[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.422543] audit: type=1800 audit(1548617827.143:25): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 41.443062] audit: type=1800 audit(1548617827.153:26): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 41.471880] audit: type=1800 audit(1548617827.153:27): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.134' (ECDSA) to the list of known hosts. 2019/01/27 19:37:20 fuzzer started 2019/01/27 19:37:23 dialing manager at 10.128.0.26:39951 2019/01/27 19:37:23 syscalls: 1 2019/01/27 19:37:23 code coverage: enabled 2019/01/27 19:37:23 comparison tracing: enabled 2019/01/27 19:37:23 extra coverage: extra coverage is not supported by the kernel 2019/01/27 19:37:23 setuid sandbox: enabled 2019/01/27 19:37:23 namespace sandbox: enabled 2019/01/27 19:37:23 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/27 19:37:23 fault injection: enabled 2019/01/27 19:37:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/27 19:37:23 net packet injection: enabled 2019/01/27 19:37:23 net device setup: enabled 19:40:28 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x800000, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x113, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x9}}, 0x10) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x204000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000140)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001540)={0x6, 0x0, [{0x116000, 0x9b, &(0x7f0000000180)=""/155}, {0x5002, 0x1000, &(0x7f0000000240)=""/4096}, {0xd000, 0xa9, &(0x7f0000001240)=""/169}, {0x5002, 0xc0, &(0x7f0000001300)=""/192}, {0x4, 0x6f, &(0x7f00000013c0)=""/111}, {0x1000, 0xc2, &(0x7f0000001440)=""/194}]}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001640)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) readv(r0, &(0x7f0000001b00)=[{&(0x7f0000001680)=""/158, 0x9e}, {&(0x7f0000001740)=""/212, 0xd4}, {&(0x7f0000001840)=""/206, 0xce}, {&(0x7f0000001940)=""/62, 0x3e}, {&(0x7f0000001980)=""/95, 0x5f}, {&(0x7f0000001a00)=""/201, 0xc9}], 0x6) r5 = syz_open_dev$cec(&(0x7f0000001b80)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000001bc0)={0xfffffffffffffff7, "0ada94cc6255f6e43173f5f4f8c6ce339984a0104fd62d1a7e21cb084ede8231", 0x1, 0xc68, 0x0, 0x80, 0x4000000, 0xa}) munlockall() r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_dev$audion(&(0x7f0000001c40)='/dev/audio#\x00', 0x200, 0x341000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001cc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001c80)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000001d00)=0x80, 0x4) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000001d40)={0x5, 0x0, 0x3, {0x80000000, 0x10001, 0x5}}) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000001d80)) syncfs(r9) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000001dc0)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000001e80)={0x15, 0x110, 0xfa00, {r8, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1e, @mcast1, 0x400}, @in={0x2, 0x4e22, @rand_addr=0x2}}}, 0x118) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/mixer\x00', 0x10100, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000002000)) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000002040)={0x18, 0x1, 0x0, {0x21d}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002080)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f00000020c0)=r11) io_setup(0x0, &(0x7f0000002100)=0x0) io_submit(r12, 0x6, &(0x7f0000002580)=[&(0x7f00000021c0)={0x0, 0x0, 0x0, 0x8, 0x5, r3, &(0x7f0000002140)="780f9fb734f41554971b602f41d5afdce457d3973644e3d40a9129845d8a0d8f30d3461771b43a60e30c36994bba588475a92a15cefb8d88faf11ecc35291f78156c1503741949", 0x47, 0x5, 0x0, 0x1, r5}, &(0x7f0000002240)={0x0, 0x0, 0x0, 0xf, 0x8, r7, &(0x7f0000002200)="dc7195760c72f4de4a8e13c518790f2104afa3a717ea23f3a31f7f19e54dd198733c38fd8b8b9ab0d6599419", 0x2c, 0x6, 0x0, 0x2, r7}, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x7, 0x35, r1, &(0x7f0000002280)="a26a1cff69b20264ae84e5a98bd3fe2b3b3636cee0b9a51a8182b1d1d6198e3bb43406b049d749b654afddcdc97826e283d57a2fe309a2eb0413c2841e93a353d848ef382a22e51f3af9", 0x4a, 0x7e14, 0x0, 0x3, r10}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x3, 0xdb1, r6, &(0x7f0000002340)="81add40efa7371e746396538fc318845cb4583afd9bf2254e6e29170bbc21cc9afdeaaf45b2774420f849c51b0727288eed002bdde5900b969c49530fb296ec60ccb08968b3bca4e7f6429306d9d", 0x4e, 0x9, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x2, 0x10000, r1, &(0x7f0000002400)="d4fb312297c16281f2c7e1887153ac1e767e770d078641d764f4cf4e4918889379ed4464c61e50024b75abeeb3d9b469123ec185005c88c42a556c42ff69b2c800e85155119ae32c0c96c8a2955f1743abb7352db8d1d236339660b923e4f7844194faf6f5ff2725df29dc0ab98cafae08703f2e2947a6934bccd74455df4b7e4e3fbe55ba7a8886717f83890c97cce29b", 0x91, 0x702, 0x0, 0x2, r7}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x2, 0x20, r5, &(0x7f0000002500), 0x0, 0x1000, 0x0, 0x3, r4}]) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000025c0)={0x8000000000000000, 0x0, 0x200, 0x4, 0x12}) syzkaller login: [ 243.285350] IPVS: ftp: loaded support on port[0] = 21 19:40:29 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2041, 0x0) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = getpgrp(0xffffffffffffffff) setpriority(0x1, r1, 0x8000) setpriority(0x0, r1, 0x5b23) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000100)={0x1, "ed191ff269b63c316c8adc30b6e5ee5ad029cdb138d37ba18f9bee2ac6211665", 0x2}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000140)={0x9, 0xffffffff}) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000180)={0x20}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)={r2, 0x79, "065b02d93b5793a17126dd66178991c3b249379616cc59ae659101c0024da69e39960ff89530d8aece9f8453f987ae4c03387dfb7a3ee11f87d8d1439d2105aa709f42fcc4ffd2007d391405401d7e2d897e745b4f578a2a2b86cdff1e89a86beec429e59630e631387d3543c7b7c1dddaa6b65dc315cdb102"}, &(0x7f00000003c0)=0x81) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=0x0) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$can_raw(0x1d, 0x3, 0x1) write$P9_RLINK(r0, &(0x7f00000004c0)={0x7, 0x47, 0x1}, 0x7) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000500)="621651b03e55c9be828b5946061693fd0575fa9ebe794cd2fe808560a2e93ddf7b1bc491f4d98ec448c4292fc1544473dd95098cfcad6b2f909fac346af9ec33908eac34aea73fd9618be55dd7106ff1807f6cd3f2c4c1f04c126fe6b03ace9d43c16c566e52576983512ea18fdd1530207ce204e79e40d48a4e19160865d72b60dc427b04a7f5b8466b85d691f11d7c702fa851e84d9488b4e3e5de9cce3c9145771f579e47166412af73a1d420282a04ceb3a54c74bed7d7a403484b5ab5179936a8") setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000006c0)={{&(0x7f0000000600)=""/92, 0x5c}, &(0x7f0000000680), 0x40}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nullb0\x00', 0x80, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000740)=0x3) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000780)=@assoc_value={r2, 0x7}, &(0x7f00000007c0)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000800)={r0}) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000840)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x4, 0x0, "452d9fa111025b23955bf17b530c6e26775897c50aa56fa1b010a814bcca05ce1caabe9f9d21351d9f1a6bdcea939599a98b599696aa8b10801b6d979a14da26a91f1eff77080bdc1fb5620f55911b6c"}, 0xd8) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000940)=""/190, &(0x7f0000000a00)=0xbe) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, r6, 0x5648ba040cfe3aa7, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x3, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4005) waitid(0x0, r3, &(0x7f0000000bc0), 0x1000009, &(0x7f0000000c40)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10210}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x88, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0xe}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x945}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000ec0)={'filter\x00', 0x4}, 0x68) ioctl(r0, 0x0, &(0x7f0000000f40)="f6b79c3b6dea3839e30e8b04599fbead069c6cd9b990a5674096055755414c68b37aae7283ef6d6c6d1d59cbf02333e5c19cf04d84de50907f3cec8f63fc23de3e5bbcffb5c11810c702130b804b11daf15010ce48f7c9f0a792a57a10595d2fe2ab108f555a89bca86253ad5d53e1811f206d4c56518c859a339679f93521f51f84296ea3bd7688ad95fdfb30c4183688158320c610810e292b9c83722810a829bcb4486d668f406b93eb71982b702ea7dbc256e5592c8b3a11f86b7d658a1065e99c05b5a8896d5f3843320b8b71e229222c0646d091c344d97de1") [ 243.429519] chnl_net:caif_netlink_parms(): no params data found [ 243.492341] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.500440] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.509533] device bridge_slave_0 entered promiscuous mode [ 243.518174] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.526198] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.533615] device bridge_slave_1 entered promiscuous mode [ 243.560472] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.565095] IPVS: ftp: loaded support on port[0] = 21 [ 243.573518] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.602979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.612975] team0: Port device team_slave_0 added [ 243.621298] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 243.632343] team0: Port device team_slave_1 added [ 243.640727] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 243.658166] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 19:40:29 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/dlm_plock\x00', 0x8000, 0x0) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000001600)="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", 0x1000) r1 = add_key$keyring(&(0x7f00000026c0)='keyring\x00', &(0x7f0000002700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000002600)='rxrpc\x00', &(0x7f0000002640)={'syz', 0x1}, &(0x7f0000002680)='/dev/dlm_plock\x00', r1) exit(0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000002740)={0x101}, 0x4) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000002780)={"e857be51257215ba6d2287a8d52503ef43536722514a5fcef00b50187646f3ec624d5a5bbce8074c5cf37c9017163a1efebf928b9853a068f1b4df3c3dab1bed0e312492c27aa55466f3db1ef0001bbd275b00bcc66e9982159284c9a27888b80780421c5c5b5eb7d620e60c329023217dfd626cfb6b200c5d01f7594cbf2bbc894e9b8d5284ba41a018f1ce1930380e97d16df10b0e3dd4f97357630ee59498714be8dd007ea9ccf772001482ebd3d16e800e8227acb7b912c2c3dedef22bb846ac227633d72af738fce5332bf8d312c485696c49b79d4ac0fd48d3b02f41a51095105e7b520bee4c198f961c05d9d20320f4660304e6d59676bb63a678a133f3a57a517fa4bd732bd85777aead0c2ead5796045ef3278276f10fb456143c0f76bde6fa82304d7ec891483d99bd7ae388dab62c5777158c4ef268992b0c1b7fbe3823e628e4ca5e218600cfcd99cdf507d23d90d5a49119615be24b641cbb2793410d032ae714c118d20071ff7a5fb010d345c61dbbac4c4bef46cb2b6a64e88dbd0edc1e28f484dd46c4bd47505d2c56d485f5884c0b3ce0453e0e665887600dd34de66c48a8c3482211e9c70f5572626a4ba40053dc064560fd0f65f8a912bbb06c7e3ed01d60a0d5835229201c95fde67ae40cce494db29949ea07a9ce38b355a732ced23bcd0a842867453ec9dfbcc698cc01a48f48ee9bed89884123fe002f6975bcd74fd6235337af01fcfd4539f4f27661152978928f2a47ab26f9305e403fb476c440df3848600ef7fcc692300e4424c6a79a3a860ec9383dbfeb7e6f4ff4fa074b2bdbaaaa2046f248bb5338d7e487704100b418696d2645ff18b64cc5246203ea5efe3ce904b870680cfe7bfa645e4d89b504cd69eb77b8f366c2fe6a2f01ae2507093fc77f5ee2658862a72049a730bf91e538bd820169623e6c5e7a6648702ea0722fbb632e0e8116afbc0e90145505cbbd56ccecb4614fc85cf2a487a7005e0bb3262c6c2f9f8819270f1e1d67e95fdd7a62982ecf1254dda5e49873cd68c70fea65a367621a3fb865092047b3410ca7344161e8374dd9d73a2ba4a4984baa7087baeeaf70745c12927f0fb2912274916299e63216a22db544f25b6b254e8b0d617478c3563f7e38bdb6c7ac886b140e01dc801c113d39a1d628416dbf77d196e75416a4e63e1692ee9f64b5f8ffee21c152660ec6bf947caff9b229642b2db42c8d70e01bd4512ec60ee2ca82552b6cd5f04c9d5bccad7783bb61f5e78f9b087e9615a6843432d6ef9db5968679c4b156fba861aa6bfde4479bcb06718cfa1eb26c388c509a3658453f9b0b3cec014701ce1207c84bc9a8a9f0c911bafc69c6e490563eeb2fc000d830376ba462adab56a26df898990370a6e51efb3c8fdde4bac0265576206f813479698efc1a7404f02fa3b1cdbba29fc5"}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000002b80)={0x10000, 0xfffffffffffffff7, 0xd46, 0x5e967321, 0x4, 0x8001}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000002bc0), 0x4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000002c00)={0x8, 0xfffffffffffffffe, 0x8, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000002c40), &(0x7f0000002c80)=0x4) ioctl$int_in(r0, 0x5473, &(0x7f0000002cc0)=0x6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000002d00)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000002d40)={r2}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002d80)) r4 = syz_open_dev$radio(&(0x7f0000002dc0)='/dev/radio#\x00', 0x2, 0x2) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000002e00), &(0x7f0000002e40)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000002e80)=0x6, 0x8) read$alg(r4, &(0x7f0000002ec0)=""/179, 0xb3) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000002f80)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000002fc0)={0x0, 0x6, 0x40}, &(0x7f0000003000)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000003040)={r5, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000003100)={r2}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000003140)={0x0, "4903f7dbd7e254e79c9d81467eed5f5377503fba37ca65ec4bb01463a64a9e3b", 0x1, 0x6, 0x2, 0x205f927, 0x2, 0x2}) mknodat(r0, &(0x7f00000031c0)='./file0\x00', 0xe82a, 0x4) syz_open_dev$vbi(&(0x7f0000003200)='/dev/vbi#\x00', 0x3, 0x2) timerfd_create(0x8, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000003240)={0x0}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000003380)={r6, 0x8, &(0x7f0000003280)=[0x8, 0xfff, 0x4, 0x3, 0x8, 0x7, 0x2e, 0x9], &(0x7f00000032c0)=[0x3, 0x40, 0xffff, 0xfffffffffffffffe, 0x4, 0x5, 0x0], 0x0, 0x3, 0x9, &(0x7f0000003300)=[0x3, 0x80000001, 0x892], &(0x7f0000003340)=[0x3f, 0x0, 0x6, 0x8907, 0x3, 0x5]}) [ 243.727687] device hsr_slave_0 entered promiscuous mode [ 243.764853] device hsr_slave_1 entered promiscuous mode [ 243.808772] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 243.829547] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 243.833911] IPVS: ftp: loaded support on port[0] = 21 [ 243.910042] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.916610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.923624] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.930092] bridge0: port 1(bridge_slave_0) entered forwarding state 19:40:29 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x800, 0x4) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000080)={0x6, 0x7}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x7f, 0x7e00000000, 0x6, 0x2}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r2, 0x23, 0x8a}, 0x8) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000240)={0x5, 0x6}, 0x2) write$apparmor_exec(r0, &(0x7f0000000280)={'stack ', '/dev/rfkill\x00'}, 0x12) r3 = msgget$private(0x0, 0x1) msgctl$IPC_RMID(r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x117, 0x1009}}, 0x20) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0xffffffffffffffdc) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x456a}, &(0x7f0000000400)=0x8) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000440)) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000480)) flistxattr(r0, &(0x7f00000004c0)=""/60, 0x3c) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000500)=0x0) wait4(r4, &(0x7f0000000540), 0x80000008, &(0x7f0000000580)) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000640)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) getsockname$tipc(r0, &(0x7f0000000680), &(0x7f00000006c0)=0x10) write$capi20(r1, &(0x7f0000000700)={0x10, 0x200, 0x1, 0x81, 0x0, 0x6}, 0x10) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000740)=""/92) dup2(r1, r0) prctl$PR_SET_PTRACER(0x59616d61, r4) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000007c0)=""/64) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000800)=""/27) [ 244.088225] chnl_net:caif_netlink_parms(): no params data found [ 244.118505] chnl_net:caif_netlink_parms(): no params data found [ 244.235862] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 244.241966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.258771] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.266197] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.273667] device bridge_slave_0 entered promiscuous mode [ 244.291126] IPVS: ftp: loaded support on port[0] = 21 [ 244.300410] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.317514] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.323933] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.335673] device bridge_slave_1 entered promiscuous mode [ 244.352001] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 244.359271] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.366549] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.372906] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.381117] device bridge_slave_0 entered promiscuous mode [ 244.391688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 19:40:30 executing program 4: r0 = getpid() timer_create(0x0, &(0x7f0000000000)={0x0, 0xb, 0x1, @tid=r0}, &(0x7f0000000040)=0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x200000, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) write$P9_RLOCK(r2, &(0x7f0000000280)={0x8, 0x35, 0x1, 0x3}, 0x8) r3 = shmget(0x2, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f00000002c0)=""/128) sched_setscheduler(r0, 0x3, &(0x7f0000000340)=0x8) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000380)=""/229) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000005c0)={r2, &(0x7f0000000480)="543ab0d4bbde5c10aef72069942550145ef55cac4a3b99ce2ca06bac60600081aaf61917dc40d680ae3c4007aee0d0d2d3e7282d2424606a6e64ac79014e313268894806f3857a67b040af190163f8ba71b7aef45853bdac65c779e560b1a3c712ec6a80244c47f467dbacd35596faaa9ddf79f3e218aa9e4e68462e677883918f45513aa78b282c9fb7662447d30f5536e6d2b61ea325fcd5afe4bbdc9f3b1bd0d6c36e82236a5110c9", &(0x7f0000000540)=""/91}, 0x18) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000600)={'HL\x00'}, &(0x7f0000000640)=0x1e) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000680)=0x40, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000006c0)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000700)={0x0, 0x6f, "2235c3c6aa9e4a288e820e69b6ba0d3856d77e2d96e2c7e329a9befa94112a273a244e045fe643382f8dc6de96bbb84123046f6ecc2be4c7a82cebf2c42002d62deb83baabfa335d88df6024e8820319c8653c4b012fd72fa7aefc54607d5fa2dc0a8d7c3b0cd31a3730c3b72942c4"}, &(0x7f0000000780)=0x77) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000007c0)={r4, @in={{0x2, 0x4e24, @multicast1}}, 0x5, 0x159f, 0xffff, 0xfff, 0x80}, &(0x7f0000000880)=0x98) rseq(&(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0x6, 0x1, 0x8, 0x7}, 0x7}, 0x20, 0x1, 0x0) ptrace$peek(0x3, r0, &(0x7f0000000940)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000980)={0x4, 0xd8, 0x3, 0x10000, 0x1000}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000009c0)={r4, @in6={{0xa, 0x4e22, 0x0, @remote, 0x4}}}, &(0x7f0000000a80)=0x84) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000ac0)={0x3ff, [0x400, 0x8001, 0x80, 0x2, 0x100000001, 0x1, 0x9, 0x80, 0x2a3, 0x5, 0x8001, 0x6, 0x3, 0x5, 0xa9, 0x67704e90, 0x10000, 0x464, 0x0, 0x5, 0x6547142f, 0x5, 0x100, 0x5, 0x2, 0x800100000000, 0x4, 0x6, 0x4, 0xfffffffffffffffb, 0x1ff, 0xc9, 0xfffffffffffffffa, 0x6, 0x9, 0xff, 0x80, 0x8, 0x3, 0x0, 0x9, 0xe18, 0xf579, 0x0, 0x7f, 0x1ff, 0x200, 0x480000000], 0x7}) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000b40)={0x16, @rand_addr=0xcf, 0x4e23, 0x1, 'rr\x00', 0x4, 0x80, 0x36}, 0x2c) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/mixer\x00', 0x6040, 0x0) listen(r5, 0xfffffffffffffff9) r6 = dup2(r5, r2) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000bc0)=0x5001) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) timer_delete(r1) getsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) mlockall(0x2) shmget$private(0x0, 0x4000, 0x78000211, &(0x7f0000ffc000/0x4000)=nil) [ 244.402731] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.410318] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.421253] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 244.456645] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.463011] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.485850] device bridge_slave_1 entered promiscuous mode [ 244.517675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.525625] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.531983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.538585] IPVS: ftp: loaded support on port[0] = 21 [ 244.564781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.572416] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.578833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.616718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 244.623839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.650184] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.671294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.682330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.694699] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.710515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.719102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.731886] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.756597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.773203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.781661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.789883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 19:40:30 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000000, 0x80000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x2426) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x78) set_tid_address(&(0x7f0000000140)) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180)=0x5, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000001c0)={0x2, 0x0, 0x2033, 0x3, 0x4, 0xd1, 0x400, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@sha1={0x1, "a42f020bde6b79667940f23897bac025227802c7"}, 0x15, 0x3) r2 = gettid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) rt_tgsigqueueinfo(r2, r3, 0x1b, &(0x7f0000000300)={0x1d, 0x9, 0x1b83}) sync_file_range(r1, 0x5, 0xd72, 0x6) r4 = perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x5, 0x4, 0x7, 0x1f, 0x0, 0x7fffffff, 0x100, 0x2, 0x6ad0f5ca, 0x4, 0x4, 0x9, 0x42d, 0x3, 0xfffffffffffffff7, 0x7, 0x24000000, 0x6ad, 0xfffffffffffff001, 0xf58, 0xfff, 0x8, 0x90, 0xfa, 0x4, 0xffff, 0x5, 0x20, 0x40, 0x7, 0x7fffffff, 0xf13, 0x1f, 0xffffffffffff8001, 0x2, 0x1000, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x2, 0xf0c7}, 0x2, 0x4db6, 0x4, 0xf, 0x2, 0x4, 0x2}, r3, 0xe, r1, 0x2) symlinkat(&(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file0\x00') getsockopt$inet_tcp_int(r0, 0x6, 0x3a, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cachefiles\x00', 0x101, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1a, 0x0, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000680)=0x1) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00000006c0)=0x3) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000a80)={&(0x7f0000000700), 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x294, r7, 0x618, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffdf78}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8d1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x25c00d85}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2d}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @ipv4={[], [], @multicast1}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc12}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6619b1f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_BEARER={0xd4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @local, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x379}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x562}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x77a5, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x800}, 0x5) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000ac0)={{0x2, @name="345c273f55cf4c83880e01d43eaa76a3f89db632e0997ba1381acb81ff670c85"}, 0x8, 0x200, 0x1000}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, r6, 0x100, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x4, 0x0, 0x4, 0x3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200000c4) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000c00)={0x3, 0x1, [0x7b, 0x100, 0x5, 0x40, 0x0, 0x3ff, 0x2]}) r8 = add_key$keyring(&(0x7f0000000c40)='keyring\x00', &(0x7f0000000c80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x8002000) prctl$PR_SET_FPEXC(0xc, 0x0) [ 244.818841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 244.832996] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.841894] team0: Port device team_slave_0 added [ 244.859938] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.870035] team0: Port device team_slave_0 added [ 244.885854] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.893343] team0: Port device team_slave_1 added [ 244.902909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.912961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.926119] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 244.934111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.948579] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 244.955010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.962588] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.972742] IPVS: ftp: loaded support on port[0] = 21 [ 244.973668] team0: Port device team_slave_1 added [ 244.999017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.006689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.018669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.026608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.039851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.047932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.106633] device hsr_slave_0 entered promiscuous mode [ 245.145060] device hsr_slave_1 entered promiscuous mode [ 245.195326] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 245.202511] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 245.282931] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 245.357879] device hsr_slave_0 entered promiscuous mode [ 245.394899] device hsr_slave_1 entered promiscuous mode [ 245.437043] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 245.444164] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 245.486714] chnl_net:caif_netlink_parms(): no params data found [ 245.511497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.589061] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 245.603750] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 245.643430] QAT: Invalid ioctl 19:40:31 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4384) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000400)='\x00\x00\xf0\xff\xff\xff\xff\xff\xff\xff\x00\x00') [ 245.672076] QAT: Invalid ioctl [ 245.678271] QAT: Invalid ioctl [ 245.682012] QAT: Invalid ioctl [ 245.693825] chnl_net:caif_netlink_parms(): no params data found 19:40:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x10300202, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000340)='\x1a\xa86\x8a\x9b\xf8]\xc5\x06c\x9a\x11e!\xad?\x9ate\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f^\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc68*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00l\x00W\xe6XT\\l\xd6J\xf2\x12\xc4\x9e\xd4\xbe8<\v\x868%l0\xa1%\xb3\x1b,g\x8d\xfa\x8dq&\xc4\xc0\x81\x9a\x91\x9e\xe3\xe6\xa6\xd8\xb80\xe4NW=\x10\x8d\xcc\xcbU\x1dg\xd9\xc5\xb1\x94\x95\x10\xe3\xe8\xa8\xbfW\x00\x16\x90o=\x80`\xe2\xd1\xb2\xac\x92\x95F\xc0\xb5$\xe3\x1f7T\xe7\xd6A\x8b\x11Qx\xa0\xa4\xa2_h\xcc\xe0\nXpo\x9f=\xa4\xff\xaf\xb4\x02P\xaa\r46X\x8b\xfb\xc7/\x8b\xa5\x06\x11\xc9\x0fl') socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), 0x4) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000140)) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000001c0)) [ 245.801181] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.807911] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.816454] device bridge_slave_0 entered promiscuous mode [ 245.823503] tmpfs: No value for mount option '¨6Š›ø]Åcše!­?šteéòcÎZ%š' [ 245.848288] tmpfs: No value for mount option '¨6Š›ø]Åcše!­?šteéòcÎZ%š' [ 245.859532] chnl_net:caif_netlink_parms(): no params data found [ 245.872907] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.879894] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.887087] device bridge_slave_1 entered promiscuous mode 19:40:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000009c0)={"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"}) fcntl$setflags(r1, 0x2, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x10f00d}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0) [ 245.920433] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 245.973111] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 245.999115] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 246.061769] Disabled LAPIC found during irq injection [ 246.097830] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.104272] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.111980] device bridge_slave_0 entered promiscuous mode [ 246.131142] bridge0: port 2(bridge_slave_1) entered blocking state 19:40:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x401, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @local}, &(0x7f0000000240)=0xc) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000100)='/dev/kvm\x00', 0x9, 0x2) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x100) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000140)) lseek(r1, 0x0, 0x2) fchdir(r0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000009c0)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xf006}) [ 246.143627] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.152347] device bridge_slave_1 entered promiscuous mode [ 246.184851] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.191214] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.200964] device bridge_slave_0 entered promiscuous mode [ 246.220716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 246.229207] team0: Port device team_slave_0 added [ 246.239440] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.246327] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.253910] device bridge_slave_1 entered promiscuous mode [ 246.269650] 8021q: adding VLAN 0 to HW filter on device bond0 19:40:32 executing program 0: gettid() seccomp(0x0, 0x100000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, 0x0, 0xfffffffffffffdfa, 0x40040) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x9, 0x10000, 0x1ff}, {0x69bb8a6d, 0x3f, 0x3f, 0x8dc69f0}, {0x1ff, 0x0, 0x5, 0x41}]}) [ 246.302264] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 246.316480] team0: Port device team_slave_1 added [ 246.364401] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.375367] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.392261] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.402712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 246.410890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 19:40:32 executing program 0: syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x8, 0x101040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/70, 0x46}, {&(0x7f0000000080)=""/121, 0x79}, {&(0x7f0000000240)=""/150, 0x96}], 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000001000/0x2000)=nil, 0xfffffffffffffff9, 0x5, 0x2a, &(0x7f0000002000/0x2000)=nil, 0x1}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 246.435801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.450722] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.463148] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.483466] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.494836] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 246.502341] team0: Port device team_slave_0 added [ 246.524008] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 19:40:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400880, 0xc4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000180)={0x20400000000000, {{0xa, 0x4e24, 0x8, @local}}, {{0xa, 0x4e20, 0xfffffffffffffff7, @dev={0xfe, 0x80, [], 0xd}, 0x5}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) modify_ldt$read(0x0, &(0x7f0000000000)=""/31, 0x1f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r2, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) [ 246.568265] device hsr_slave_0 entered promiscuous mode [ 246.607148] device hsr_slave_1 entered promiscuous mode [ 246.627367] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 246.633770] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 246.642605] team0: Port device team_slave_1 added [ 246.652824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.654468] hrtimer: interrupt took 45150 ns [ 246.666293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.673427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.681099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.697234] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 246.703306] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.713180] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 246.720963] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 246.731062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 246.743576] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 246.752225] team0: Port device team_slave_0 added [ 246.761686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.771474] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 246.781869] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.791686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 246.805520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.813525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.822285] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.828712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.836077] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 246.843469] team0: Port device team_slave_1 added [ 246.853802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 246.863588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 246.874883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 246.890346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.897516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.906158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.913700] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.920083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.927503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.939841] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 246.961780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.985946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 247.036817] device hsr_slave_0 entered promiscuous mode [ 247.074945] device hsr_slave_1 entered promiscuous mode [ 247.114673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.122563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.130651] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.137042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.143918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.152492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.161583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.208011] device hsr_slave_0 entered promiscuous mode [ 247.265256] device hsr_slave_1 entered promiscuous mode [ 247.306302] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 247.313549] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 247.321335] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 247.333339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 247.344402] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 247.355878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.363784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.371940] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.378334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.385647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.393297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.401632] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 247.411872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 247.429464] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.436856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.455305] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.467205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 247.480158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 247.488717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 247.505220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 247.512608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.521165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.529957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.537601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.545589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.553088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.560797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.568460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.579098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 247.592265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 247.600363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 247.607391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.615727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.623236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.632789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.640191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.647769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.657241] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.682355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 247.699354] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 247.709333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.718041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.732326] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 247.738460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.762161] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 247.784663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.811266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.831352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.839458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.870281] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.909287] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.919891] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.928889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.948057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.954330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.974168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.987522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.995691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.006001] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 248.012080] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.023254] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 248.032055] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.046568] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.057565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 