 08:33:33 executing program 2: 08:33:33 executing program 4: 08:33:34 executing program 5: 08:33:34 executing program 0: 08:33:34 executing program 2: 08:33:34 executing program 4: 08:33:34 executing program 3: 08:33:34 executing program 1: 08:33:34 executing program 2: 08:33:34 executing program 3: 08:33:34 executing program 0: 08:33:34 executing program 5: 08:33:34 executing program 1: 08:33:34 executing program 4: 08:33:34 executing program 0: 08:33:34 executing program 3: 08:33:34 executing program 2: 08:33:35 executing program 1: 08:33:35 executing program 5: 08:33:35 executing program 4: 08:33:35 executing program 0: 08:33:35 executing program 3: 08:33:35 executing program 2: 08:33:35 executing program 5: 08:33:35 executing program 1: 08:33:35 executing program 0: 08:33:35 executing program 3: 08:33:35 executing program 4: 08:33:35 executing program 5: 08:33:35 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000340)={r0}) 08:33:35 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:35 executing program 0: 08:33:36 executing program 3: 08:33:36 executing program 4: 08:33:36 executing program 5: 08:33:36 executing program 0: 08:33:36 executing program 2: 08:33:36 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:36 executing program 3: 08:33:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000b00)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 08:33:36 executing program 4: pipe2(&(0x7f0000000340), 0x0) epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) pipe(&(0x7f00000003c0)) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 08:33:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fcca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1, &(0x7f00000020c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006340)) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000500)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0) 08:33:36 executing program 3: 08:33:36 executing program 0: 08:33:36 executing program 2: 08:33:37 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:37 executing program 3: 08:33:37 executing program 0: 08:33:37 executing program 2: 08:33:37 executing program 4: 08:33:37 executing program 3: 08:33:37 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:37 executing program 4: 08:33:38 executing program 5: 08:33:38 executing program 2: 08:33:38 executing program 0: 08:33:38 executing program 3: 08:33:38 executing program 4: 08:33:38 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:38 executing program 3: 08:33:38 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:38 executing program 5: 08:33:38 executing program 4: 08:33:38 executing program 2: 08:33:38 executing program 0: 08:33:38 executing program 3: 08:33:38 executing program 5: 08:33:38 executing program 0: 08:33:39 executing program 2: 08:33:39 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:39 executing program 4: 08:33:39 executing program 3: 08:33:39 executing program 5: 08:33:39 executing program 0: 08:33:39 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:39 executing program 2: 08:33:39 executing program 3: 08:33:39 executing program 4: 08:33:39 executing program 5: 08:33:39 executing program 0: 08:33:39 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:39 executing program 2: 08:33:39 executing program 3: 08:33:40 executing program 0: 08:33:40 executing program 4: 08:33:40 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:40 executing program 5: 08:33:40 executing program 2: 08:33:40 executing program 3: 08:33:40 executing program 4: 08:33:40 executing program 0: 08:33:40 executing program 1: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:40 executing program 3: 08:33:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000280)={0x0, 'ip6_vti0\x00'}, 0x18) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000002c0)={0x10}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:33:40 executing program 2: 08:33:40 executing program 4: 08:33:40 executing program 0: 08:33:41 executing program 2: 08:33:41 executing program 1: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:41 