248.067305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.075786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.083422] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.089930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.098580] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.110465] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 248.117156] 8021q: adding VLAN 0 to HW filter on device team0 19:40:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000500)) epoll_create(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x338d, 0x2, 0x0, 0x1}, 0x2c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000140)=0xfffffffffffffd76) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x40400, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x7fffffff, 0xff, 0x0, 0x3, 0x1, 0x7, 0x80000001, 0x3, 0x4, 0x2, 0x1, 0x5, 0x4, 0xffff, 0x8, 0x10}}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0x0, 0xffffffffffff7fff, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x6, 0x0, 0x5, 0x3], 0xf000, 0x280}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r3, &(0x7f0000000180), 0x0}, 0xffffffffffffff75) [ 248.125390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 248.134886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 248.142716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.150936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.172461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.180460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.188964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.197221] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.203566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.215488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.223559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.231292] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.237686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.245192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.258555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 248.269429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 248.279511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.289031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.297407] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.303767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.310917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.319819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.327608] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.333991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.342427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 248.357830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 248.367029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.382415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.390336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.398991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.406796] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.413119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.422881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 248.432461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 248.443648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 248.451178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.460298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.468637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.478459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 248.493323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 248.501296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.509453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.517917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.525718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.535230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 248.545924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 248.555775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 248.564166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 248.571820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.580516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.588894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.596940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.604847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.612352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.620506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.628739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.639777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 248.649453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 248.660561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 248.667671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.675857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.683440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.691307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.699104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.706957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.715148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.727107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 248.735259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.747358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.757606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 248.764668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.772564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.785798] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 248.791801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.803539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 248.817097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 19:40:34 executing program 2: r0 = gettid() unshare(0x28020400) get_thread_area(&(0x7f0000000000)={0x8, 0x1000, 0xffffffffffffffff, 0x1, 0xfc, 0x8001, 0x0, 0x4, 0x1, 0x5aaa}) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@dev, @remote, 0x0}, &(0x7f0000000180)=0xc) openat(r2, &(0x7f0000000200)='./file0\x00', 0x20000, 0x0) sendto$packet(r1, &(0x7f00000000c0)="6dee0f6a2d5784655bfe51377c7bd81fa66ac3257935f8d45dd24ab075f45e873602a50b7f481e162deb45383f412c1d862965506e840a55cae1d1dabc63f8d74523d9fcc3b26478b8587fd7c1ce82d5be5e29ff8981364354dfd550ee09", 0x5e, 0x8050, &(0x7f0000000240)={0x11, 0xf6, r3, 0x1, 0xfffffffffffffff1, 0x6, @broadcast}, 0x14) [ 248.835432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.843205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.853819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.862207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.871355] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 248.877601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.893439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 248.914608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.922246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.941315] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 248.950442] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 248.962310] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 248.968963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.988116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.003520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.042968] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 249.105099] 8021q: adding VLAN 0 to HW filter on device batadv0 19:40:34 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r1, r0, 0x8e7, 0xf2, &(0x7f0000000180)="5ab7e35527649354d11bd2a8b08041f2356a526eed1f35cbd7d3d776264e7f541719ab7645b819c39fb39ec4de9674091e59e930921098c83177a664efc3847f33c1e24580299e444eed92673ae7746fb548e0cceae93c02ef6243aa8db9aa98da89642ac1acf253b82ad0f8645029a95d7d70ef40d321113dbe4cc08c8940bd0c87840db0e7551eaf4e5096f20f3ace4b86251cbdf2b13771a3ebfc3e500b6c8adb06bacd22e04ece8778b8032c07c524606a1458c3b9e4e9502434d2c1343a1858482b465052d5ac02eba8f30883e0df23916cfc17035fa3e7e5d10dd9d9339b6ff25e677ae19e460fa574bd6cb167538f", 0x8, 0xfffffffffffffff7, 0xa8c, 0x56, 0xbcc, 0x2, 0x8a5, 'syz0\x00'}) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x3f, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c23a0000aaaaaaaaaabb08004500001c00000000000090787f000001e0000001120090780000000015be60ce58d9a9b974b383fb7566ffce589f04fa1424b5c6358404d7b1ccc97d9dbcfb8b6ddddd22cb8e1a9f69ca45aa55980a79580e5d42aecdd1fc3471f3b5fa569bf44f4917d042d5c1d87ac5c11b3a6b0dc18d3b4177380d347d20bed9c99f3d66f3c2"], 0x0) 19:40:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x100) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x6, @sdr={0x7277575f, 0x1}}) syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x7, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') 19:40:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000000c0)=""/182) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) 19:40:35 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)}}, 0xfffffe78) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x4, 0x0, 0x80000000, 0x6, 0x244c, 0x7ff, 0x2, 0x0}, &(0x7f0000000800)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x611c, 0x9, 0x800, 0xb9f, 0x8}, 0x98) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x7, 0x1}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000480)=0xf81d, 0x2) r3 = getpid() r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20a00, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x1000}, 0x1, 0x24, 0x0, r3, 0x2, 0xffffffffffffffc1, 'syz1\x00', &(0x7f0000000280)=['uservboxnet0nodev[lo\x00', 'trustedem1cpuset\x00'], 0x26, [], [0x7, 0x88a, 0x81]}) sendmsg$nl_generic(r4, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000020027bd7000fcdbdf250000000d14002e007a3990101aa46673beae4ec9efffe400"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x40810) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x6) sysfs$3(0x3) socketpair(0x11, 0x2, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) 19:40:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x2, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xfdfd, &(0x7f00000001c0)="ef"}) socketpair$tipc(0x1e, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000040), 0x4) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x4) [ 249.314623] protocol 88fb is buggy, dev hsr_slave_0 [ 249.319860] protocol 88fb is buggy, dev hsr_slave_1 [ 249.325126] protocol 88fb is buggy, dev hsr_slave_0 [ 249.330200] protocol 88fb is buggy, dev hsr_slave_1 [ 249.393177] binder: 8200:8202 unknown command 0 [ 249.413680] binder: 8200:8202 ioctl c0306201 204edfd0 returned -22 19:40:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010"], 0x5}}, 0x4) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 19:40:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0x0, {0x6, 0xc7, 0xfffffffffffffffa, 0x101}}) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x2bf) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000028c0)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000029c0)=0xe8) fstat(r1, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002a80)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x800, 0x4e21, 0x2, 0x2, 0xa0, 0x20, 0x0, r2, r3}, {0x0, 0x6, 0x6, 0x4, 0x1, 0xb01f, 0x4, 0x1}, {0x7, 0x5, 0x40, 0x1000000000000000}, 0xfff, 0x6e6bbb, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d5, 0xff}, 0xa, @in=@multicast1, 0x3501, 0x2, 0x3, 0x5, 0x6, 0x1, 0x9}}, 0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x2, &(0x7f0000000000)='$\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x6, &(0x7f0000000280)=')eth0\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r1, 0x0, 0x4, &(0x7f0000000240)='{#^\x00', r5}, 0x30) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000340)=""/81) r6 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x44) sendfile(r6, r0, &(0x7f0000000140)=0x3e2, 0xcea) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x2, 0x9ca}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000080)={0x0, 0x9a0}) 19:40:35 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x80200) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x101000, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r1, r2}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00') getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x4, 0xc7f, 0x16c}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x5, 0x8008, 0x3f, 0x8e, r4}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000340)={0x3935e4f7, 0x20000000, 0xffffffffffffffff, 0x4, 0x0, 0xffffffffffffff01, 0x1, 0xfffffffffffffff7, 0x5, 0x4}, 0x10) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e20, 0x80, @ipv4={[], [], @broadcast}}, {0xa, 0x4e23, 0x8001, @rand_addr="6de5a5e81860a443f11c47eb410beea4", 0x3}, 0x4, [0x7a, 0x2d27a9c6, 0x4, 0x1, 0x8, 0x100, 0x6, 0xc575]}, 0x5c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x70, 0x14d, 0x3, 0x81, 0xa5, 0x0, 0x4, 0x1420, 0x8, 0x265, 0x0, 0x7f, 0x7fffffff, 0x0, 0x3d99, 0x2, 0xa7, 0x8, 0x7, 0x8, 0x10001, 0x8, 0x0, 0x8, 0x9, 0x10000, 0x20c0, 0x8, 0x80000000, 0x0, 0x9, 0x2, 0x3, 0x6, 0x9, 0x8, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7, 0x4}, 0x800, 0x1f, 0x3, 0x8, 0xc9, 0x2, 0x101}, r0, 0x6, r2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x2b, &(0x7f000002eff0)={0x0, 0x0}, 0x10) munlockall() ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000140)=0x3) 19:40:35 executing program 4: r0 = inotify_init() r1 = openat$full(0xffffffffffffff9c, 0x0, 0x131000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) lstat(&(0x7f0000001600)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x10001}, &(0x7f00000014c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001640)={r2, @in6={{0xa, 0x4e23, 0x3, @rand_addr="6dbb426780424568bd0c98bab95b630c", 0x9}}, 0x9, 0x6}, &(0x7f0000001500)=0x90) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nullb0\x00', 0x4000000004005, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xd4e, 0xbc25, 0xfff}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001400)={r4, 0xe8}, 0x8) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$sock_ifreq(r1, 0x89b7, &(0x7f00000001c0)={'veth0_to_bridge\x00', @ifru_flags=0x800}) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, 0x0) r5 = semget(0x0, 0x4, 0x0) semctl$SEM_STAT(r5, 0x3, 0x12, &(0x7f0000001440)=""/72) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r6}}, 0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000140)=0x100) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x6) sync_file_range(r0, 0x7969, 0xaf, 0x4) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x17, @empty, 0x4e23, 0x1, 'rr\x00', 0xb, 0x400, 0x40}, 0x2c) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2d000}], 0x1, 0x0) 19:40:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) write$P9_RGETATTR(r0, 0x0, 0x0) 19:40:35 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000014c0)={'ip6g2e0\x00'}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) utime(&(0x7f0000001640)='./file0\x00', &(0x7f0000000500)) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000600000000000000000000ffffff8400000000000000c00195", 0x33}], 0x1}, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000003c0)={0xe, 0xffffffffffffff56, 0xfa00, @id_tos={0x0}}, 0x20) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000001500)) close(0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:40:35 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x6, &(0x7f0000000040)="0adc1f0500000000") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 19:40:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) 19:40:35 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)}}, 0xfffffe78) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x4, 0x0, 0x80000000, 0x6, 0x244c, 0x7ff, 0x2, 0x0}, &(0x7f0000000800)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x611c, 0x9, 0x800, 0xb9f, 0x8}, 0x98) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x7, 0x1}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000480)=0xf81d, 0x2) r3 = getpid() r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20a00, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x1000}, 0x1, 0x24, 0x0, r3, 0x2, 0xffffffffffffffc1, 'syz1\x00', &(0x7f0000000280)=['uservboxnet0nodev[lo\x00', 'trustedem1cpuset\x00'], 0x26, [], [0x7, 0x88a, 0x81]}) sendmsg$nl_generic(r4, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000020027bd7000fcdbdf250000000d14002e007a3990101aa46673beae4ec9efffe400"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x40810) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x6) sysfs$3(0x3) socketpair(0x11, 0x2, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) 19:40:35 executing program 0: r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0xb20, 0x7) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000ddd000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x2) fsetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00', &(0x7f0000000040)='.[():\x00', 0x6, 0x2) 19:40:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0xa, &(0x7f0000000140)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) prctl$PR_SVE_SET_VL(0x32, 0x1e973) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x400000000000}]) r3 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x1, 0x2) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f00000001c0)={0xa, 0xfff, {0x55, 0xfffffffffffff001, 0x8001, {0x1, 0x81}, {0x80000001, 0x8000}, @cond=[{0xffffffff, 0x2000000000, 0x0, 0x6, 0x1, 0x81}, {0x177, 0x1, 0x94, 0x1f, 0x9, 0x725}]}, {0x51, 0x3, 0x40, {0x81, 0x4}, {0x2, 0xff}, @period={0x5b, 0x507, 0x8001, 0x100000000, 0x5a80000000000000, {0xffff, 0x1, 0x0, 0xc1}, 0x9, &(0x7f0000000100)=[0xfe, 0x9, 0x4, 0x2, 0x0, 0xffff, 0x4, 0x10000000000000, 0x800000]}}}) write$uinput_user_dev(r3, &(0x7f0000000b40)={'syz1\x00', {0x1, 0x1, 0x5, 0x2}, 0x2a, [0x6, 0x3ff, 0xcc00000000000000, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xffffffffffffe5cd, 0x9, 0x5, 0x10001, 0x9, 0x80, 0x2, 0x1ff, 0x40, 0x401, 0x7, 0x4644, 0x8000, 0x3ff, 0x1, 0xd7, 0x1, 0x200, 0x7, 0x3, 0x4b72, 0x6, 0xfffffffffffffffa, 0x80, 0xbe2, 0x0, 0x4, 0x7, 0x7, 0x2, 0x5, 0x7f, 0x401, 0x0, 0x7, 0xffffffffffff0001, 0x1, 0xffff, 0x13c, 0x7ff, 0x53a, 0x103, 0x24b40000, 0x2, 0x5, 0x7, 0x2, 0x3, 0x3ff, 0x9, 0x100, 0x5, 0x0, 0x7, 0x9, 0x1, 0x3ff], [0xffffffff, 0xfb0, 0xbdc4, 0x84a9, 0xa8fc, 0x100000001, 0xfff, 0x100000001, 0x800, 0x0, 0xfeb0, 0x8001, 0x2000000000000, 0x800, 0x1, 0x7, 0xffffffffffff0fce, 0x100000001, 0xbb59, 0xff, 0x40, 0x4, 0x8000, 0x0, 0xdc, 0x1, 0x200000000000000, 0x5, 0xfffffffffffff4ae, 0x81, 0x8, 0x4, 0x3c7e70, 0x80000001, 0x8, 0x5, 0x6, 0x101, 0x1, 0x7, 0x100000000, 0x101, 0x88f4, 0x7, 0x7ff, 0x5, 0xfffffffffffffff9, 0x3, 0x80, 0x6, 0x2, 0x9, 0x0, 0x4, 0xc9d, 0x1, 0x0, 0x1000, 0x5, 0x5, 0x6, 0x8, 0xb3, 0x40], [0x8, 0x3, 0xffffffffffffffe1, 0x2, 0x1000000020000000, 0x8, 0x4, 0x2, 0x80000000, 0x8, 0xfffffffffffffffd, 0xcd6, 0x6, 0x6, 0x52, 0x0, 0x0, 0x7f, 0xffffffff, 0x0, 0x200, 0xc4c, 0x297645d8, 0x8, 0x1, 0x80, 0x8, 0x4, 0x6318a70, 0xff, 0x850, 0x8001, 0x5e66, 0x6, 0xffffffff, 0x0, 0x2, 0x3, 0x5e6, 0x7b, 0x3, 0x577, 0x4, 0x350, 0x3c847f00, 0x8, 0x0, 0x2, 0x9, 0xffff, 0x4dea, 0x4, 0x298b0791, 0x80000001, 0x2253f4fe, 0xfffffffffffffc01, 0x90f4, 0x4, 0x4, 0x200, 0x2e5e1140, 0x8, 0x200, 0x4], [0x5, 0xfff, 0x4, 0x58b4, 0x80000001, 0x3, 0xcce, 0x8, 0xfffffffffffffffe, 0x1, 0x9, 0x8, 0xffffffffffffffff, 0x5, 0x6063168e, 0x8, 0x6, 0xf98b, 0xd9a1, 0x0, 0x1ff, 0x3, 0x735b4c5f, 0x1, 0xa4ee, 0xc1, 0x7, 0x9, 0x5, 0x401, 0x3, 0x4, 0x1, 0x40, 0x7, 0x1f, 0x1, 0x5, 0x3, 0x7fff, 0x2, 0x6, 0x62, 0xf60, 0xffffffffffffffc0, 0x8, 0x4, 0x2, 0x68d29133, 0xfffffffffffffffc, 0x100, 0x7fffffff, 0xfffffffffffffff8, 0x3, 0x2, 0xfffffffffffffff7, 0x6, 0x5, 0x7, 0x3e2646d9, 0x7, 0x4, 0x2]}, 0x45c) write$binfmt_elf32(r3, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x974c, 0x5, 0x84a, 0x3f, 0x3, 0x3, 0x3, 0x393, 0x38, 0x54, 0x100000000, 0x0, 0x20, 0x2, 0x8001, 0x0, 0x200}, [{0x5, 0xd90, 0x1ff, 0x6, 0x3, 0x100000000, 0x7, 