executing program 3: 08:33:41 executing program 4: 08:33:41 executing program 0: 08:33:41 executing program 2: 08:33:41 executing program 4: 08:33:41 executing program 3: 08:33:41 executing program 5: 08:33:41 executing program 1: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:41 executing program 0: 08:33:41 executing program 4: 08:33:41 executing program 2: 08:33:41 executing program 3: 08:33:42 executing program 0: 08:33:42 executing program 3: 08:33:42 executing program 4: 08:33:42 executing program 5: 08:33:42 executing program 2: 08:33:42 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:42 executing program 3: 08:33:42 executing program 4: 08:33:42 executing program 5: 08:33:42 executing program 0: 08:33:42 executing program 3: 08:33:42 executing program 2: 08:33:42 executing program 5: 08:33:43 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:43 executing program 4: 08:33:43 executing program 3: 08:33:43 executing program 0: 08:33:43 executing program 2: 08:33:43 executing program 5: 08:33:43 executing program 4: 08:33:43 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:43 executing program 5: 08:33:43 executing program 2: 08:33:43 executing program 3: 08:33:43 executing program 0: 08:33:43 executing program 4: 08:33:43 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:44 executing program 5: 08:33:44 executing program 3: 08:33:44 executing program 4: 08:33:44 executing program 2: 08:33:44 executing program 0: 08:33:44 executing program 4: 08:33:44 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) read(r0, &(0x7f0000000000)=""/39, 0x24) write$binfmt_elf64(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="7f454c460100040000000000000000008711d400000000000000000000e4ff00020000000018b7074db0cb5a8531eb5bd40000000000000000170000000000cc378c33cb2eda936530c9"], 0x4a) 08:33:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 08:33:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) 08:33:44 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xd) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x0, 0x0, &(0x7f0000005740)={0x77359400}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005780)={@multicast2, @local}, 0xc) epoll_pwait(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000440), 0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000480)=0xfffffffffffffff0) modify_ldt$write(0x1, &(0x7f00000002c0), 0x10) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x400000102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) [ 318.818214] sg_write: data in/out 262109/32 bytes for SCSI command 0x0-- guessing data in; [ 318.818214] program syz-executor5 not setting count and/or reply_len properly 08:33:44 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:44 executing program 0 (fault-call:0 fault-nth:0): perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 318.866884] can: notifier: receive list not found for dev tap0 08:33:45 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="a60000004cad28596db02e5f0a07626996e7985c78001fbfed8f0f82808f6cf718127a071f6f291d004facec3ea04951a1f557c5433debc01d6b1d179a35ab886d49fcef76c40f336781f3f030736ee5f289b7f7daf7b47dc40de44153cb51167e7975c82b1286fcfdab382793afe5ec802633c5a8f616862076479dbc9dd8f4abd26246dc7487ca37988684035a11c5cf4b0b96ecc03fd2f4c527effdb3ed86558fc241930a1727901ef19c167184a99e29fa41fd07cfe5b918df8045602bfafd3b11e7b990dcba7711f7b829eee03ba8db8fb99821339ca62e0728ddcbb8816722caf062705288267cfe"], &(0x7f0000000140)=0xae) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0xe33}, &(0x7f0000000340)=0x7) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={r3, 0x9, 0x9, 0x81, 0x2, 0x9, 0xffffffffffffffff, 0xfffffffffffffe01, {r5, @in={{0x2, 0x4e22, @remote}}, 0x5, 0x10001, 0xffff, 0x7fffffff, 0x4}}, &(0x7f00000002c0)=0xb0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, "1ef4bc48491acd5e0c4b976cba7eef36c40efce39f2b9c125ba7a77d8dd019d6041e65648e7f165944391be5"}) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r2, 0x100}, {r2, 0x1}, {r2, 0x5044}, {r0, 0x200}, {r0}, {r1, 0x4}, {r2, 0x8}, {r1, 0x14}, {r1, 0x24}], 0x9, &(0x7f00000004c0)={r7, r8+10000000}, &(0x7f0000000500)={0xfd}, 0x8) capset(&(0x7f0000000380)={0x20071026, r6}, &(0x7f00000003c0)={0x2, 0x81, 0x1ff, 0x0, 0x7, 0xbdb}) [ 318.959591] can: notifier: receive list not found for dev tap0 08:33:45 executing program 3: r0 = memfd_create(&(0x7f0000000840)="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", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79d28e317994ace19c424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d3248c858b41476ce826511126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e56d8bb054222746bcc5730") fcntl$setstatus(r1, 0x4, 0x4000) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x7}) sendfile(r0, r1, &(0x7f0000000000), 0x1080005000) 08:33:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$inet(0x2, 0x80007, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x301000) ioctl(r0, 0x20000000008914, &(0x7f0000000200)='\n:') syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c7442400ae6934f0c7442402d0ffffffc7442406000000000f011c24f23edff126360f23a1640f01cb0f35b951020000b800900000ba000000000f30817d6b0c0000000fc72b2e2e0f0013f30f2dc3", 0x4f}], 0x1, 0x0, &(0x7f0000000180), 0x0) [ 319.182101] capability: warning: `syz-executor2' uses deprecated v2 capabilities in a way that may be insecure 08:33:45 executing program 4: pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="b3000000ecf63f92abc93fc2aa4cdc8a04916b8159c8520f9dc36764f5400ee9d3ba35a6f8c95686e388e044b5039da1bf33b0c394dafc092e4df5b1b8972258d32121885060cc12bc1376630d0370b0f44b7ee59930baafa1707d400cd3de6e58340fb6004613c7da352f9e09ff4116c9d28eaf0d00f9ec020b3199814cd7dd70899bdce89b945d35ed01a0f3aa94349927658df1a1e4c60fe03f19d6f781b4ac3122019ad840936132cf9194bce12c21fd6900000000"], &(0x7f0000000200)=0xbb) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r1, 0x9}, 0x8) r2 = memfd_create(&(0x7f0000000000)='system[\x00', 0x4) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000040)) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0xf) 08:33:45 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x29, 0x168329ece2ca1bf8) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0xfffffffffffffffb, [0x64, 0xfed8, 0x5, 0x7fff, 0xa11c, 0x9, 0xab, 0x100, 0xc90e, 0x3, 0x9f, 0xc7, 0x1ef21c21, 0x3, 0x5, 0x8, 0x2, 0x100, 0x81, 0xfff, 0xdcb, 0x9, 0x8000, 0xc4f, 0xc0, 0xfff, 0x8f1, 0x7, 0x80000001, 0xffff, 0x8, 0x91, 0xb3f8, 0x3, 0x7ff, 0x5, 0x1, 0x0, 0x9, 0x7f, 0x7, 0x1, 0x0, 0xfffffffffffffbff, 0x9, 0x9, 0x4, 0x231c], 0x7}) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000) 08:33:45 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0xfffffffffffffbff) r1 = request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffb) keyctl$clear(0x7, r1) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="070102ff6d030000000000001c6800000d000000ff01000000000000000000004da551274d18c13538526b5c98e2f73a47e205c1dcfd9450200c9a7e5d5aafc7eef1bd1be8f3e72218b0e67cf159da4990801ef3e327924ee0cb7f700b03c82122dd14093b12dfae643ccf390a4b4adce8b0aedf879d2745cd44500f270b569a552d15b295a548ff0e6af8d2189a5b5faeeaea75ecbd7bf70699ba2f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x39c) lseek(r0, 0x2, 0x0) pwrite64(r0, &(0x7f0000000500)="94548af78803f35a09c13bca6869b66d7d57733557c7a02681ac018047b10c71798fbd864135157c56696ef76ddf8b027af257d52cfd6140faf6e5a9881a9a3a3bbf0b70672efb8c44678f52e3cfb6ce79583cf165a90c2fe5f62aaab2176c60de99378d483c164c2d2a269a72723acd4720795e697ce103f51ab5c03f3fd18e08c79d5d3947aa22055394e30cd6267ab5c96ec2a3433e38d9675740fb9580d206b2a8", 0xa3, 0x80000000000000) 08:33:45 executing program 0: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00003a0000/0x3000)=nil, 0x3000, 0x6, 0x801e, 0xffffffffffffffff, 0x4000) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000415000/0x4000)=nil, 0x4000, 0x1000, 0x13, &(0x7f000000a000/0x1000)=nil) r0 = socket$inet_dccp(0x2, 0x6, 0x0) signalfd(r0, &(0x7f0000000040)={0x3}, 0x8) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5, 0x40) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000140)=""/101) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x50000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000100)={0x7, 