0x7}], "c8c16f9a889816d660a5573b4de8656dd4ebaf7159ad2c71e7618fb1fef6e8f05d55a23d33a99b0220a53206c7ed7822d124b004a679604142c43e7ef94bc03eebf16b5d4cc0dfc48defbc4b9491b194fba5ff12bac08148a1f710358ef71c032ebca0cdef1cbc183993c81ce228fadca7b61fabb8915fc8a4508f55b41e", [[], [], [], []]}, 0x4d6) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0xb2}, 0x8) [ 250.166959] binder: BINDER_SET_CONTEXT_MGR already set [ 250.172516] binder: 8200:8211 ioctl 40046207 0 returned -16 [ 250.204336] binder: 8200:8263 unknown command 0 [ 250.228502] binder: 8200:8263 ioctl c0306201 204edfd0 returned -22 [ 250.235648] binder_alloc: 8200: binder_alloc_buf, no vma [ 250.241391] binder: 8200:8211 transaction failed 29189/-3, size 0-0 line 3035 [ 250.282007] binder: release 8200:8202 transaction 2 out, still active [ 250.298305] binder: undelivered TRANSACTION_COMPLETE 19:40:36 executing program 2: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1]) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000540)=""/200) r4 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) r5 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf10001, 0xeffffdef) io_setup(0x27, &(0x7f0000000240)=0x0) io_cancel(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x3, r3}, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000380)) close(r3) r7 = dup3(r0, r5, 0x80000) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000340)={0x0, 0xb2c8b46, 0x30}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)={r8, 0x200, 0x2, [0x1e7c, 0x1000]}, &(0x7f0000000680)=0xc) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f00000003c0)=""/100) bind$alg(r1, 0x0, 0x2b66db71f52e4be1) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x4000004) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x7, 0xf07}, 0x8) fanotify_mark(r3, 0x0, 0x8, r7, &(0x7f0000000100)='./file0\x00') fcntl$getown(0xffffffffffffff9c, 0x9) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="65496bc8b2ac9d9fa9f381ad17854629ba35141abfbb0d1cd95605fd71d7cb20c4e73677343504e14102b14c3da418047d3560e1d1653528d3cedfc40ba444cc62b1253d2d45539284013f01baf5f4a22eea183c3c406dc5bffc8d26a6fc144f08e3cb663f7ff4bfa1dfec0345b013ff98835d53b325ae7b2cbf", 0x7a) [ 250.328701] binder: undelivered TRANSACTION_ERROR: 29189 [ 250.348999] binder: send failed reply for transaction 2, target dead 19:40:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x12}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14}, 0xfdd6) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x40000, &(0x7f0000000740)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@uid_gt={'uid>', r5}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x79, 0x7f, 0x61, 0x35, 0x0, 0x77, 0x61], 0x2d, [0x77, 0x0, 0x77, 0x30], 0x2d, [0x77, 0xd9659ebaa9a40ddb, 0x63, 0x71], 0x2d, [0x37, 0x38, 0x38, 0x37], 0x2d, [0x77, 0x0, 0x77, 0x36, 0x38, 0x63, 0x3a, 0x9eb57cdd7f6035f3]}}}, {@smackfsdef={'smackfsdef', 0x3d, 'vmnet0uservboxnet0self'}}, {@smackfsroot={'smackfsroot', 0x3d, 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&'}}, {@uid_gt={'uid>', r6}}]}}) 19:40:36 executing program 4: socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x1b, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") write(r1, &(0x7f0000000080)="130000004e001f00ff03f4f9002305000a04f5", 0x13) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10001, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000000c0)) 19:40:36 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0xb3b6, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb, 0x0, 0x1}) 19:40:36 executing program 1: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@initdev, @dev, 0x0}, &(0x7f0000000140)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="a80000002f000013570b00001000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x17, &(0x7f0000000180)=""/153, 0x0, 0x0, [], r0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x1f) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'eql\x00', 0xe3}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x20000, 0x0) accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 19:40:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000940)={0x0, 0x1, 0x0, 0x0, 0x0}) 19:40:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126208000000") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x12, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 250.530428] device nr0 entered promiscuous mode 19:40:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x7) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) fremovexattr(r2, &(0x7f0000000080)=@known='trusted.overlay.upper\x00') ioctl$KVM_SET_IRQCHIP(r3, 0x4030ae7b, &(0x7f0000000280)={0x0, 0x0, @ioapic}) 19:40:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x81, 0x100) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r0, r2}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./bus\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r3, 0x208200) open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) 19:40:36 executing program 1: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x20000000000001, 0x50, 0xffffffffffffffff, 0xfffffffffffffffe) name_to_handle_at(r0, &(0x7f00002e4000)='./file\xff\xff', 0x0, 0x0, 0x1400) [ 250.669207] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) 19:40:36 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x200003, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000b40)={0x7eb2abe815965387, 0x0, @pic={0x7, 0x3ff, 0x67, 0x8, 0x2, 0x9, 0x3ff, 0x4a50, 0x5, 0x6, 0xffffffffffffca93, 0x6, 0x1, 0x5, 0xe3, 0x3}}) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000280)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss], 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@mcast1, @in6}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000200)={0x0, 0x3, 0xffffffff}) getgroups(0x7, &(0x7f00000001c0)=[0xee01, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xee01]) r2 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r2, r3) getgroups(0x0, &(0x7f0000000480)) recvmmsg(r1, &(0x7f0000003840)=[{{&(0x7f0000003980)=@rc, 0x1a, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1000000000000083, &(0x7f0000002c00)=""/125, 0xfffffffffffffda6}, 0x6}], 0x1, 0x0, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r4, &(0x7f00000017c0), 0x1d0, 0x1f000000) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @random="6703eb79af3d", [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, 0x0) [ 250.710878] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 19:40:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getrandom(&(0x7f0000000100)=""/228, 0xe4, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)) r2 = socket(0x22, 0x2, 0x800100000001) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xea, "684c773d809e9154467633d1dd87377c554f9aa8f15d2f8ff1a462210e8b013d4d90a5f829a0575186d6e18a5dc232118aededf7bd80109c530a8bae86a4dff3b5e1caf04979fa00a77b1feb1ff00109bd955301ba2bf24887aba03137fa5c0fb40a17d008d53b3b6fa1de4ee2a86e9630c733e34b9c6a9fe29bc2f15e01636201e4b34ae423ab34b2960a61cfe09bf1a5aca1722222aae172e76b13b211d28cce6bec2a244b1f2547ebec964dbe6a4ba28cae3157d19569d778208a6561bfb2290564f364560e450388fe350c003179c82477b1ef6b50739d3c30a31260b596d64d9629cf4ce8f0038d"}, &(0x7f0000000080)=0xf2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300)={r3, 0x8a, "80b4004cdf3152057bf1d71730add57d35da3295b4cd71c39887aa78c2bda48d4f1bd9c4a95138c4620b2f465a07f40c5cb882372f7574f5b135a4da98be128940984e496c4017efcb5970fce2d73eaac32dffcca278d7b27d4cf05ff471f76efa20eaa74f8e904eaea2eb818fb57b099fd6930c2a814e9e0c07554e306f8a12f43e585852360739eec5"}, &(0x7f00000003c0)=0x92) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x907000, 0x4) [ 250.908581] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:40:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x101002, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x6, 0x7, 0x2006, 0xb, 0x6, 0xffffffffffffffff, 0x3, 0x7}}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000003c0)) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x8000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x4, 0xdf, [], 0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/223}, &(0x7f0000000300)=0x78) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5) fcntl$dupfd(r0, 0x406, r0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xf) r2 = accept$alg(r0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) 19:40:37 executing program 3: r0 = socket(0xa, 0x5, 0x0) setxattr(&(0x7f0000000000)='.\x00', &(0x7f0000000040)=@random={'btrfs.', 'broute\x00'}, &(0x7f0000000080)='broute\x00', 0x7, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000003ff07000000000081006e7230000000000000000000000000007465616d300000000000000000000000766c616e30000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000a0ba82f936000000d0000000766c616e00000000000000000000000000000000000000000000000000000000080000000000000000000000000007004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000000b000000000000000000626f6e64300030e9d8130000000000007465616d300000000000000000000000626f6e6430000000000000000000000076657468315f746f5f62726964676500aaaaaaaaaabb000000000000ffffffffffff00000000000000007000000070000000a0000000434f4e4e5345434d41524b00000000000000000000000000000000000000000008000000000000000000000000000000"]}, 0x278) 19:40:37 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 19:40:37 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x145000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000540)=0x1000, 0x4) ioctl(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/userio\x00', 0x161400, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000001c0)={0x3}) close(r1) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x56, "7dd24fe0f357e7a1e5461e6a0f002dad9ad83f9d33b7390f2728feee98772786d0a259c2fc1482c26522ff4c9b094c60eac967f73d237bb305b98ebe1b578b84a8487e2c4207359e5f2affcbb2069ec33ba2ba04a7bd"}, &(0x7f0000000480)=0x5e) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0x8, 0xffffffffffff5e9e, 0x8, 0x20000000000007f, 0x7f, 0x8, 0x9, {0x0, @in6={{0xa, 0x4e23, 0x340, @empty, 0x914}}, 0x80000000, 0x3f, 0x1, 0x0, 0x7}}, &(0x7f0000000080)=0xb0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000004c0)=0xc, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r3, 0x2, 0x0, 0x8, 0x80000000}, &(0x7f0000000380)=0x18) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x404, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40801) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) socket$inet6_sctp(0xa, 0x200000000000005, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140), 0x8) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) 19:40:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x80, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000140)={0x0, 0x6, 0x81}) 19:40:37 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)) pipe(&(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) ioctl(r2, 0x3, &(0x7f0000000000)="c55768") sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) socket$netlink(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x20000003) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 19:40:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x101) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x4000}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) r3 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) r4 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x40, 0x0) socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4337, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000700)={[{0x7dfd, 0x1000, 0x5, 0x3ff, 0xff, 0x7ff, 0x2, 0x9, 0x64, 0x400, 0x400, 0x1, 0x81}, {0x40000000000, 0x7, 0x7fff, 0x0, 0x200, 0x3, 0x472d, 0x0, 0x2c00cb42, 0x9, 0x0, 0x10000000000000, 0x101}, {0x1, 0x7, 0x8000, 0x2, 0x69, 0x0, 0x4, 0x3, 0xdad, 0xff, 0x2, 0x2, 0x5}], 0xe7}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) ioctl$KVM_GET_REGS(r5, 0x8090ae81, 0x0) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000440)=""/222) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x78ad, 0x4000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000800)={0x4, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0bca3a00"], 0x11, 0x0, &(0x7f00000007c0)="90b2d2d8447782c93b249e8a3b3e686ba2"}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000001c0)=""/94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x0, 0x1}, 0x10) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) fstat(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000006c0)) write$FUSE_ENTRY(r4, &(0x7f0000000600)={0x90, 0x0, 0x6, {0x3, 0x2, 0x7, 0x7, 0xfff, 0x2, {0x6, 0x4, 0x1, 0x5, 0x2b7a, 0x0, 0x0, 0x6, 0x509, 0x400, 0x6, r6, r7, 0xff, 0x100000000}}}, 0x90) [ 251.328600] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 251.398110] kernel msg: ebtables bug: please report to author: entry offsets not in right order 19:40:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x4092, 0x40000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\b', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000800)={0x82a, 0x1800}) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000e000000004000"]) chroot(0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffffffff143, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x97c5}, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x1, 0x0, 0x0}) sendmsg$tipc(r2, &(0x7f0000000780)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x4}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000001c0)="d795d071d7244ef0820d973e02ab32557af574b8cda0dbdeee2ca69389f97ad99d441970056cdafc91b2339e41464a8e7fb7488255553e9f637fd2efe5a0aa0b12edd8fecb5390c05caadce7113dfbd443d423", 0x53}, {0x0}], 0x2, 0x0, 0x0, 0x400c0}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000002c0)={{0x0, 0x3}, 'port0\x00', 0x0, 0x400, 0x100000001, 0x7, 0x5, 0x0, 0x96fe, 0x0, 0x1, 0x1}) io_setup(0x0, &(0x7f0000000240)=0x0) io_destroy(r3) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000140)=""/20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 19:40:37 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x145000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000540)=0x1000, 0x4) ioctl(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/userio\x00', 0x161400, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000001c0)={0x3}) close(r1) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x56, "7dd24fe0f357e7a1e5461e6a0f002dad9ad83f9d33b7390f2728feee98772786d0a259c2fc1482c26522ff4c9b094c60eac967f73d237bb305b98ebe1b578b84a8487e2c4207359e5f2affcbb2069ec33ba2ba04a7bd"}, &(0x7f0000000480)=0x5e) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0x8, 0xffffffffffff5e9e, 0x8, 0x20000000000007f, 0x7f, 0x8, 0x9, {0x0, @in6={{0xa, 0x4e23, 0x340, @empty, 0x914}}, 0x80000000, 0x3f, 0x1, 0x0, 0x7}}, &(0x7f0000000080)=0xb0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000004c0)=0xc, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r3, 0x2, 0x0, 0x8, 0x80000000}, &(0x7f0000000380)=0x18) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x404, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40801) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) socket$inet6_sctp(0xa, 0x200000000000005, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140), 0x8) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) 19:40:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'hwsim0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x4, 0x20000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000004000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:40:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x18}, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xbc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x529a00, @local, 0x2}, 0x1c) 19:40:37 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="ac21cc6d25602cb51115d06d487d2afacd41d604f795f72ab3444440900aa180306a9a2230", 0x25) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x65}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x4, 0x2}) 19:40:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x4092, 0x40000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\b', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000800)={0x82a, 0x1800}) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000e000000004000"]) chroot(0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffffffff143, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x97c5}, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x1, 0x0, 0x0}) sendmsg$tipc(r2, &(0x7f0000000780)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x4}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000001c0)="d795d071d7244ef0820d973e02ab32557af574b8cda0dbdeee2ca69389f97ad99d441970056cdafc91b2339e41464a8e7fb7488255553e9f637fd2efe5a0aa0b12edd8fecb5390c05caadce7113dfbd443d423", 0x53}, {0x0}], 0x2, 0x0, 0x0, 0x400c0}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000002c0)={{0x0, 0x3}, 'port0\x00', 0x0, 0x400, 0x100000001, 0x7, 0x5, 0x0, 0x96fe, 0x0, 0x1, 0x1}) io_setup(0x0, &(0x7f0000000240)=0x0) io_destroy(r3) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000140)=""/20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 19:40:37 executing program 3: r0 = socket$inet(0x10, 0x1, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700740000a3a20404ff7e", 0x24}], 0x1}, 0x0) 19:40:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r1, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect(r3, &(0x7f0000000100)=@nl=@unspec, 0x80) write$eventfd(r3, &(0x7f00000000c0)=0x8, 0x8) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040), 0x4) listen(r0, 0x0) 19:40:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) sendto$inet(r0, &(0x7f0000000640)="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", 0x5, 0x804000, 0x0, 0xffffffffffffff23) 19:40:37 executing program 5: mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') fdatasync(r0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) 19:40:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x105000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x1, 0x7, 0x4, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}, [0x2, 0x4, 0x1, 0x4, 0x20, 0x20, 0xffff, 0x938f, 0x8, 0x8, 0x5, 0xd92, 0x5, 0x5, 0x77505456]}, &(0x7f0000000300)=0x100) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe30c}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semget(0x2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) dup2(r3, r5) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000340)={'syz'}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) [ 252.029342] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:40:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) inotify_init() ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x4, 0x3b89, 0x1, 0x5, 0x6}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000040)={{0x200000000000003, 0x0, 0x0, 0x1000000}}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x2) 19:40:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x4092, 0x40000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\b', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000800)={0x82a, 0x1800}) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000e000000004000"]) chroot(0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffffffff143, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x97c5}, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x1, 0x0, 0x0}) sendmsg$tipc(r2, &(0x7f0000000780)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x4}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000001c0)="d795d071d7244ef0820d973e02ab32557af574b8cda0dbdeee2ca69389f97ad99d441970056cdafc91b2339e41464a8e7fb7488255553e9f637fd2efe5a0aa0b12edd8fecb5390c05caadce7113dfbd443d423", 0x53}, {0x0}], 0x2, 0x0, 0x0, 0x400c0}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000002c0)={{0x0, 0x3}, 'port0\x00', 0x0, 0x400, 0x100000001, 0x7, 0x5, 0x0, 