0x4000}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000001c0)) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000200)) 08:33:45 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 08:33:45 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xa1e}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x659a, 0x50, 0x8201, 0x0, 0x7, 0x9, 0x5, 0x4, r1}, &(0x7f0000000200)=0x20) r2 = epoll_create1(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) r5 = getpgrp(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r0, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000400)={0x5f0, 0x12, 0x7, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x3}, [@generic="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", @nested={0xc, 0x36, [@typed={0x8, 0x56, @pid=r3}]}, @typed={0x8, 0x38, @pid=r4}, @nested={0x220, 0x77, [@generic="047913d5a698e8e19a8e53a08806f9e43836e077641ca43652e45e489d103d512ce3995e1c237e5f619ff14f2281f898faa4eb206fbbb835640d3e471840e0f9579075bf698e10feef7dd1d98e3a6aca2b4f764f1f9fa329ef4c1b6bba181a64801e241d85c38e220624fa09d1739a83d3ad706eb5fd5cb50d532728226fffcbb249b1314eaeacc36f39450cf6c99d6fcab40cdb726fc82ca7bb13ebed2fe555f13f2384c2e9369acd3d345b460cad477af8428d4a", @typed={0x8, 0x9, @fd=r0}, @typed={0x8, 0x78, @u32=0x4248}, @typed={0x8, 0x39, @ipv4=@broadcast}, @generic="c00df82d51b69ee6900827c9a22b3f0dbba0be0a5e40dbd2850865219cd1d46a6de6070a25a6682b364886cbc4a1f9f938de79ffc52423e99c0c93399fb3bcdc1c37154219cb7e5e629ce3fcba3a693ee9da727546dbf12b3b30fd82c09cb486ef324de3354ec6fd46f5808e4bc5ba", @generic="04da155d8783984b81d9b216ed8615fb60799ae79019553f2c334f033dbc906339cfc9636058e0c765ad7afe5690b43c54ec0bef476ca064c664a7950a4560c3ce7bc6f63783d3fa24bcd08f06279736fbece2dd850271e882d1e707e31bd698f13fd4228fd5b45f128f25043d64033561f3d994fe91668d49ed256f5fa50fd0e709fe25bf41840ad015f905ed47e368bd7b45a53a61c398845ed1a47ab53976786bd5dbd84567ad9fbcff22c7883835854e5801e68b77eb247527d021d3577bb17f039f4734f5b4ab500781eba3a00a724fe6e10c7ae2ac5d75fdd1e8e6"]}, @generic="94d4c1e80b31b0d658a897ab414d3cae618de48080676bd2cf2c18e6b7b4a81d683ef6fe03fbcb50b4f13a1333e7bb5717afbcf66f6433d9d5793a1de76b4d3240f0fe03354fa8248b7bec137a0ebc47d2", @nested={0x4, 0x4a}, @nested={0x1a0, 0x56, [@typed={0x8, 0x0, @ipv4}, @generic="3a30854882c277f5965fca70f1c285713c027d292c61359e3ca120fe8057b6155c5ae51ef8ba830c98f677d7e8d6e3d1618f925a4674e1701547de5f70c21a993b4cd4", @generic="431522f0ce8ab6ae1dca56b714038d6b549849bfd35f0b2bb69cef97c50fdf35ebd417462f74d0b22ec7dca2e2ad99b040ac682a7392ee61fe3dabdcf494612371d4285f7d3c361774666f6113372c97f154d85c40a9f4a75aa34b72a87814597a7883e7a466e10c460ca169b60589cc8c6fa10083539dbcb3420fa721354b81961456eb334c1161ba1c3bd3a5927cf86d79883617391e80904b0c6f5d65d133a4dfc5e42bfd5580328eae1e11c210b5c426f4b12270827692178ed378f2f52394bdca67f28cc9439269a1c1b31d93049b2a0c84e5df6b513b1f58cc1cd369589484a27a5eb161b9267f79bdb2c5e55e68fe0b", @generic="143cc2efc1a9fc32be0dd88806208c3f223f3de08f72d0a7662ab014a5281865c1b19affa8dcba86eb103c", @typed={0x8, 0x34, @pid=r5}, @typed={0x8, 0x28, @ipv4=@broadcast}, @typed={0x14, 0x40, @str='cpuset$md5sum\x00'}, @typed={0x4, 0x6e}, @typed={0x8, 0x42, @pid=r6}]}, @typed={0x8, 0x32, @uid=r7}, @nested={0xb0, 0x96, [@typed={0x14, 0x26, @ipv6=@remote}, @generic="7015650df47b8e16a78b4c767025793903e2c0722f9f792de285f03fda68d7189fdfd10d8cd674bd46d785f7dd9ada48205a4226973117516dd915652a6c502d9d922c1e5c016c7b8ee41071b5f46c6da88c5465ff9c6a064cb5659b8b3eb0dbf67bcf6a6daa9e", @generic="8548db0bcbf87682781014ba536ade204773", @typed={0x14, 0x7e, @ipv6=@mcast1}, @typed={0x8, 0x27, @fd=r2}]}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x800}, 0x800) fcntl$lock(r2, 0x7, &(0x7f0000000180)) fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x2, 0x0, 0x9, 0x100000001}) 08:33:46 executing program 3: r0 = memfd_create(&(0x7f0000000840)="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", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79d28e317994ace19c424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d3248c858b41476ce826511126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e56d8bb054222746bcc5730") fcntl$setstatus(r1, 0x4, 0x4000) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x7}) sendfile(r0, r1, &(0x7f0000000000), 0x1080005000) 08:33:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0xfffffffffffffbff) r1 = request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffb) keyctl$clear(0x7, r1) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x39c) lseek(r0, 0x2, 0x0) pwrite64(r0, &(0x7f0000000500)="94548af78803f35a09c13bca6869b66d7d57733557c7a02681ac018047b10c71798fbd864135157c56696ef76ddf8b027af257d52cfd6140faf6e5a9881a9a3a3bbf0b70672efb8c44678f52e3cfb6ce79583cf165a90c2fe5f62aaab2176c60de99378d483c164c2d2a269a72723acd4720795e697ce103f51ab5c03f3fd18e08c79d5d3947aa22055394e30cd6267ab5c96ec2a3433e38d9675740fb9580d206b2a8", 0xa3, 0x80000000000000) 08:33:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000400)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x80002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2000, 0x0) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f0000000180)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) fchown(r2, r3, r4) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f00000002c0)={0x72, 0xb3ea, 0x1, 0x5, 0x1ff, 0x9}) setsockopt$inet6_buf(r1, 0x29, 0x2, &(0x7f0000000140), 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x73) 08:33:46 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x44000, 0x100) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x5, 0x0, 0x2, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x3, 0xfff, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x37b4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'team_slave_1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}) 08:33:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="61adfa274045c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x20000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:33:46 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) [ 320.514216] QAT: Invalid ioctl 08:33:46 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x802, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$int_in(r0, 0x800000c0045006, &(0x7f00000000c0)=0x20000000000080) read$FUSE(r0, &(0x7f0000000240), 0x1000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x3, 0x40, 0x4, 0x2, 0x1}) [ 320.563870] QAT: Invalid ioctl 08:33:46 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xffff, 0x2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x12c00, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x2, 0xe64, 0x5, 0x100000000, 0x0, 0x80, 0x8000, 0x2, 0xffff, 0x7, 0x40, 0xffffffffffffff2a, 0x81, 0x7, 0x100000001, 0x4, 0xb648, 0x80, 0x10000, 0x1, 0x3, 0x3, 0x9c, 0x5, 0x0, 0x400, 0x8, 0xc72, 0x8, 0x3f, 0x5, 0x0, 0x1, 0x4, 0x2, 0x1, 0x0, 0x7a67, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x4, 0x5, 0x2, 0x5, 0xf9, 0x9, 0x100}, 0xffffffffffffffff, 0xe, r1, 0x8) 08:33:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x402100, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0xa, [0x1, 0x2, 0x4, 0x200, 0x8000, 0x5a3e0f0f, 0x0, 0x1, 0x3, 0x6]}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x0, @loopback}}}, 0xa0) 08:33:46 executing program 1 (fault-call:3 fault-nth:0): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) [ 321.011006] FAULT_INJECTION: forcing a failure. [ 321.011006] name failslab, interval 1, probability 0, space 0, times 1 [ 321.022574] CPU: 0 PID: 9319 Comm: syz-executor1 Not tainted 4.19.0+ #80 [ 321.029457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.038855] Call Trace: [ 321.041459] ================================================================== [ 321.048846] BUG: KMSAN: uninit-value in get_stack_info+0x720/0x9d0 [ 321.055180] CPU: 0 PID: 9319 Comm: syz-executor1 Not tainted 4.19.0+ #80 [ 321.062026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.071385] Call Trace: [ 321.073988] dump_stack+0x419/0x480 [ 321.077641] ? _raw_spin_lock_irqsave+0x237/0x340 [ 321.082500] ? get_stack_info+0x720/0x9d0 [ 