0x96fe, 0x0, 0x1, 0x1}) io_setup(0x0, &(0x7f0000000240)=0x0) io_destroy(r3) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000140)=""/20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 19:40:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000440)) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x81}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x100, 0x0) name_to_handle_at(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100), 0x1400) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000d00)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(r5, 0x4004ae86, 0x0) dup3(r0, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:40:37 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x23) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x401) preadv(r0, &(0x7f0000000480), 0x0, 0x1) 19:40:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback, 0x1000000000}, 0x1c) r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000a40)) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0xffffffffffff7fff}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x40, 0x1, {"f5ece230811d2afb53e6ea1b17cbdaba"}, 0x4}}}, 0xa0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x7fffffff}, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000a80)={0x0, 0xfec, "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"}, 0x0) close(r3) 19:40:38 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x2, 0x260, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001600], 0x0, 0x0, &(0x7f0000001600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x100000000000009, 0x0, 0x0, 'sit0\x00', 'syzkaller0\x00', 'veth1_to_team\x00', 'ip6tnl0\x00', @remote, [], @local, [], 0xb0, 0xb0, 0x128, [@connbytes={'connbytes\x00', 0x18, {{0x0, 0x0, 0x0, 0x3}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "ecdb842535cc7ed50327b065f0d30c5fe31d967c21b74f121d08ab83573eaa240b781d37778dab829f45e1809ddb391d051d8ee0d35088da1beed7560d1284b4"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x9, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', 'irlan0\x00', 'veth0_to_team\x00', @dev, [], @broadcast, [], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10}}]}]}, 0x2d8) write(r0, &(0x7f0000000000)="aa9c8701f55d65ad872e23b59737bd74e1f5a314233f7ea5d26f92d54d96af72161fa3b4ee861c675a45bf8625daedab80011b981b8fc873a09912aadaeddd2982ca13b7171fb0aae609d687ce5b6b08c7dff06d6d665285d5aefe50731a04fb3260104052ed02e203b629ff7baf821337bfc7989f588fb1574033fb266da868d3b80530ef40cd456c6ad5a429f4ad049d908486044940e1", 0x98) 19:40:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001a80)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x4092, 0x40000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\b', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000800)={0x82a, 0x1800}) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000e000000004000"]) chroot(0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffffffff143, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x97c5}, 0x0, 0x10, 0xffffffffffffffff, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x1, 0x0, 0x0}) sendmsg$tipc(r2, &(0x7f0000000780)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x4}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000001c0)="d795d071d7244ef0820d973e02ab32557af574b8cda0dbdeee2ca69389f97ad99d441970056cdafc91b2339e41464a8e7fb7488255553e9f637fd2efe5a0aa0b12edd8fecb5390c05caadce7113dfbd443d423", 0x53}, {0x0}], 0x2, 0x0, 0x0, 0x400c0}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000002c0)={{0x0, 0x3}, 'port0\x00', 0x0, 0x400, 0x100000001, 0x7, 0x5, 0x0, 0x96fe, 0x0, 0x1, 0x1}) io_setup(0x0, &(0x7f0000000240)=0x0) io_destroy(r3) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000140)=""/20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 19:40:38 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a00000000000000000000003900090035000c000600000019000500fe800000000000dc1338d54400009b84132000000083de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x3, &(0x7f0000000640)={0x0, 0x41, 0x2, @thr={&(0x7f0000000280)="8f561b0512452bb3d65d5f2548d3c7ffaa16f926c1790b01aa3596dc2c5c4c49c67ecaae0a0925e53eee1b7ebe01f029bf000c7583d9d7837c2faba8c992d7ab95a0bfbc00fc38c2b64ed168e77c4856746f7d6c90a08b86fdcc842bcb83be3b568a61e85f3670b07ab1542d62fc", &(0x7f0000000380)="f5c4c384bf44e10883ff50ff92676e32d6cd4663f510220a6fc938a33d599513753d889bea6503b5ee89724ebf427c4775ff72a903ef9dcf02ba9b97ecc8da9b502a46a1436b37ae3b4fed64d410de2331b6190b4ec431fcff97ec86157c4dabacb492b67a54798da0d680878d3576db038ca729b3da1c969bb8afe059df25f2be389f68a3ffa5feba94f44d335f3a05ee1b18659cdec5357951a9f5555c5624524f86d58e9df4947408d2d622cdef7957b4c8833e3819ba65daa5157bbda2d4fd63cd1a1ff6a7"}}, &(0x7f0000000680)=0x0) timer_delete(r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000170100000400000002000000000000001800000000000000170100000300000000000000000000001800000000000000170700000300000001000000000000002000000000000000170100000200000009000000f91587a8a39ede8b73000000"], 0x68, 0x40}, {0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="dc32d0f93ad2ae18dd70501fb30e31e96d9171f0a6cdd426a5b3d382e25d8d9cedb87fc4a2e4e3363965dd1e364fb671e6c86d4fd75082c5f6bc6a9fe5ad946898fb74a3bb735b1b65f5758621f91a2382dcbccee128e468f8a9ddee2716bbcbbd6673d49c7edcedd836624e0619ca6e092a696c17c7b4636258892935fc9df1d32fc9c0dd87f8e4f18d1a0093a57b5f87b7b4f4243a88a27972d569137dff0e0b93a88af044f38e11a3c7ecddcf964ba3934b80b6c2f86bcf7b57c9e19eab72b1d9fa2779ac9dce5c7cbe0eb9baa50e394e61568b36e5036c14ec82a6e22647416f6758", 0x277}], 0x1, 0x0, 0x0, 0x4040850}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="34f9a940a242849dfd5d670427e51db0dedf56d5ad61f2a6db022e79829db6924019785f4c33c7d9aaaa8e4eade5cb62bc46f8e58d4957c18697f2ee5b4739b7f921eae9", 0x44}], 0x2, &(0x7f00000005c0)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x0, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x100000000}], 0x27, 0x20040001}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x0, 0x1800000000000, 0x8, 0x9}, 0x14) 19:40:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x10c) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x80000000000000) io_setup(0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000340)=0x14) sendto$packet(r0, &(0x7f0000000240)="a183bc128435ae842af1ff5525093a5e367ae4a05ace0168b7c91a969822d7539f40696d10c797b3b329bea319aa26fc4fee1ed43fc6b8d49c07215a1233508a91a1d605790f854b19c776388e2c0467e43208012dba77f8b5d4e4b9bdded2cc877e0cf7061a343159e49c00539305e140b08c59c26a69ed86668ec72535fcde1e8d", 0x82, 0x4000, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x9}, 0x14) pipe(&(0x7f0000000180)) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) mq_open(0x0, 0x40, 0x40, &(0x7f00000000c0)={0x0, 0xfff, 0x0, 0x100, 0x6, 0x0, 0xb555}) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x100000000001f, 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x89b3, &(0x7f0000000200)={'nr0\x00', @ifru_data=&(0x7f0000000080)="bae8f5e59a6301624afafbe366188ec15a1567badd04bab804c40ca3aaca49f2"}) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0xea010000, 0xc}, 0x0, 0xe803000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 19:40:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) inotify_init() ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x4, 0x3b89, 0x1, 0x5, 0x6}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000040)={{0x200000000000003, 0x0, 0x0, 0x1000000}}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x2) 19:40:38 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000200)) prctl$PR_CAPBSET_DROP(0x18, 0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x57b5c425}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={r2, 0x2}) capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x7ff, 0x2, 0x400, 0x2, 0x9, 0x3}) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x2780, 0x2) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000100)={0xf, 0xb, 0x8, 0x2, 0x6, 0x7f, 0x3, 0x49, 0x1}) 19:40:38 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xda, 0x1a1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0xb6, &(0x7f0000000280)={@broadcast, @remote, [{[], {0x8100, 0x9, 0x3, 0x3}}], {@mpls_uc={0x8847, {[{0x9, 0x3f, 0x7, 0x7}, {0x0, 0x5, 0x8, 0x1ff}, {0x8, 0x3f, 0x7, 0x400}, {0x800000, 0x8, 0x6, 0x87}, {0x200, 0x0, 0x3a, 0x6}, {0x29, 0x7, 0x2, 0x20}, {0x80000001, 0x80, 0x3, 0x1}, {0x5, 0x4, 0x5, 0x2}, {0x1, 0x67, 0x72, 0x401}], @ipv4={{0x12, 0x4, 0x2, 0x8, 0x80, 0x65, 0x3, 0x10000, 0xa9, 0x0, @multicast1, @empty, {[@cipso={0x86, 0x16, 0xb1a, [{0x2, 0x6, "6e4d8da5"}, {0x2, 0x5, '^T '}, {0x1, 0x5, "943d62"}]}, @end, @ssrr={0x89, 0x1b, 0xe0c7, [@broadcast, @local, @multicast1, @multicast1, @remote, @broadcast]}]}}, @dccp={{0x4e21, 0x4e23, 0x4, 0x1, 0x2, 0x0, 0x0, 0x7, 0x3ff, "e45ba5", 0x326, "64a915"}, "d86ef12f747adcfce1e04953802c0b79e5c8ece28e11ead6819f2a266d10c003404dcf29cba5e027"}}}}}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) 19:40:38 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xac, 0x35, 0x519, 0x70bd26, 0x25dfdbfd, {0x1b}, [@typed={0x8, 0x55, @fd=r0}, @nested={0x90, 0x8, [@generic="3f1140dd257a19fca2ba6a7d45fa241da5813e97ca8e18", @generic="7d550e8c1d14751a16d74416a5dea921d1cb602faaed4f53e6db8d5639218b971259689f4cd0fde586b05c1b8442600e8a3ffef3", @generic="edf3b7ff60bc8a6110c1bbdfe2ad52ff22ffeed2b7d6f1b8e9a6fbed81f9", @typed={0x8, 0x19, @u32=0x6}, @typed={0x14, 0x62, @ipv6=@empty}, @generic="3a281f852a"]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004}, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x4040) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x10c, 0x9}], 0x10}, 0x10000000000000}], 0x1, 0x0) [ 252.960538] capability: warning: `syz-executor4' uses deprecated v2 capabilities in a way that may be insecure 19:40:38 executing program 5: fcntl$getown(0xffffffffffffffff, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = shmget(0x2, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000040)=""/17) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x2) close(r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 19:40:38 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2000000000003) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 19:40:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000004080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xffd2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x800, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000240)="98b0faa6351229c74eac50c87de77841663a711ceba2916c7cf411b13da7a36310648a4525b537640fdb8a5ec531b6ce944948587eeff43ae00bf6393a6488a12e67f9c2f9692ce3219b3008d7b6e3b50a821604a02843558258f4c36b73c6cac409e823b26117e39862c00659f4715a52353918e64a830352cff5f35be819004e67e4302b144b0178a036b08d3cb344cc9acf1265fe22171739fe8b5900dd159d422e30def192ba09375af43a68709b997814f3fe9365a053dd6cbe644db39f509a95657af8523e82e523c4555703a74c1f330a476369c0a819b724afe7f16322bec44455cfee", 0xe7}, {&(0x7f0000000340)="4e8b25cae2d6117c9f5642f886480b3ce5c898059606b0c76cc4737e438445df240406403b2a481078ad40111f81fe54d6f1f631ac4f8a22ec407356b1334cd105d5ed4dee0db08f01c2a434c5811c2c2da1900eac639bd525e88e68e4eac25c225cf73ca18f545e0df5f4b929ae1edd059df08c0af9fc3ad44ac5d7a95b87eeaa70bf5aad693dbc7245", 0x8a}, {&(0x7f00000004c0)="1cb5d1e466f157924a19a5646ac6d466923072ac5f5f9e940e87e581f09f79a1f1a56b85fb953f9a0865bb950aba99ceb7557ad223d8858188a96d71ec2746f351203c456316e3c111e93dc072e60d33519d94e9ca324d5f6093b40d79928c3fe2cf393234baf73c5f4d48490d3ffe397682f0d51ccdc4331a3c91aff4b9cfacea712bd4a20c51d65bbcd96982e553e25dcaab670c35a9c69947fd979590185f6b635388f1f3932fc2d0d9f5ae", 0xad}, {&(0x7f0000000580)="c197e8dd5a3dc4492235a4a83ed11e2c95586674d4e34f9753b6c1026cd2f94d80a51427f2d1525bb9e302a6fd3df0991f17b1fa05a30a233a3f4e0442071e81775b6fa6838569cd71346e56c0ec5743255098a0e81862bdbdcdc80197fa2778bcf73f30a997a826279362fde359bb0f479d27abe7c3e73fc27680a77b5acb5cc28cd5735db279f5a48b7bbf3633fdef500f4a3d3e979f5046919190234e3e2a8cb3e0439f57873d14462256a7bd69118520938844b24c4eaec877e5398edd8db88305e9bf706e3c08f91c5bae0b611650b0817b2f1cabdad05c6bc18ee54c8ab522cc200e0a7ced70d4d0cd68164bf4353a366acb59e94816", 0xf9}, {&(0x7f0000000400)="118de257e2508718dd49f63a7be104e33c12f9fea1da4e0d8c412f286be1fae8fd0ebfae771fa7f2999fc526a8d056184564594159bd8bdcc0f867590c814fc71a7c8074dffe3cb50146df346c4ab7fc4454279f7fcc31609cb431b8589420afca169e", 0x63}, {&(0x7f0000000680)="556d8d36066f6d4cce8ba5cbc0a895e824e1c0b8440cc1fcb84a8c4b3ea5d2a3bf83a3236577932183759c35837a7aa0917364e9bc73f1df5fc5850edc59763fb9bafc9844088e0204d77f37fb5adf5d984735f7ead257b9ab8d1c7c23fb42f7cdf2e7e2475ad594496884b22fce332309017fff0b76a1c38f271547d9186cca83a454b59e33843dce58e9d5d99eaaf2682f37f1cc8ed6ad9442b376499c92ca24009c19b94adccb4157f59ecdc4261b83bcd3d5855687c42a11223a4b708192b06ada51744a64fd90eea2cdbaaa20a3f449feeb7520e28139d8fd9946b60b0424981269be00a00918e45733dbecd833862da89475a105", 0xf7}, {&(0x7f0000000780)="8c834ee83768a98c9e60fe54eefc3c5f80e84333e3f76b2a51ddcd59262f4f3b5e9f18404ea91016b21314fdefc4a3b6887de55dbc839ec427ad479fb6e225c67dbab6fbd5ea4615f8cdb72ea75f3520b2dc5202a90edfa2d25f5601d556049bd2a6afb7511e", 0x66}, {&(0x7f0000000800)="dd1d1165b9b78ee7d78b6b9869a3b4b6cf210ad1563bc4c2500ff25a089766b3f8f4b0011d83c65a12372a28b608c13cf305e5c516cdf2a627ff65518b350787bf2fe0d5f8043c001d87cfbd255268b2e867681253b17be5d22b85472c05432d41118d50a41fd81d83519c20020ddf87862c45a7d0bf1fd4ee5770cdecc402547bd8e5f4b24fa1ef488d7cf1426ef0f1fcb2d5357d6c2a72398abe3d604b63769fcff08209287c788681f0c3867535cece886a35e8e5396d4097bb538ae905c9170375297c47949fb7e072fdd986d00f196c207f3e8bbd3209f1c55bf8389f", 0xdf}], 0x8, &(0x7f0000000980)=[{0xf8, 0x114, 0xdfe2, "c92a860fc2c80f00375166e2f9ff7c6dd8d9cfc34ea4e2aa67924f44a076ff4efa23e9df0d1e0444da257d5d0e58ed46d71b46b52b55cbd8f945cb8a93ec7cfb4f706ce68f61e308d4366cad6ae270055a80fb93e7c9ed4d29a182dec3ead36bfe7191879a808621b82418cac68a18394bfa433dfc5bbb352d15a15ea9512d854238b8b351dfcb3420f69cbd67a3a7619526bab0827528a8f5ae8c0263351cfbf42009af9389f5021838e5204615420b09ab468ea077d462c83ffdb1dac01c1e39fcf556b4ad1a4ab7c4f6028273f150874318ed67c6d7870628ebb85e47d4e8f13f"}], 0xf8}, 0x24004080) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/qat_adf_ctl\x00', 0x40400, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:40:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000380)={{0x4, 0x0, 0x305, 0x3, 'syz0\x00', 0x3}, 0xfffffffffffff001, 0x10000004, 0x80000001, r2, 0x3, 0x8, 'syz0\x00', &(0x7f0000000340)=['com.apple.system.Security\x00', '$ppp1$##\x00', '/dev/dri/card#\x00'], 0x32, [], [0x6782, 0x3f, 0x80000000, 0xa2b]}) ptrace(0x10, r3) io_pgetevents(0x0, 0x4, 0x4, &(0x7f0000000680)=[{}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x989680}, 0x0) ptrace$cont(0x20, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000aa938a0b658b4b71ee20893a"], &(0x7f00000000c0)=0x16) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) semget$private(0x0, 0x7, 0x400) r4 = semget$private(0x0, 0x0, 0x1fffffffffd) semctl$GETPID(r4, 0x0, 0xb, 0x0) fallocate(0xffffffffffffffff, 0x10000000000004, 0x0, 0x80000001) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000200)=0x2000000000000006) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000240)=0x4) fremovexattr(0xffffffffffffffff, &(0x7f0000000500)=@known='com.apple.system.Security\x00') socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000740)={0x81, {{0x2, 0x4e22, @loopback}}}, 0x88) 19:40:38 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@mcast1}, &(0x7f00000000c0)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001580)=[{&(0x7f0000000400)="e4a82bcd5b007f18a28e9d46fe7f6c12d7b344eea8ca942ff7340d1c07c06d0242b50785deeacf4a77a41fc2e309aea9da03001b3772d590fcaaaf5cdbff6a597774dea45c37bcc055b91dd489028dd97152830d0d459d0e68f78bc44c4638c78b5b758d793b6f269cadfdedb04d5ff6c933f3ccd9a46e99c8e8c7db8724f0b7", 0x80}], 0x1, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000480)='W', 0x1}], 0x1, 0x0) splice(r1, 0x0, r3, 0x0, 0xced1, 0x0) 19:40:39 executing program 4: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000580)={'ip_vti0\x00', 0x8000}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), 0x4) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000480)=0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000840)={'broute\x00', 0x0, 0x3, 0x96, [], 0x2, &(0x7f00000006c0)=[{}, {}], &(0x7f0000000780)=""/150}, &(0x7f0000000940)=0x78) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000980)={0x7d2, 0x34324142, 0x3, @discrete={0x53, 0xdc}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x115c, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = accept4(r3, &(0x7f00000005c0)=@hci={0x1f, 0x0}, &(0x7f0000000640)=0x80, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000009c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000a40)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r6 = getpgrp(0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x70, 0xfffffffffffffeff, 0x2, 0xfffffffffffffffe, 0x2, 0x0, 0xffffffffffffff01, 0x108, 0x2, 0x9, 0x7, 0x0, 0x9, 0x2, 0x0, 0x4, 0x62e73dbb, 0x8, 0xae1, 0x9f98, 0x7, 0x5, 0x2, 0x3, 0x0, 0x2, 0xfffffffffffffffe, 0x10000, 0x2, 0xfffffffffffff384, 0x6, 0xff, 0x2, 0xffffffffffffff92, 0xc8, 0x0, 0xfffffffffffffffb, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x5}, 0x6, 0x5, 0x1000, 0x0, 0xfff, 0x91, 0x6}, r6, 0x0, r1, 0x3) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000280), 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'sit0\x00', r5}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00'}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000a80)={0x0, 0xff, "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"}, &(0x7f0000000700)=0x107) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000a00)={r7, 0x3, 0x3}, 0xffffffffffffff9a) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000032c0), 0x80000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003300)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@remote}}}, &(0x7f0000003400)=0xe8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x6, 0xe7}, {0x81, 0xffffffff}}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r8) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000680), 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x8001, @remote}}, 0xfffffffffffffffc, 0x2, 0x8000, 0x6}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000380)={0x0, @in, [0x0, 0x6, 0x0, 0x6, 0xfffffffff01a71ef, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x40003, 0x0, 0xffff, 0x3f]}, 0x0) [ 253.334545] protocol 88fb is buggy, dev hsr_slave_0 [ 253.339694] protocol 88fb is buggy, dev hsr_slave_1 19:40:39 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x401, 0xa) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xf205) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc038563b, &(0x7f0000000240)={0x1, 0x1f, [], @bt={0x37a7f5a8, 0x8, 0x9ad, 0x6, 0x4, 0x1439, 0x10, 0x4}}) [ 253.495274] protocol 88fb is buggy, dev hsr_slave_0 [ 253.500404] protocol 88fb is buggy, dev hsr_slave_1 [ 253.574577] protocol 88fb is buggy, dev hsr_slave_0 [ 253.579797] protocol 88fb is buggy, dev hsr_slave_1 19:40:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000005e0007031dfffd946fa2830020200a00ff0003660e1d85680c1ba3a2c40dff7e", 0x24}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000002c0)) getitimer(0x2, &(0x7f0000000040)) getuid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000005040)) 19:40:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/236, 0xec}, {&(0x7f0000000100)=""/75, 0x4b}], 0x2) 19:40:39 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000040)={0x1c0323, 0x3}) 19:40:39 executing program 1: syz_open_dev$binder(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x1000) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x4000, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x6}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2a020000", @ANYRES16=r2, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) dup3(r0, r3, 0x0) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x1100) 19:40:39 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x30000, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x100, {{0x2, 0x4e22, @empty}}, 0x0, 0x3, [{{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e24, @empty}}]}, 0x210) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x7, 0xb, 0x4, 0x100, {0x0, 0x7530}, {0x0, 0x2, 0x4, 0x7, 0x100000000, 0x64f, "4b30dfba"}, 0x1, 0x3, @fd=r1, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xe3) sendto$inet(r3, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0x10) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x327) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000000)=0x4879, 0x4) sendto$inet(r3, &(0x7f0000440000), 0x38c, 0x0, &(0x7f00002ce000), 0x10) [ 253.920893] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub 19:40:39 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='&\x00') r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8_\xfd`\xd2\x98\x00\x00\x00 ') close(r0) 19:40:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x100000000000004, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x7a000000, [0xc0000101], [0xc1]}) 19:40:39 executing program 3: socket$netlink(0x10, 0x3, 0xa) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x10001}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x5, 0xb2, 0x6ca, 0x0, 0xfffffffffffffffe, 0x1000, 0x4, 0xfffffffffffff6f0, 0x7fff, 0x9, 0x2, 0x6, 0x40, 0x3ff, 0x1000, 0x8, 0x1, 0x100000000000, 0x9, 0x9, 0xfffffffffffffc00, 0x7, 0xc2, 0x7f, 0x2, 0x6ae, 0xbec, 0x7, 0x8001, 0x2, 0x2, 0x7, 0x0, 0x7, 0x4, 0x0, 0x0, 0x5, @perf_config_ext={0x1000, 0x1000}, 0x4100, 0x3ff, 0x4cd, 0x2, 0x5, 0x2, 0x8000000000000000}, r4, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000340)="b2620f21d9a3b1d48cc1c08239e0ac1c14f31ebafd98511b4992b041a074d90275c9079e1346c58295e5273916bc49844364b082d1eaeb65bff4d959d4fd512cb2481c82f740520f6df8448fb1336a3ece086d04159338207d863d08fc6740b7e17e36e8bad0d4a625475721c5736f65e3559b0b80c65068cecff414de8d993da3bb2401dfa797c5f61f9f07a2", 0x8d) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'veth1_to_bridge\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="38f2ba000000000000000000000000000000"]}) close(r7) close(r6) sendto$inet(r3, &(0x7f0000000300)='\a', 0x1, 0x8055, 0x0, 0x0) 19:40:39 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x1, 0x168, [0x20000440, 0x0, 0x0, 0x20000470, 0x200004a0], 0x0, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x1e3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) ptrace$getregs(0xe, r2, 0x1, &(0x7f0000000080)=""/35) 19:40:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ctr-twofish-3way,poly1305-generic)\x00'}, 0x58) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000180)) close(r0) 19:40:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f33"]) unshare(0x400) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) rename(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000180)=""/137) setsockopt$inet6_dccp_int(r4, 0x21, 0x7, &(0x7f00000000c0)=0xfffffffffffffff8, 0x4) [ 254.171871] kernel msg: ebtables bug: please report to author: Wrong len argument [ 254.198932] kernel msg: ebtables bug: please report to author: Wrong len argument 19:40:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="22373792ca108a9b0d3996dfa29de675bab701544beb4e530feefce9621bd29b9f632a76bb70b5821ec9b45fae7717bb87163d2aaf134d9042483f02b0f510c1c9c7760eee8b254350c9e3c9c67a8caf474ecc3b0cf364392236ae9b217afc7c774e90fd0aa32ad20e8be2a10d47c762e58922ef53d1f1a0add70942bbb381b4", 0xfffffffffffffdc5}, {&(0x7f00000001c0)="92b106cd6b21866fffd5ecb5be198392cf8a92de24", 0x15}, {&(0x7f0000000200)="9060cac054c762d5b3dccbcea3164fd92b26f978611ba955ddb13881285f2e9deaabd8c93633d87ec43daf1f3414da02fccc29ee39de842c1a702b6402905f9d291fbb7f1cca4da64671a049a195e07fbf6195f0f1c6830e1c98e5d54e0707e58f7fc47ff5a685838ee4f03e584ffbb6d51d4b8130124ede6bd01f74d70da1b7b53d8aa7b7814999ba6e50667f736a2be7972e31fce363f48087dce72bcaa34f37593675", 0xa4}, {&(0x7f00000002c0)="dad9b8b158f6af22e683ccb6ef06f1c33955a51d9dfee50abddf6aa301310e7c02719c31bf5a5a32f23fc7da8e32bbf9a17d3e25eee0fc4a17db45dea8e9e44418737820e30462555eb5", 0x4a}, {&(0x7f0000000340)="5eb2b9727bff4f812295392776dfb9a86b112b2113ecfae1cc93763c0692016551bf184bab71897a2dd0a64850854061d78a3dbb50ca5a4f6108eea40c2bcfdc41ca951fea707799fb0bbfed786b54eb13040d6cc606e8a516b8edf6708cc048d5449c55d3adaaeef66b86e1f8694391ac55decd8a68a53b4fc0d92173f2d936cfc4aaa21d890b22d515431e069d", 0x8e}], 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b8000000000000001701000002000000a00000009b906b51e9d6bdacae5e2d90f8765919685f282212faeda917e0df8e766e402403789462476bab3ae9dcd6aa13766e87c124cb2ee89aeb7779b1b65c97d263a18c5527d2082d66394eadc9f00179a9e2fbbb6417497c4b0d567a72625a714fcf041d99fa263297bdf4224fc745ed6c1bdf8d34a23920e32800399e1fd5cbe9fe79896902f40a2c154a8b4c7d835ab0312abb9d3dc10a7bad2ba4fe955200000000"], 0xb8}, 0x4000000000) io_setup(0x4, &(0x7f0000000480)=0x0) io_getevents(r2, 0x5, 0x1, &(0x7f00000004c0)=[{}], 0x0) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r3, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) [ 254.293118] tls_set_device_offload_rx: netdev lo with no TLS offload 19:40:40 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x221, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd71\xf3\xf3\x9dOeD\xe4a\x92!^s\xce\xec?0\xeb\x0f\x90\x94W\xda\xbc6\xac\x1d\x8d\xadrc\n\xc3\xba\t\xee\x91\xc3\x8b\xa5\xfa\xd3~|t\x0fS+\x03Z\xf6\x94q\xe2T\x85b\x1a\xb2\xe7\x9e\xc9\x01\xfe\xae\xf6\x1b\xf5\x17\x04\xa6\xa6q-\xc6\xee\xba\x96\xd1\xa4\xf5(\v\xc3\x06p\xce\xfdK\x87#j\xd7\xda\x9f\x1a\xd6\xb9R{\xd8\xe8\xbd~\x8c\x81)\x99\xb8\xd6]d\xee,\v0\x01\x19#\x84\x1eV\xcb-\xda>\xd5\x02\xf4s?\x9a\x13r\x03fh\xac/\xe1\xcd\xca&\x8b]\xd5x \x00\x05\xdf\xde\x88\xb6\x17B\xf7wP\x88/[H\xdc\x13\xae\x1c\xae\xed\xb7\x85\x8f\xa8\xa9\xe5') syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x2) sendfile(r0, r1, 0x0, 0xdd) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={r2}) 19:40:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000580)='[\'posix_acl_access\x00%\x11\xdbS>_\'*2\xc62\xd1\xa2\xa7\xde\xa7\xe0\xe9\xa6\x16yE\xd3\x8by\x133\xbd\xce\x02r\xd1.]\x0f\x0ee\xeb!l\n\x88F[S\xa1\x16\t\x15\x9f\xdd\x02\xec~\xf9\x90\xb9\x1c\xb2\xc7U\xefhz\x11\xafl\x927Q\x99\xdc\xb9=\tKG\x0e\xe5F\xd9\x15\xe0\"\xe7\xbc\xc6\xb5\xa7d\xab\xb3Y\f^8lY\x8e+\xc2\xef\xef\x8c\xc43x\x97\x9e=\x8aJ\xfe\xf5D=\x12Uz\x95p`\xec\x97\x9e\xcb\x90\xb6\x99$&\x86\xe1\xfa>\xb5\xc9O\r\xb7\xb9\xdc\x03w\xb0\xcb\xae\xdb\"=\x84D^\xa0F\x03\xc2\xd3\v\xca\x19\xc8<\xde\x83y\xbf\x95s\'\t\xe7\xe8\x1d\x92a', 0x1) r2 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000000763f001a7f000000ba24000000ff0709000080"], &(0x7f0000000080)=0x18) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)='\x00', 0x1}], 0x0, 0x4081806) sendfile(r0, r1, 0x0, 0x20020102000007) 19:40:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) ioctl$void(r1, 0xc0045c79) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffffffffffe}}, [0xb776, 0x0, 0x48dd, 0x0, 0x32f, 0x200, 0x4, 0x24bb, 0xffffffffffffff4f, 0x6, 0x100, 0xcf, 0x4, 0x9, 0x6]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x1}, &(0x7f00000003c0)=0x8) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000440)={0xf9f0000, 0x9, 0x800, [], &(0x7f0000000400)={0x980913, 0x0, [], @value64=0x34d}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r2, 0x3, 0x1, 0x80000000, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="30b9ab377ce95f7d5118bce90fd14e5cea85cf48561b555a99752d95e66f5dedf3a70caab1aac6525d992fff216fc787c6b0264ca2570faabd76572628c761072492d1ec7803edf06c69efbadd672e065034040241115e818e7edda05015564f9c5b88b8b2", 0x65) connect$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000480)) 19:40:40 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = socket$kcm(0xa, 0x0, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100402b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x2000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r2, 0x408, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xad1c}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe70}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19:40:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x101) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x1c6, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='scalable\x00', 0x6c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vxcan1\x00\x00\x00\xf8\xff\xff\xff\x00', 0x10) sendto(r0, &(0x7f0000000080)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='hwsim0\x00', 0x10) 19:40:40 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r1 = syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x0, 0x40400) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000380)={0x1a, 0x7, 0x11, 0x5, 0x7, 0x5, 0x5}) socketpair(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200), 0x4) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000280)=""/238, &(0x7f00000001c0)=0xee) clone(0x4000, &(0x7f0000000380), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80005, 0x4) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000540)=""/225) prctl$PR_SET_DUMPABLE(0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000003c0)={@empty, 0x0}, &(0x7f0000000400)=0x14) bind$packet(r0, &(0x7f0000000440)={0x11, 0xf7, r2, 0x1, 0xbb, 0x6, @broadcast}, 0x14) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="2c769e4f8b3a270cdeb5e584eef7f77810e350a8815318cb0c82206be71b3800a14989b90978ed9da4d942a1760f553d78638f0967b937d4ee7303237f0b7f369bdd920990946d707924f445f19993342234357b1fa518e51f2571fe1c4a29db1ee705e82e320276d99c75b400000093b9b21bcfb40d275605abbdacef6213a8e749810a"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 19:40:40 executing program 3: socket$netlink(0x10, 0x3, 0xa) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x10001}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x5, 0xb2, 0x6ca, 0x0, 0xfffffffffffffffe, 0x1000, 0x4, 0xfffffffffffff6f0, 0x7fff, 0x9, 0x2, 0x6, 0x40, 0x3ff, 0x1000, 0x8, 0x1, 0x100000000000, 0x9, 0x9, 0xfffffffffffffc00, 0x7, 0xc2, 0x7f, 0x2, 0x6ae, 0xbec, 0x7, 0x8001, 0x2, 0x2, 0x7, 0x0, 0x7, 0x4, 0x0, 0x0, 0x5, @perf_config_ext={0x1000, 0x1000}, 0x4100, 0x3ff, 0x4cd, 0x2, 0x5, 0x2, 0x8000000000000000}, r4, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000340)="b2620f21d9a3b1d48cc1c08239e0ac1c14f31ebafd98511b4992b041a074d90275c9079e1346c58295e5273916bc49844364b082d1eaeb65bff4d959d4fd512cb2481c82f740520f6df8448fb1336a3ece086d04159338207d863d08fc6740b7e17e36e8bad0d4a625475721c5736f65e3559b0b80c65068cecff414de8d993da3bb2401dfa797c5f61f9f07a2", 0x8d) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'veth1_to_bridge\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="38f2ba000000000000000000000000000000"]}) close(r7) close(r6) sendto$inet(r3, &(0x7f0000000300)='\a', 0x1, 0x8055, 0x0, 0x0) 19:40:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x1000000003, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) dup3(r0, r1, 0x80000) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000140)={0x0, r1}) 19:40:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') fchdir(r1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) inotify_add_watch(r1, &(0x7f0000000440)='./file0\x00', 0x0) bind$isdn_base(r1, &(0x7f0000000200)={0x22, 0x2, 0x4, 0x5, 0x4}, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setresgid(r2, r3, r4) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 254.960349] tls_set_device_offload_rx: netdev lo with no TLS offload 19:40:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000300)=0x1, 0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2f, 'io'}, {0x2b, 'pids'}]}, 0xa) clone(0x1fd, &(0x7f0000000180), 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x800007) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x4001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lremovexattr(0x0, &(0x7f0000000340)=ANY=[]) r4 = getpid() sendmsg$alg(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="c6ffdf0bf2c1d0a8ab09b3d037032cc8eb53b0b99a1a21d9c3faf021939c8f32acca4ac35df4003be0ad93fdaf7c08f599baca97722e2c6e41f69dca65dea4ca372e429c1f7f97447aa6642c3740ab8cb40ebad0e8642971da24f004a6e27239537c082169170c87a85595c8065cbfbe", 0x70}, {&(0x7f00000005c0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x8000}, 0x40000) r5 = dup(r2) sendto$unix(r5, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200), &(0x7f00000003c0), &(0x7f0000000400)=0x0) fchownat(r5, &(0x7f0000000140)='./file0\x00', r6, r7, 0x1100) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000040)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) socket$pptp(0x18, 0x1, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x80) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) io_setup(0x9, &(0x7f00000001c0)=0x0) io_cancel(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x20, r3, &(0x7f0000000540)="5b5dab90a7044b6ff5144231c1424c106ba4afd12fc43206dd38a3e4f0144f99f6b43793d82c413bbbab1d6fb00f9aa31e6ab35057180bee1a3e0867183b4aa8a66f654aa715655f57ec4c21f1c1db8bf56642d0ebdbe63e5a168171dddb9ae5f5026e04b7527bd98fee79dd7fe41cd135e7819c", 0x74, 0x9, 0x0, 0x2}, 0x0) 19:40:40 executing program 0: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x24) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000000)="020400000300600000000000fff55b42b90516db4d699539", 0x18, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002140)='/dev/rtc0\x00', 0x48000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000044c0)={0x0, @in={{0x2, 0x4e22, @local}}, [0x2, 0x80000001, 0xbd8c, 0x0, 0x8, 0x8, 0x401, 0x6d, 0xed, 0x6f, 0xfffffffffffff034, 0x6, 0x7, 0x4, 0x100]}, &(0x7f00000045c0)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000004600)={r4, 0x401}, 0x8) 19:40:40 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='.wlan0@(#*&uservmnet0$ppp0loself.&\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000200)}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000100)={[], 0x7a, 0x5531fee, 0x0, 0x0, 0x9, 0xf000, 0x1d000, [], 0x5}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000980)='/dev/null\x00', 0x400, 0x0) acct(&(0x7f0000000000)='./file0\x00') getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000480)={'filter\x00', 0x0, 0x4, 0xfb, [], 0x1, &(0x7f00000009c0)=[{}], &(0x7f0000000a00)=""/251}, &(0x7f0000000b80)=0x78) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000500)='/dev/v4l-subdev#\x00', 0x9000, 0x80000) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00?\x00', 0x19, 0x2, 0x278, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, &(0x7f0000000080), &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"]}, 0x4ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_DIRENT(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x30) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000380)={r7, 0x3}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x185400, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000540), &(0x7f0000000640)=0x40) 19:40:40 executing program 3: socket$netlink(0x10, 0x3, 0xa) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x10001}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x5, 0xb2, 0x6ca, 0x0, 0xfffffffffffffffe, 0x1000, 0x4, 0xfffffffffffff6f0, 0x7fff, 0x9, 0x2, 0x6, 0x40, 0x3ff, 0x1000, 0x8, 0x1, 0x100000000000, 0x9, 0x9, 0xfffffffffffffc00, 0x7, 0xc2, 0x7f, 0x2, 0x6ae, 0xbec, 0x7, 0x8001, 0x2, 0x2, 0x7, 0x0, 0x7, 0x4, 0x0, 0x0, 0x5, @perf_config_ext={0x1000, 0x1000}, 0x4100, 0x3ff, 0x4cd, 0x2, 0x5, 0x2, 0x8000000000000000}, r4, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000340)="b2620f21d9a3b1d48cc1c08239e0ac1c14f31ebafd98511b4992b041a074d90275c9079e1346c58295e5273916bc49844364b082d1eaeb65bff4d959d4fd512cb2481c82f740520f6df8448fb1336a3ece086d04159338207d863d08fc6740b7e17e36e8bad0d4a625475721c5736f65e3559b0b80c65068cecff414de8d993da3bb2401dfa797c5f61f9f07a2", 0x8d) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'veth1_to_bridge\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="38f2ba000000000000000000000000000000"]}) close(r7) close(r6) sendto$inet(r3, &(0x7f0000000300)='\a', 0x1, 0x8055, 0x0, 0x0) [ 255.213354] mmap: syz-executor2 (8648) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 19:40:41 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f00000001c0)=0x7) [ 255.483879] tls_set_device_offload_rx: netdev lo with no TLS offload 19:40:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_CACHEINFO={0xf}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) fchdir(r0) r1 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="2720716178f4a9f19f7c0c8d2430b9aac8f23bb19fe371641058a09ed32783c5c2bb19a91dac8f95364853b92fea10fb87d9134bd689226aef9c28fddbffc62de05766a44bf69d90ac3f1c9ea024df3f1334e388c4beae0ec4bb5a29", 0x5c, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, r1, r2) 19:40:41 executing program 0: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6fb, &(0x7f0000000340)={@local, @remote, [{}], {@ipv6={0x86dd, {0x0, 0x6, "c9271f", 0x6c1, 0x0, 0x0, @mcast1, @remote, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x612, 0x2, [], "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"}, {0x5, 0x0, 0x81, 0x7, 0x0, 0x0, 0x800, [], "1dea3dbfa55d136de95ca0f155c47de98ed3a964241a39c46a4dac3a300b3543346a68719640185750e95e11"}, {0x4, 0x0, 0x0, 0x7ff}, {0x8, 0x88be, 0x0, {{0x8000, 0x1, 0x7f, 0x0, 0xc38, 0x3, 0xfffffffffffffff7, 0x3}, 0x1, 0x100000001}}, {0x8, 0x22eb, 0x0, {{0xbd0b, 0x2, 0x4, 0xe1d, 0x80000000, 0xfffffffffffffffc, 0x4, 0x2}, 0x2, 0x4, 0x7, 0x2, 0x6, 0xb4, 0x1ff, 0x3, 0x1, 0x2329}}, {0x8, 0x6558, 0x3, "b81c64cd50e5abf84b6bd86f4d519888149ab793f38337d7c5f59df125ed3c141bbe8bde109434b78a31ad0195757c86258c7deb2606d340aec8acc2b51859"}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000a40)={0x118, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x104, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xabe2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}]}, 0x118}}, 0x10) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000002c0)={0x16000, 0xf3acd57e61c4da50, 0x4}) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 19:40:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='auxv\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r2, 0x102, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1000}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040800}, 0x8001) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r3 = socket(0x848000000015, 0x805, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, [], [{0xef59, 0x401, 0x200, 0x7fffffff, 0x9, 0x7fffffff}, {0x100, 0x100000000, 0x9, 0xfffffffffffffffa, 0x2}], [[], [], []]}) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x3, {0x101, 0x2, "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", 0x8f, 0x2, 0x7fffffff, 0x5, 0x8001, 0x2, 0xfff}, r5}}, 0x128) ftruncate(r4, 0x6) getsockopt(r3, 0x114, 0x5, &(0x7f00000005c0)=""/13, &(0x7f0000000000)=0xfffffffffffffd28) [ 255.880157] FS-Cache: Duplicate cookie detected [ 255.884984] FS-Cache: O-cookie c=00000000044843ca [p=00000000fc21df5e fl=212 nc=0 na=0] [ 255.893134] FS-Cache: O-cookie d= (null) n= (null) [ 255.899773] FS-Cache: O-key=[10] '0200020000a07f000008' [ 255.905233] FS-Cache: N-cookie c=0000000079fa3922 [p=00000000fc21df5e fl=2 nc=0 na=1] [ 255.913211] FS-Cache: N-cookie d=000000007aabd236 n=00000000afe86bc5 [ 255.919787] FS-Cache: N-key=[10] '0200020000a07f000008' 19:40:41 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002e0007081dfffd940101830020200a000900000006000000600000000d00ff7e", 0x24}], 0x1}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x3ffffc, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0xfffffffffffffffc) r2 = semget(0x0, 0x0, 0x4f) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) semtimedop(r2, &(0x7f00000001c0)=[{0x1, 0x2, 0x1800}], 0x1, &(0x7f0000000240)={r3, r4+10000000}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x60000, 