321.086686] kmsan_report+0x19f/0x300 [ 321.090514] __msan_warning+0x76/0xd0 [ 321.094337] get_stack_info+0x720/0x9d0 [ 321.098350] __unwind_start+0x7d/0xe0 [ 321.102166] show_trace_log_lvl+0x20e/0x11e0 [ 321.106601] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 321.112008] show_stack+0x12e/0x170 [ 321.115658] dump_stack+0x32d/0x480 [ 321.119308] should_fail+0x11e5/0x13c0 [ 321.123220] __should_failslab+0x278/0x2a0 [ 321.127492] should_failslab+0x29/0x70 [ 321.131392] kmem_cache_alloc+0x146/0xe20 [ 321.135569] ? vm_area_dup+0x65/0x1a0 [ 321.139388] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 321.144856] vm_area_dup+0x65/0x1a0 [ 321.148503] __split_vma+0x1ec/0xc10 [ 321.152233] split_vma+0x10f/0x170 [ 321.155791] userfaultfd_ioctl+0x46c6/0x67a0 [ 321.160232] ? kmsan_set_origin+0x83/0x130 [ 321.164513] ? userfaultfd_poll+0x390/0x390 [ 321.168850] do_vfs_ioctl+0xf77/0x2d30 [ 321.172787] ? security_file_ioctl+0x92/0x200 [ 321.177301] __se_sys_ioctl+0x1da/0x270 [ 321.181293] __x64_sys_ioctl+0x4a/0x70 [ 321.185199] do_syscall_64+0xcf/0x110 [ 321.189017] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 321.194220] RIP: 0033:0x457569 [ 321.197424] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.216331] RSP: 002b:00007faf1e53ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.224055] RAX: ffffffffffffffda RBX: 00007faf1e53ac90 RCX: 0000000000457569 [ 321.231335] RDX: 0000000020000000 RSI: 000000008010aa01 RDI: 0000000000000003 [ 321.238617] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 321.245895] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf1e53b6d4 [ 321.253175] R13: 00000000004c143d R14: 00000000004d22c0 R15: 0000000000000004 [ 321.260460] [ 321.262092] Local variable description: ----state@show_trace_log_lvl [ 321.268581] Variable was created at: [ 321.272320] show_trace_log_lvl+0xb3/0x11e0 [ 321.276655] show_stack+0x12e/0x170 [ 321.280278] ================================================================== [ 321.287640] Disabling lock debugging due to kernel taint [ 321.293096] Kernel panic - not syncing: panic_on_warn set ... [ 321.293096] [ 321.300475] CPU: 0 PID: 9319 Comm: syz-executor1 Tainted: G B 4.19.0+ #80 [ 321.308708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.318053] Call Trace: [ 321.320647] dump_stack+0x419/0x480 [ 321.324281] panic+0x57e/0xb28 [ 321.327495] kmsan_report+0x300/0x300 [ 321.331298] __msan_warning+0x76/0xd0 [ 321.335100] get_stack_info+0x720/0x9d0 [ 321.339079] __unwind_start+0x7d/0xe0 [ 321.342884] show_trace_log_lvl+0x20e/0x11e0 [ 321.347287] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 321.352662] show_stack+0x12e/0x170 [ 321.356286] dump_stack+0x32d/0x480 [ 321.359911] should_fail+0x11e5/0x13c0 [ 321.363799] __should_failslab+0x278/0x2a0 [ 321.368031] should_failslab+0x29/0x70 [ 321.371909] kmem_cache_alloc+0x146/0xe20 [ 321.376063] ? vm_area_dup+0x65/0x1a0 [ 321.379857] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 321.385317] vm_area_dup+0x65/0x1a0 [ 321.388941] __split_vma+0x1ec/0xc10 [ 321.392659] split_vma+0x10f/0x170 [ 321.396214] userfaultfd_ioctl+0x46c6/0x67a0 [ 321.400641] ? kmsan_set_origin+0x83/0x130 [ 321.404896] ? userfaultfd_poll+0x390/0x390 [ 321.409209] do_vfs_ioctl+0xf77/0x2d30 [ 321.413102] ? security_file_ioctl+0x92/0x200 [ 321.417830] __se_sys_ioctl+0x1da/0x270 [ 321.421798] __x64_sys_ioctl+0x4a/0x70 [ 321.425684] do_syscall_64+0xcf/0x110 [ 321.429480] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 321.434662] RIP: 0033:0x457569 [ 321.437851] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.456766] RSP: 002b:00007faf1e53ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.464484] RAX: ffffffffffffffda RBX: 00007faf1e53ac90 RCX: 0000000000457569 [ 321.471743] RDX: 0000000020000000 RSI: 000000008010aa01 RDI: 0000000000000003 [ 321.479001] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 321.486264] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf1e53b6d4 [ 321.493542] R13: 00000000004c143d R14: 00000000004d22c0 R15: 0000000000000004 [ 321.502026] Kernel Offset: disabled [ 321.505678] Rebooting in 86400 seconds..