0x0) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000180)) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0) 19:40:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x4) mremap(&(0x7f0000ab4000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x4400, 0x0) 19:40:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x8, 0xffffffffffffffe0, 0x3f}) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc05c5340, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000015) 19:40:41 executing program 3: socket$netlink(0x10, 0x3, 0xa) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x100000001, 0x0, 0x10001}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x4, 0x5, 0xb2, 0x6ca, 0x0, 0xfffffffffffffffe, 0x1000, 0x4, 0xfffffffffffff6f0, 0x7fff, 0x9, 0x2, 0x6, 0x40, 0x3ff, 0x1000, 0x8, 0x1, 0x100000000000, 0x9, 0x9, 0xfffffffffffffc00, 0x7, 0xc2, 0x7f, 0x2, 0x6ae, 0xbec, 0x7, 0x8001, 0x2, 0x2, 0x7, 0x0, 0x7, 0x4, 0x0, 0x0, 0x5, @perf_config_ext={0x1000, 0x1000}, 0x4100, 0x3ff, 0x4cd, 0x2, 0x5, 0x2, 0x8000000000000000}, r4, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000340)="b2620f21d9a3b1d48cc1c08239e0ac1c14f31ebafd98511b4992b041a074d90275c9079e1346c58295e5273916bc49844364b082d1eaeb65bff4d959d4fd512cb2481c82f740520f6df8448fb1336a3ece086d04159338207d863d08fc6740b7e17e36e8bad0d4a625475721c5736f65e3559b0b80c65068cecff414de8d993da3bb2401dfa797c5f61f9f07a2", 0x8d) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'veth1_to_bridge\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="38f2ba000000000000000000000000000000"]}) close(r7) close(r6) sendto$inet(r3, &(0x7f0000000300)='\a', 0x1, 0x8055, 0x0, 0x0) 19:40:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$key(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x34000) [ 255.925777] syz-executor4 (8613) used greatest stack depth: 17896 bytes left 19:40:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = socket(0x80000000a, 0x3, 0x5) unshare(0x0) r3 = getpid() capget(&(0x7f0000000100)={0x20080522, r3}, &(0x7f00000005c0)={0x10001, 0x9, 0x20000, 0x9, 0x9, 0x7}) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000003c0)) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, &(0x7f00000002c0)=0x8c) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a2, &(0x7f0000000380)={'bridge0\x00', 0x200000000b}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r4, &(0x7f0000000480), 0x1000000000000103, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) clone(0x0, &(0x7f0000000480)="7d39353c0211b0ba7b6b8fa855bd4a4277a5408e8d403ff25c2cf2ea40ebda8fb98b0a56", 0x0, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x80080, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x100}, {r4, 0x400}], 0x2, 0x4d) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) fcntl$dupfd(r2, 0x406, r4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000500)=""/148, 0xfffffffffffffec6}], 0x1, 0x0) fcntl$setownex(r5, 0xf, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4c00) r7 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r7) ioctl$TIOCGSID(r6, 0x5429, &(0x7f00000000c0)) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) r9 = syz_open_procfs(r8, 0x0) preadv(r9, &(0x7f0000000480), 0x2000000000000113, 0x0) getresgid(&(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000240)) [ 256.066187] tls_set_device_offload_rx: netdev lo with no TLS offload [ 256.147210] kernel msg: ebtables bug: please report to author: Wrong len argument [ 256.152026] bridge0: port 3(syz_tun) entered blocking state [ 256.173101] bridge0: port 3(syz_tun) entered disabled state [ 256.246716] device syz_tun entered promiscuous mode [ 256.266164] bridge0: port 3(syz_tun) entered blocking state [ 256.272022] bridge0: port 3(syz_tun) entered forwarding state [ 256.674331] kernel msg: ebtables bug: please report to author: Wrong len argument 19:40:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) timerfd_create(0x8, 0x80000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000000, 0x32, r0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x5}}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x4, 0x0, 0x0) close(r4) dup3(r2, r3, 0x0) 19:40:42 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)={0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) 19:40:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x201) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 19:40:42 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x24a, &(0x7f0000000540), 0x0, &(0x7f0000000600)=[0x0], 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) 19:40:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x80, 0x101000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0)=0x100, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000"], 0x14}}, 0x0) 19:40:42 executing program 4: socketpair(0x4, 0x8000e, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x0, 0x71, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) 19:40:42 executing program 0: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1]) r4 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) r5 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf10001, 0xeffffdef) io_setup(0x27, &(0x7f0000000240)=0x0) io_cancel(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x3, r3}, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000380)) close(r3) r7 = dup3(r0, r5, 0x80000) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000200)={0x10000, 0x2}) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f00000003c0)=""/100) bind$alg(r1, 0x0, 0x2b66db71f52e4be1) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x4000004) r8 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x7, 0xf07}, 0x8) fanotify_mark(r3, 0x0, 0x8, r7, &(0x7f0000000100)='./file0\x00') fcntl$getown(r8, 0x9) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="65496bc8b2ac9d9fa9f381ad17854629ba35141abfbb0d1cd95605fd71d7cb20c4e73677343504e14102b14c3da418047d3560e1d1653528d3cedfc40ba444cc62b1253d2d45539284013f01baf5f4a22eea183c3c406dc5bffc8d26a6fc144f08e3cb663f7ff4bfa1dfec0345b013ff98835d53b325ae7b2cbf", 0x7a) 19:40:42 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_bridge\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000083e2ef54d69528f95c5c473598d40e00000000000000000000000000000000000000000000000000000000"]}) r1 = dup3(r0, r0, 0x80000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000300)="66b881bf7b8d0f23c80f21f86635040010000f23f80f090f015db367260f185dca0f0015d9f0baf80c66b85a71f88566efbafc0cb0c6ee366626660f3802cc80cac0baf80c66b83b877d8e66efbafc0cec", 0x51}], 0x1, 0x20, &(0x7f00000000c0), 0x0) r3 = geteuid() quotactl(0xfffffffffffffffa, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000002c0)="83f7b0c2bb32049322df07f637ada74487e8000000000022362cc809002222d6a3ffc93d55d6a4bedd218cfd39965e") getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180), &(0x7f0000000240)=0x4) setitimer(0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000480), &(0x7f0000000500)=0xfffffffffffffd33) 19:40:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f0000009340)=""/153, 0x7ffff000}, {&(0x7f0000000180)=""/159, 0x90}], 0x2}}], 0x1, 0x0, 0x0) 19:40:42 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @local, 0x0, 0x3, [@loopback, @remote, @broadcast]}, 0x1c) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local}, 0x10) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 19:40:42 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000340)=ANY=[@ANYBLOB="c7d6e2110a00a0001e00000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getresgid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300)) setresgid(r4, r5, r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x2, &(0x7f000000c000/0x4000)=nil, 0xfffffffffffffffe}) 19:40:42 executing program 4: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000001fe8)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) acct(&(0x7f0000000000)='./file0\x00') setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x5, 0x7, [0x6, 0x800, 0x1, 0x7, 0xfffffffffffffffa, 0x7, 0x0]}, 0x16) msgget$private(0x0, 0x4) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/219, 0xdb) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='lp\x00', 0x1) 19:40:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2a44fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 19:40:42 executing program 5: r0 = memfd_create(&(0x7f0000000000)='fou\x00', 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e21, @loopback}}, 0x3, 0x342, 0x0, "0a5f4964d6e14fbbe8f2d4cb7d86dc084cf4616d36616e8d2ad25c0fd28a45cc28f06e7c50c5551ade5bf10c27003a55f58fdb56fa3f33efd139fe3fd86606237fcf239be838479258103dbe21ac2d84"}, 0xd8) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) mmap$xdp(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x0, 0x10, 0xffffffffffffffff, 0x80000000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x85) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0xfff, @remote, 0x3f}}, [0x2, 0x400, 0x4, 0x9, 0x8, 0xc09, 0x341, 0x8, 0x20, 0x7fffffff, 0x6, 0x5, 0x3, 0x6, 0x1]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r3, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet6(0xa, 0x990d12574619337e, 0x1f) bpf$PROG_LOAD(0x5, 0x0, 0x172) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) signalfd(r0, &(0x7f0000000080)={0x1}, 0xfffffe21) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 19:40:43 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000001600)='/dev/dsp#\x00', 0xfff, 0x800) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000001680)={0x0, @reserved}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000480)='%%cpuset,}md5sumsecurity,vmnet0\x00', 0xffffffffffffffff}, 0x30) r2 = perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x70, 0x6, 0xfffffffffffff9ba, 0x0, 0x7, 0x0, 0x8, 0x10000, 0x4, 0x40, 0x5, 0xf5, 0x3ff, 0x200, 0x5, 0x7, 0x5, 0x800, 0x7ff, 0x5, 0x2, 0x1, 0xc298, 0x7, 0xfffffffffffffff9, 0x4, 0x3, 0x3, 0x100, 0x100, 0x7, 0x9, 0x20a, 0x9, 0x8, 0x5, 0x9, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000500), 0x8}, 0x200, 0x7fffffff, 0x8bbe, 0xb, 0x8, 0x1000, 0x2773}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x4, 0x1, 0x6200de82, 0x7, 0x0, 0x200, 0x40000, 0xa, 0x2, 0x9, 0x1, 0x5ec, 0xfffffffffffffffb, 0x4, 0xca, 0x9a8c, 0x8, 0x8, 0x0, 0x0, 0x3800000000000000, 0x4, 0x8e9e, 0x80000000, 0x40, 0x8001, 0x3, 0x1, 0x1ff, 0x5, 0x5e4e, 0x5, 0x4, 0x7, 0x4, 0xf6, 0x0, 0xce05, 0x5, @perf_bp={&(0x7f00000003c0), 0x9}, 0x80, 0x7, 0x8, 0x7, 0x4, 0x4}, r1, 0x0, r2, 0x8) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = semget(0x3, 0x7, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() r10 = getegid() semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000340)={{0x6, r7, r8, r9, r10, 0x80, 0xeb}, 0x8000, 0x6, 0x6}) r11 = socket$netlink(0x10, 0x3, 0xd) r12 = dup2(r5, r3) getsockopt$IP_VS_SO_GET_DESTS(r12, 0x0, 0x484, &(0x7f00000005c0)=""/4096, &(0x7f0000001640)=0x1000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r12, 0xc0045520, &(0x7f0000000100)=0x1a9) timerfd_gettime(r12, &(0x7f00000015c0)) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190710003fffffffda0602000080ff0f0001040000040d000600000000000000000001", 0x29}], 0x1) 19:40:43 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x10001}, 0x28, 0x2) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000340)) getpid() r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x44000, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000180)) ioctl$FS_IOC_SETVERSION(r0, 0x40084504, &(0x7f0000000040)=0x700000000000000) 19:40:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$security_evm(r0, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000180)=@sha1={0x1, "433d0e442f47a024c14e1d7cca02542c3cb83151"}, 0x15, 0x2) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x1) setsockopt$inet6_int(r0, 0x29, 0xd4, &(0x7f0000001980), 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') pwritev(r0, &(0x7f0000000000), 0x0, 0x0) write$P9_RWALK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8b0000006f02000a00080200000006000000000000000001000000030000000000000002030000000300000000000000800400000005000000000000003803000000010000000000000061030000000800000000d730bc355043aedb9bddf60000002002000000020000000000000000030000000500000000000000040100000000000000000000000001"], 0x8b) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000200)={{0x0, @loopback, 0x4e20, 0x4, 'sed\x00', 0xa, 0x8, 0x35}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x2, 0x0, 0x7}}, 0x44) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000000)) 19:40:43 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@empty, @dev={[], 0x22}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x6]}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:40:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000300)=0x7, 0xfff, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @dev, 0x1, 0x4, [@remote, @dev, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}]}, 0x20) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000500)) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000001080)=[{{&(0x7f0000000680)=@in6={0xa, 0x4e20, 0x0, @remote, 0x234f9a92}, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0), 0x0, 0x4000001}}, {{&(0x7f0000000d00)=@ethernet={0x306, @dev}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000000e80)}, 0x6}], 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00e5ff0000000000"], 0x8) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000001180)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) dup3(r3, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x117, 0x5}}, 0x20) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f00000004c0)={0x0, 0x1000, 0x6}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000480)=r6) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f00000001c0)={0x1, 0x101, 0xfff, 0x7fff, [], [], [], 0xfff, 0xff, 0x8, 0xff, "6ef1b3be6bfa63072ac04574958216b2"}) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x80000) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000100)={@mcast1}, &(0x7f0000000180)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="aabcab1437da64769056edea45acc0161eaaaaaaaaaa0132cdbf445d46a4627091d1db000805003fff01fde0ac6f31bf32db7f2ebc262ae8d0813de6741d"], &(0x7f0000000000)={0x0, 0x0, [0x0, 0x2, 0x3ba]}) 19:40:43 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=""/126, 0xb2}) writev(r1, &(0x7f0000000080), 0x1a6) 19:40:43 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2c0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="420000001dced5121236040000000000000099a5c03e266caf15968317743c842cb4b30885fc9101d027cf1686c25400278efd2759b4b75b2d350b3a50fb1e1a1cc982a13a95"], &(0x7f0000000140)=0x4a) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0xff4, 0xffffffffffffff6d, 0x200, 0x0, 0x20, 0x80000000, 0x3, 0x0, r3}, 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0xffffffffffff0000}, 0xde}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) connect(r4, &(0x7f0000000400)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) 19:40:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x20) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(r2, &(0x7f0000000100), 0x34000) 19:40:43 executing program 3: socketpair(0x12, 0x800, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000240)={@caif=@dbg={0x25, 0x7ff800, 0x5}, {&(0x7f00000000c0)=""/17, 0x11}, &(0x7f0000000200), 0xc}, 0xa0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x2000003e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000080)=[{r1}, {}], 0x2, &(0x7f0000000100), &(0x7f00000001c0), 0x8) 19:40:43 executing program 3: unshare(0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001840)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000004c0)=""/4096) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000480)={0x0, 0x18, 0x14, 0x0, 0x6, 0x0, 0x5, 0x4f}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r5, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1) timer_create(0x2, &(0x7f0000000140)={0x0, 0x29, 0x0, @thr={&(0x7f0000000040)="e5cfdb5a0260fbefc11e3f496e79b7b68f491d7d72dba97571f01b0fdb7b44c65ff98bd5192ca6f347627f99765925d70a6a5d11e8", &(0x7f0000001680)="09652ea4cfb99a7934783fbdbc389420a9ac5c321d3512c1c8806165661769f3e90dbb6ae6da5a383b125f158b7d7ebf58fa7fa7c2bcc9cf40e2aaa07b7e85793ba8fe941dc5226004e5ae346b96e4983f070202502a676f540ddf4d25e20babd7af0237f70b9f41e9d257a915af824a2535a434a44cbb8185a8a3ca05f23b74eb59060ef0fe633d9e49c2a296c9c1d52b28d970e72219deaf73926cca26d129f5134c589744ecee6e9bb1c2a9e99d386a2cdb36f34c424ad41b0e5dd7d3bbaf4eede2"}}, &(0x7f0000000180)) timer_create(0x6, &(0x7f0000000340)={0x0, 0x3}, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000001540)={0x0, 0x14, 0x7, @tid=0xffffffffffffffff}, &(0x7f0000001780)) ioctl$KDENABIO(r0, 0x4b36) timer_create(0x2, &(0x7f0000000280)={0x0, 0x2, 0x6, @tid=r7}, &(0x7f0000001800)=0x0) timer_gettime(r8, &(0x7f00000014c0)) memfd_create(&(0x7f0000001580)='syz\x8fL\x8e\xe3\xfe+=\x9e\x1d\xf9\x7fH\xec`\x92w^\"\x7fMqt\xd3\x1d\x7f\x19\x10\x7f\xe6\xb1\x96\x01\xc0\xa0Z\xf5\xe6\vm\x01o\xf3i\xb5K@\xd7\xfc\x88\xe05\xc7i]\xcf|h\x04\x93\x8d\xc8`&\x81\x19\x06\x99\xae\xf8.\xc1>\xbeB\xde\xf5\x9db\xdfO\x99\xe3iZy-\x9d\x95\x01d:8\x88B\x0f\xd1,W%\x17B\xe2\xe9\xfb\x9b-\x96-\xd2\xf9\r\xed\xd4\r\xa8\xc5\xe5)\x1e\x95=\xb9\x19\xcd\xd4\x87\x98w\x00\x06\xec\x98\xa3\xe4\x1e0\xaf(i\xe5\xb2\x95\x94\xf4\xdf\xb0LK:z\xadY\x83\x81M\x10\x92\xc4\xb6\xa1\x87\'\x9axF\xce\xf1\bw-X0]zNtP\xb3.\xdbV\xcc\xe9~4\xd0O\x94\xba\xb7E\"\x17\xd6T7\xc6u$\x9ax\xea\x8c$\x80w\xf2\xec\x96Q\x00\xe5\xbc\x8aw\xda\xd5\xe6', 0x7) keyctl$get_keyring_id(0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x18\x00\x00\x00\xe3[\xf8\x00\x00\x82\n\xb6\rw\x03\xb8\xab\xda\x81\xab*\x86\x04\xf5\xa0\xc4\\U\x8d\xf55\xd4g\x11\xf2\x8f\xe6\n', 0x0) pwritev(r9, &(0x7f0000000440)=[{&(0x7f0000000400)='\'', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r1) sendfile(r6, r6, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r6, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) setsockopt$inet_mreq(r9, 0x0, 0x24, &(0x7f00000003c0)={@multicast2, @multicast1}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{0x0, 0x80000001}, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]}) 19:40:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00\x9dt\x98\x16>\x99\x03\xae#(^+\x87\xb29\xde\xcdu/\v*\x0e\xbf\xb2\xd0\x197\f\x94S\xc4\xe1\x8a\xc5\x13\x0e\x8b\x05\xc3#\a\x7fQ\x02\xbejV\x90\xf0\xfd\x0e/\x86\xc4\x81\xa4Fh\x9b\x9b\xc0\xd9\xbf*\xa3N\xa4\x1e\x00H\x1f\'gHI:\xdeqc\x1ft\x14a\x0460\xaaC\x88K\xd3\x15*\xd7Q\xe4\x0e\x14\x99\x14.\x91\x01\x9e\xa6\x1b\xd9c\xd4\xba\xce|\x0e\xcf\x1d\xc2\x8c5\xea\xa3\x02\xc0\xa8\xde+\xdacm\xc2i\xb6+%7f\xafT\xc5sB*\xc4\xd4\x83\x1a9\xb4\x90\xf3\xb6Vr\x91n\xeeju\a\xa3\xa2\x84\x80l\x96l1\x14\x02\xb1\xb0\x12_\x8a\x9f\xb5\xbb\x9c\x13\xa1\xdf \xda\xf8\x97/\xd3<7\x16?\xafA\x89\x0eH\xb2p\xd7\xc4\xafa', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x34dc) prctl$PR_SET_FP_MODE(0x2d, 0x2) 19:40:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x1}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000800)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e23, 0x100000001, @empty, 0x8}}}, 0x3a) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='yam0\x00') setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x4e22, 0x0, 0x800000000000000a, 0x0, 0x0, 0x3c}, {0x3fff}, {}, 0x9}, {{@in=@multicast1, 0x0, 0x3c}, 0x2, @in, 0x0, 0x4}}, 0xe8) getresgid(&(0x7f00000004c0)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) setgroups(0x0, &(0x7f0000000700)=[r6, r7, r6, r6, r8, r7, r6, r8]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x114) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r10, 0x112, 0xd, &(0x7f00000000c0)=0x2, 0x2) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r14, r15, &(0x7f0000012000/0x18000)=nil, 0x0, 0x3ca, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000640)=0x5) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bridge\x00', 0xffffffffffffffee) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000840)=0xffffffffffffff80) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000600)={'vcan0\x00', r16}) socket$xdp(0x2c, 0x3, 0x0) msgget$private(0x0, 0x20) [ 258.267358] net_ratelimit: 2 callbacks suppressed [ 258.267378] dccp_ackvec_add_new: Warning: large burst loss (3629886230) 19:40:44 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f00000000c0)=0x0) io_cancel(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000100)="68a73205917f2899c913faf481449eedcbbb1669b95e8333f5c079e759cc1fe3ff1e24d18231e5a411fb892c0eb79dc9f33e3fb734b62f9920acd9799d0277f4c83d6fe7ddee1c21d5a32a2c4c12330dc4222f221ed8b426577b9c6cd2cda40c679860c2fda378e9d692e2f0125dc229fe6eec3466efc7d0be672e368c762838b878e291eb9e4b4c8627b55ead4ce991054a1815ba8948da22f637baa50a77d435bc0db189d3271609f053fea25a242f9effe2ad1ee66a2b2a19334852cfcd89781ce761e4524e73b84ea0ed96f9e5648765981259e0638efbc751589ee237306394a6caf9b857c7d1badc0520dc56e1e7eb", 0xf2, 0x6, 0x0, 0x3, r0}, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)='ip6tnl0\x00') r4 = semget$private(0x0, 0x1, 0x1c0) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000000)=0x4) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000280)={@rand_addr, @empty, 0x0}, &(0x7f00000002c0)=0xc) bind$packet(r2, &(0x7f0000000300)={0x11, 0x19, r5, 0x1, 0x7, 0x6, @remote}, 0x14) 19:40:44 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_generic(0xa, 0x5, 0x84) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10020008}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xeb7, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000080)={0x0, 0x5, 0x8001, 0x0, 0x401, 0x1ff, 0xffffffff, 0xffffffff, 0x5, 0x7, 0x8, 0x5, 0x0, 0x1, 0x7, 0x5, 0x4, 0x3}) userfaultfd(0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00'}) 19:40:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x1, 0x9}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) r2 = eventfd(0x0) unshare(0x400) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) 19:40:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x7f, 0x100000001, 0x8000000001}, 0x2c) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x740000, 0x0, 0x20820000, r1}, 0x2c) [ 259.017221] Ack Vector buffer overflow: dropping old entries at net/dccp/ackvec.c:231/dccp_ackvec_add_new() [ 259.091030] ================================================================== [ 259.098626] BUG: KASAN: use-after-free in ccid2_hc_tx_packet_recv+0x2303/0x2673 [ 259.106079] Read of size 1 at addr ffff8880a89467cd by task syz-executor0/8813 [ 259.113432] [ 259.115102] CPU: 0 PID: 8813 Comm: syz-executor0 Not tainted 5.0.0-rc3+ #43 [ 259.122197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.131548] Call Trace: [ 259.134130] [ 259.136294] dump_stack+0x1db/0x2d0 [ 259.139933] ? dump_stack_print_info.cold+0x20/0x20 [ 259.144957] ? dccp_ackvec_parsed_add+0xab/0x340 [ 259.149719] ? ccid2_hc_tx_packet_recv+0x2303/0x2673 [ 259.154841] print_address_description.cold+0x7c/0x20d [ 259.160121] ? ccid2_hc_tx_packet_recv+0x2303/0x2673 [ 259.165240] ? ccid2_hc_tx_packet_recv+0x2303/0x2673 [ 259.170352] kasan_report.cold+0x1b/0x40 [ 259.174420] ? ccid2_hc_tx_packet_recv+0x2303/0x2673 [ 259.179558] __asan_report_load1_noabort+0x14/0x20 [ 259.184508] ccid2_hc_tx_packet_recv+0x2303/0x2673 [ 259.189449] ? dccp_ackvec_purge_records+0x1f0/0x1f0 [ 259.194567] ? ccid2_hc_tx_rto_expire+0x690/0x690 [ 259.194598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.194631] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 259.194645] ? ccid2_hc_tx_rto_expire+0x690/0x690 [ 259.194664] dccp_deliver_input_to_ccids+0x202/0x280 [ 259.194684] dccp_rcv_established+0x83/0xb0 [ 259.225087] dccp_v6_do_rcv+0x9a9/0xbf0 [ 259.229081] __sk_receive_skb+0x3a9/0xea0 [ 259.233236] ? sk_free+0x50/0x50 [ 259.236604] ? inet6_ehashfn+0x490/0x490 [ 259.240679] ? dccp_invalid_packet+0x65/0x7f0 [ 259.245196] dccp_v6_rcv+0xf6c/0x1cef [ 259.249009] ? dccp_v6_err+0x1790/0x1790 [ 259.253074] ? __lock_is_held+0x41/0x140 [ 259.257154] ip6_protocol_deliver_rcu+0x3aa/0x1940 [ 259.262100] ? ipv6_list_rcv+0x760/0x760 [ 259.266168] ? rcu_read_unlock_special+0x380/0x380 [ 259.271108] ip6_input_finish+0x84/0x170 [ 259.275170] ip6_input+0xf9/0x600 [ 259.278625] ? ip6_input_finish+0x170/0x170 [ 259.282951] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 259.288497] ? ip6_protocol_deliver_rcu+0x1940/0x1940 [ 259.293692] ? lock_downgrade+0x910/0x910 [ 259.297843] ? kasan_check_read+0x11/0x20 [ 259.301997] ? rcu_read_unlock_special+0x380/0x380 [ 259.306933] ip6_rcv_finish+0x177/0x330 [ 259.310911] ipv6_rcv+0x113/0x650 [ 259.314371] ? ip6_rcv_core.isra.0+0x1e10/0x1e10 [ 259.319132] ? ip6_rcv_finish_core.isra.0+0x720/0x720 [ 259.324320] ? find_held_lock+0x35/0x120 [ 259.328390] ? ip6_rcv_core.isra.0+0x1e10/0x1e10 [ 259.333151] __netif_receive_skb_one_core+0x160/0x210 [ 259.338348] ? __netif_receive_skb_core+0x3750/0x3750 [ 259.343541] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 259.348821] ? rcu_softirq_qs+0x20/0x20 [ 259.352803] ? trace_hardirqs_off_caller+0x300/0x300 [ 259.357917] __netif_receive_skb+0x2c/0x1c0 [ 259.362246] process_backlog+0x206/0x750 [ 259.366311] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 259.371418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.376961] net_rx_action+0x76d/0x1930 [ 259.380949] ? napi_complete_done+0x6e0/0x6e0 [ 259.385445] ? clockevents_program_event+0x15f/0x380 [ 259.390562] ? __hrtimer_run_queues+0x40f/0x1050 [ 259.395324] ? print_usage_bug+0xd0/0xd0 [ 259.399390] ? kvm_clock_read+0x18/0x30 [ 259.403371] ? add_lock_to_list.isra.0+0x450/0x450 [ 259.408310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.413876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.419428] ? check_preemption_disabled+0x48/0x290 [ 259.424451] ? __lock_is_held+0xb6/0x140 [ 259.428529] __do_softirq+0x30b/0xb11 [ 259.432332] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.437867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.443419] ? __irqentry_text_end+0x1f96d2/0x1f96d2 [ 259.448532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.453381] ? trace_hardirqs_off+0x310/0x310 [ 259.457880] ? task_prio+0x50/0x50 [ 259.461421] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.466964] ? check_preemption_disabled+0x48/0x290 [ 259.471991] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.476856] ? ip6_finish_output2+0xc76/0x28e0 [ 259.481446] do_softirq_own_stack+0x2a/0x40 [ 259.485771] [ 259.488013] do_softirq.part.0+0x11a/0x170 [ 259.492256] __local_bh_enable_ip+0x211/0x270 [ 259.496756] ip6_finish_output2+0xca9/0x28e0 [ 259.501187] ? ip6_forward_finish+0x580/0x580 [ 259.505686] ? add_lock_to_list.isra.0+0x450/0x450 [ 259.510615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.516154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.521694] ? check_preemption_disabled+0x48/0x290 [ 259.526723] ? __lock_is_held+0xb6/0x140 [ 259.530805] ip6_finish_output+0x577/0xc30 [ 259.535051] ? ip6_finish_output+0x577/0xc30 [ 259.539463] ip6_output+0x23c/0xa00 [ 259.543098] ? ip6_finish_output+0xc30/0xc30 [ 259.547543] ? ip6_fragment+0x3780/0x3780 [ 259.551695] ? __lock_is_held+0xb6/0x140 [ 259.555773] ip6_xmit+0xee1/0x24a0 [ 259.559333] ? ip6_finish_output2+0x28e0/0x28e0 [ 259.564023] ? add_lock_to_list.isra.0+0x450/0x450 [ 259.568959] ? ip6_setup_cork+0x1ae0/0x1ae0 [ 259.573304] inet6_csk_xmit+0x358/0x650 [ 259.577284] ? inet6_csk_update_pmtu+0x190/0x190 [ 259.582049] ? skb_checksum+0xdb/0x130 [ 259.585938] ? __skb_checksum+0x880/0x880 [ 259.590098] ? memset+0x32/0x40 [ 259.593387] ? dccp_v6_send_check+0x2a0/0x3e0 [ 259.597891] dccp_transmit_skb+0x977/0x12c0 [ 259.602225] dccp_send_close+0x206/0x355 [ 259.606289] dccp_close+0x98e/0xe80 [ 259.609914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.615455] ? dccp_recvmsg+0x9b0/0x9b0 [ 259.619432] ? ip_mc_drop_socket+0x20c/0x270 [ 259.623846] inet_release+0x105/0x1f0 [ 259.627656] inet6_release+0x53/0x80 [ 259.631378] __sock_release+0xd3/0x250 [ 259.635271] sock_close+0x1b/0x30 [ 259.638726] __fput+0x3c5/0xb10 [ 259.642009] ? __sock_release+0x250/0x250 [ 259.646174] ? get_max_files+0x20/0x20 [ 259.650069] ? task_work_run+0x1bb/0x2b0 [ 259.654133] ? trace_hardirqs_off_caller+0x300/0x300 [ 259.659240] ? do_raw_spin_trylock+0x270/0x270 [ 259.663823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.669368] ____fput+0x16/0x20 [ 259.672648] task_work_run+0x1f4/0x2b0 [ 259.676536] ? task_work_cancel+0x2c0/0x2c0 [ 259.680859] ? __close_fd+0x25f/0x3d0 [ 259.684665] ? do_syscall_64+0x8c/0x800 [ 259.688646] exit_to_usermode_loop+0x32a/0x3b0 [ 259.693231] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.698595] ? syscall_trace_enter+0x12a0/0x12a0 [ 259.703354] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 259.708129] do_syscall_64+0x696/0x800 [ 259.712047] ? syscall_return_slowpath+0x5f0/0x5f0 [ 259.717082] ? prepare_exit_to_usermode+0x232/0x3b0 [ 259.722101] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.726956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.732144] RIP: 0033:0x411e61 [ 259.735342] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 259.754241] RSP: 002b:0000000000a4fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 259.761948] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411e61 [ 259.769212] RDX: 0000000000000000 RSI: 0000000000744e10 RDI: 0000000000000006 [ 259.776480] RBP: 0000000000000000 R08: 0000000000744e08 R09: 0000000000000000 [ 259.783749] R10: 0000000000a4fcb0 R11: 0000000000000293 R12: 0000000000000000 [ 259.791041] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000000 [ 259.798322] [ 259.799948] Allocated by task 8831: [ 259.803582] save_stack+0x45/0xd0 [ 259.807056] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 259.811980] kasan_kmalloc+0x9/0x10 [ 259.815603] __kmalloc_node_track_caller+0x4e/0x70 [ 259.820532] __kmalloc_reserve.isra.0+0x40/0xe0 [ 259.825210] __alloc_skb+0x12d/0x730 [ 259.828926] dccp_send_ack+0xd6/0x360 [ 259.832724] dccp_rcv_state_process+0x14a9/0x1af6 [ 259.837563] dccp_v6_do_rcv+0x269/0xbf0 [ 259.841534] __release_sock+0x12e/0x3a0 [ 259.845503] release_sock+0xac/0x2b0 [ 259.849215] __inet_stream_connect+0x694/0x11b0 [ 259.853879] inet_stream_connect+0x58/0xa0 [ 259.858112] __sys_connect+0x357/0x490 [ 259.861996] __x64_sys_connect+0x73/0xb0 [ 259.866060] do_syscall_64+0x1a3/0x800 [ 259.869952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.875129] [ 259.876749] Freed by task 9: [ 259.879784] save_stack+0x45/0xd0 [ 259.883234] __kasan_slab_free+0x102/0x150 [ 259.887464] kasan_slab_free+0xe/0x10 [ 259.891259] kfree+0xcf/0x230 [ 259.894367] skb_free_head+0x93/0xb0 [ 259.898082] skb_release_data+0x6ea/0x970 [ 259.902231] skb_release_all+0x4d/0x60 [ 259.906114] __kfree_skb+0x16/0x30 [ 259.909658] dccp_rcv_state_process+0x43a/0x1af6 [ 259.914432] dccp_child_process+0x1d4/0x9e0 [ 259.918757] dccp_v6_rcv+0x87d/0x1cef [ 259.922567] ip6_protocol_deliver_rcu+0x3aa/0x1940 [ 259.927493] ip6_input_finish+0x84/0x170 [ 259.931549] ip6_input+0xf9/0x600 [ 259.934998] ip6_rcv_finish+0x177/0x330 [ 259.938974] ipv6_rcv+0x113/0x650 [ 259.942425] __netif_receive_skb_one_core+0x160/0x210 [ 259.947612] __netif_receive_skb+0x2c/0x1c0 [ 259.951927] process_backlog+0x206/0x750 [ 259.955986] net_rx_action+0x76d/0x1930 [ 259.959960] __do_softirq+0x30b/0xb11 [ 259.963752] [ 259.965387] The buggy address belongs to the object at ffff8880a8946340 [ 259.965387] which belongs to the cache kmalloc-2k of size 2048 [ 259.978047] The buggy address is located 1165 bytes inside of [ 259.978047] 2048-byte region [ffff8880a8946340, ffff8880a8946b40) [ 259.990094] The buggy address belongs to the page: [ 259.995022] page:ffffea0002a25180 count:1 mapcount:0 mapping:ffff88812c3f0c40 index:0x0 compound_mapcount: 0 [ 260.004992] flags: 0x1fffc0000010200(slab|head) [ 260.009664] raw: 01fffc0000010200 ffffea00014bb688 ffffea00027c5588 ffff88812c3f0c40 [ 260.017545] raw: 0000000000000000 ffff8880a8946340 0000000100000003 0000000000000000 [ 260.025418] page dumped because: kasan: bad access detected [ 260.031116] [ 260.032733] Memory state around the buggy address: [ 260.037672] ffff8880a8946680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.045032] ffff8880a8946700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.052391] >ffff8880a8946780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.059740] ^ [ 260.065454] ffff8880a8946800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.072807] ffff8880a8946880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.080158] ================================================================== [ 260.087506] Disabling lock debugging due to kernel taint [ 260.093045] Kernel panic - not syncing: panic_on_warn set ... [ 260.098940] CPU: 0 PID: 8813 Comm: syz-executor0 Tainted: G B 5.0.0-rc3+ #43 [ 260.107419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.116789] Call Trace: [ 260.119369] [ 260.121522] dump_stack+0x1db/0x2d0 [ 260.125150] ? dump_stack_print_info.cold+0x20/0x20 [ 260.130172] panic+0x2cb/0x65c [ 260.133361] ? add_taint.cold+0x16/0x16 [ 260.137331] ? retint_kernel+0x2d/0x2d [ 260.141218] ? trace_hardirqs_on+0xb4/0x310 [ 260.145537] ? ccid2_hc_tx_packet_recv+0x2303/0x2673 [ 260.150643] end_report+0x47/0x4f [ 260.154093] ? ccid2_hc_tx_packet_recv+0x2303/0x2673 [ 260.159193] kasan_report.cold+0xe/0x40 [ 260.163165] ? ccid2_hc_tx_packet_recv+0x2303/0x2673 [ 260.168269] __asan_report_load1_noabort+0x14/0x20 [ 260.173199] ccid2_hc_tx_packet_recv+0x2303/0x2673 [ 260.178129] ? dccp_ackvec_purge_records+0x1f0/0x1f0 [ 260.183231] ? ccid2_hc_tx_rto_expire+0x690/0x690 [ 260.188072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.193609] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 260.199146] ? ccid2_hc_tx_rto_expire+0x690/0x690 [ 260.203993] dccp_deliver_input_to_ccids+0x202/0x280 [ 260.209098] dccp_rcv_established+0x83/0xb0 [ 260.213598] dccp_v6_do_rcv+0x9a9/0xbf0 [ 260.217586] __sk_receive_skb+0x3a9/0xea0 [ 260.221731] ? sk_free+0x50/0x50 [ 260.225106] ? inet6_ehashfn+0x490/0x490 [ 260.229166] ? dccp_invalid_packet+0x65/0x7f0 [ 260.233671] dccp_v6_rcv+0xf6c/0x1cef [ 260.237476] ? dccp_v6_err+0x1790/0x1790 [ 260.241536] ? __lock_is_held+0x41/0x140 [ 260.245606] ip6_protocol_deliver_rcu+0x3aa/0x1940 [ 260.250543] ? ipv6_list_rcv+0x760/0x760 [ 260.254622] ? rcu_read_unlock_special+0x380/0x380 [ 260.259551] ip6_input_finish+0x84/0x170 [ 260.263609] ip6_input+0xf9/0x600 [ 260.267063] ? ip6_input_finish+0x170/0x170 [ 260.271380] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 260.276916] ? ip6_protocol_deliver_rcu+0x1940/0x1940 [ 260.282101] ? lock_downgrade+0x910/0x910 [ 260.286247] ? kasan_check_read+0x11/0x20 [ 260.290393] ? rcu_read_unlock_special+0x380/0x380 [ 260.295321] ip6_rcv_finish+0x177/0x330 [ 260.299296] ipv6_rcv+0x113/0x650 [ 260.302746] ? ip6_rcv_core.isra.0+0x1e10/0x1e10 [ 260.307514] ? ip6_rcv_finish_core.isra.0+0x720/0x720 [ 260.312713] ? find_held_lock+0x35/0x120 [ 260.316798] ? ip6_rcv_core.isra.0+0x1e10/0x1e10 [ 260.321552] __netif_receive_skb_one_core+0x160/0x210 [ 260.326739] ? __netif_receive_skb_core+0x3750/0x3750 [ 260.331937] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 260.337209] ? rcu_softirq_qs+0x20/0x20 [ 260.341183] ? trace_hardirqs_off_caller+0x300/0x300 [ 260.346419] __netif_receive_skb+0x2c/0x1c0 [ 260.350738] process_backlog+0x206/0x750 [ 260.354808] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 260.359909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.365458] net_rx_action+0x76d/0x1930 [ 260.369434] ? napi_complete_done+0x6e0/0x6e0 [ 260.373924] ? clockevents_program_event+0x15f/0x380 [ 260.379045] ? __hrtimer_run_queues+0x40f/0x1050 [ 260.383804] ? print_usage_bug+0xd0/0xd0 [ 260.387865] ? kvm_clock_read+0x18/0x30 [ 260.391840] ? add_lock_to_list.isra.0+0x450/0x450 [ 260.396777] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.402319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.407857] ? check_preemption_disabled+0x48/0x290 [ 260.412878] ? __lock_is_held+0xb6/0x140 [ 260.416944] __do_softirq+0x30b/0xb11 [ 260.420741] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.426278] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.431816] ? __irqentry_text_end+0x1f96d2/0x1f96d2 [ 260.436918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.441758] ? trace_hardirqs_off+0x310/0x310 [ 260.446260] ? task_prio+0x50/0x50 [ 260.449799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.455339] ? check_preemption_disabled+0x48/0x290 [ 260.460356] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.465204] ? ip6_finish_output2+0xc76/0x28e0 [ 260.469792] do_softirq_own_stack+0x2a/0x40 [ 260.474103] [ 260.476383] do_softirq.part.0+0x11a/0x170 [ 260.480615] __local_bh_enable_ip+0x211/0x270 [ 260.485114] ip6_finish_output2+0xca9/0x28e0 [ 260.489527] ? ip6_forward_finish+0x580/0x580 [ 260.494026] ? add_lock_to_list.isra.0+0x450/0x450 [ 260.498956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.504498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.510043] ? check_preemption_disabled+0x48/0x290 [ 260.515071] ? __lock_is_held+0xb6/0x140 [ 260.519139] ip6_finish_output+0x577/0xc30 [ 260.523371] ? ip6_finish_output+0x577/0xc30 [ 260.527788] ip6_output+0x23c/0xa00 [ 260.531417] ? ip6_finish_output+0xc30/0xc30 [ 260.535829] ? ip6_fragment+0x3780/0x3780 [ 260.539970] ? __lock_is_held+0xb6/0x140 [ 260.544038] ip6_xmit+0xee1/0x24a0 [ 260.547583] ? ip6_finish_output2+0x28e0/0x28e0 [ 260.552248] ? add_lock_to_list.isra.0+0x450/0x450 [ 260.557176] ? ip6_setup_cork+0x1ae0/0x1ae0 [ 260.561518] inet6_csk_xmit+0x358/0x650 [ 260.565497] ? inet6_csk_update_pmtu+0x190/0x190 [ 260.570250] ? skb_checksum+0xdb/0x130 [ 260.574137] ? __skb_checksum+0x880/0x880 [ 260.578285] ? memset+0x32/0x40 [ 260.581581] ? dccp_v6_send_check+0x2a0/0x3e0 [ 260.586081] dccp_transmit_skb+0x977/0x12c0 [ 260.590404] dccp_send_close+0x206/0x355 [ 260.594462] dccp_close+0x98e/0xe80 [ 260.598090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.603624] ? dccp_recvmsg+0x9b0/0x9b0 [ 260.607601] ? ip_mc_drop_socket+0x20c/0x270 [ 260.612014] inet_release+0x105/0x1f0 [ 260.615821] inet6_release+0x53/0x80 [ 260.619530] __sock_release+0xd3/0x250 [ 260.623415] sock_close+0x1b/0x30 [ 260.626871] __fput+0x3c5/0xb10 [ 260.630148] ? __sock_release+0x250/0x250 [ 260.634309] ? get_max_files+0x20/0x20 [ 260.638210] ? task_work_run+0x1bb/0x2b0 [ 260.642271] ? trace_hardirqs_off_caller+0x300/0x300 [ 260.647372] ? do_raw_spin_trylock+0x270/0x270 [ 260.651955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.657495] ____fput+0x16/0x20 [ 260.660777] task_work_run+0x1f4/0x2b0 [ 260.664662] ? task_work_cancel+0x2c0/0x2c0 [ 260.668979] ? __close_fd+0x25f/0x3d0 [ 260.672794] ? do_syscall_64+0x8c/0x800 [ 260.676775] exit_to_usermode_loop+0x32a/0x3b0 [ 260.681357] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.686715] ? syscall_trace_enter+0x12a0/0x12a0 [ 260.691471] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 260.696242] do_syscall_64+0x696/0x800 [ 260.700129] ? syscall_return_slowpath+0x5f0/0x5f0 [ 260.705063] ? prepare_exit_to_usermode+0x232/0x3b0 [ 260.710083] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.714929] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.720116] RIP: 0033:0x411e61 [ 260.723321] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 260.742219] RSP: 002b:0000000000a4fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 260.749934] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411e61 [ 260.757196] RDX: 0000000000000000 RSI: 0000000000744e10 RDI: 0000000000000006 [ 260.764461] RBP: 0000000000000000 R08: 0000000000744e08 R09: 0000000000000000 [ 260.771724] R10: 0000000000a4fcb0 R11: 0000000000000293 R12: 0000000000000000 [ 260.778985] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000000 [ 260.787199] Kernel Offset: disabled [ 260.790820] Rebooting in 86400 seconds..