[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 94.064114] audit: type=1800 audit(1549654946.124:25): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 94.083749] audit: type=1800 audit(1549654946.134:26): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 94.103333] audit: type=1800 audit(1549654946.144:27): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. 2019/02/08 19:42:41 fuzzer started 2019/02/08 19:42:47 dialing manager at 10.128.0.26:37929 2019/02/08 19:42:47 syscalls: 1 2019/02/08 19:42:47 code coverage: enabled 2019/02/08 19:42:47 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/08 19:42:47 extra coverage: extra coverage is not supported by the kernel 2019/02/08 19:42:47 setuid sandbox: enabled 2019/02/08 19:42:47 namespace sandbox: enabled 2019/02/08 19:42:47 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/08 19:42:47 fault injection: enabled 2019/02/08 19:42:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/08 19:42:47 net packet injection: enabled 2019/02/08 19:42:47 net device setup: enabled 19:45:34 executing program 0: sigaltstack(&(0x7f0000b0f000/0x4000)=nil, 0x0) r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syzkaller login: [ 283.456717] IPVS: ftp: loaded support on port[0] = 21 [ 283.624291] chnl_net:caif_netlink_parms(): no params data found [ 283.703518] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.710046] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.718844] device bridge_slave_0 entered promiscuous mode [ 283.728767] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.735413] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.743906] device bridge_slave_1 entered promiscuous mode [ 283.781519] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 283.793148] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 283.826040] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 283.834833] team0: Port device team_slave_0 added [ 283.841930] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 283.850679] team0: Port device team_slave_1 added [ 283.857331] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 283.866153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 284.037802] device hsr_slave_0 entered promiscuous mode [ 284.152659] device hsr_slave_1 entered promiscuous mode [ 284.413436] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 284.421213] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 284.453764] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.460358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.467700] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.474303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.570647] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 284.576912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.592707] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 284.607839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.619521] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.629810] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.641753] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 284.660895] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 284.667228] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.681391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 284.688779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.697828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.706945] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.713567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.728511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 284.735924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.745144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.753595] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.760185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.775117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 284.788327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 284.795613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.805076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.821145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 284.830417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.839803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.857640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 284.865038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.873404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.882779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.901579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 284.908662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.917222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.937671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 284.944994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.953541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.969695] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 284.975943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.005615] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 285.026777] 8021q: adding VLAN 0 to HW filter on device batadv0 19:45:37 executing program 0: gettid() perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:45:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 19:45:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 19:45:37 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 285.846119] hrtimer: interrupt took 33686 ns 19:45:38 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 19:45:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xb69, 0x2081) write$UHID_INPUT(r0, &(0x7f0000002300)={0x8, "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", 0x1000}, 0x1006) [ 287.274713] IPVS: ftp: loaded support on port[0] = 21 [ 287.446709] chnl_net:caif_netlink_parms(): no params data found [ 287.564773] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.571318] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.579890] device bridge_slave_0 entered promiscuous mode [ 287.594608] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.601127] bridge0: port 2(bridge_slave_1) entered disabled state 19:45:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x88, 0x1, 0x4}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x7fff, 0x4) add_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="0fc5bc3622af2ad3727d238ade950aa8f850e745e0d73c683bec42144fcae600bd045b39f0e9eedd2d570bb4d6951fac648a84e64e44413eea5fc11797bc6dbb5f628bbd689e592d2bcd9a594e309c1da29f02783828343614af58e4bec34ae5933e52b3d2c76a8ac4638e2403b64c9a074f1e847e38cf42fb72079f252917", 0x7f, 0xfffffffffffffffc) add_key(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)="2919e2f9dd1e3b3f95beb816c62f79309ec54bdc4bd9e3e68d7f", 0x1a, 0x0) r3 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) arch_prctl$ARCH_SET_GS(0x1001, 0xc3) keyctl$get_keyring_id(0x0, r3, 0x400) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000340)=0x1) r4 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x400) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe088}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 287.609677] device bridge_slave_1 entered promiscuous mode [ 287.697420] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 287.711031] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 287.745858] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 287.754762] team0: Port device team_slave_0 added [ 287.761506] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 287.770481] team0: Port device team_slave_1 added [ 287.779757] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 287.788709] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 19:45:39 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x400040, 0x0) r1 = socket$tipc(0x1e, 0x7, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x0, 0x6, 0x1}, &(0x7f0000000100)=0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0xc) [ 287.868538] device hsr_slave_0 entered promiscuous mode [ 287.913621] device hsr_slave_1 entered promiscuous mode [ 287.954622] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 287.962474] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 19:45:40 executing program 0: ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) [ 288.009730] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.016406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.023675] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.030235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.110909] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.134069] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.177577] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 288.184263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.198889] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 288.214118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 19:45:40 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioprio_set$pid(0x3, r0, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x65}) sendfile(r2, r2, 0x0, 0x8001) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9, 0x4, [0x4, 0x2c7f, 0x85a, 0x4]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r4, 0x1}, &(0x7f00000000c0)=0x8) socket$packet(0x11, 0x5c43002bb7a1f675, 0x300) [ 288.225745] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.239515] bridge0: port 2(bridge_slave_1) entered disabled state 19:45:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x10) readv(r2, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) write$FUSE_LK(r3, &(0x7f0000000200)={0x28, 0x0, 0x3, {{0xf368, 0x0, 0x1, r4}}}, 0x28) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000022200ff0a002000000000003169651e4cfb1f54"], 0x14}}, 0x0) [ 288.277562] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 288.314528] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 288.320643] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.368832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.377164] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.383768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.430208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.438582] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.445169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.461452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 288.478349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 288.490967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 288.500749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.509697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.518381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.527881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.536955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.545287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.560936] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 288.570471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.582713] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 288.588821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.612097] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 288.618882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.627278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.635679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.655028] 8021q: adding VLAN 0 to HW filter on device batadv0 19:45:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup2(r0, r0) recvfrom$inet(r1, 0x0, 0x98, 0x100, 0x0, 0xffffffffffffffd3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x16, 0x100000000401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x3, 0x1}}, 0x10) socket$netlink(0x10, 0x3, 0x8) 19:45:41 executing program 1: r0 = socket(0x20000000000000a, 0x2, 0x0) bind$inet6(r0, &(0x7f0000012000)={0xa, 0x0, 0x0, @mcast1, 0x8000000008001}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000040)=""/16, &(0x7f0000000000)=0x10) 19:45:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x980, 0x0) ioctl$int_in(r0, 0x8000008004500f, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x20) 19:45:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x80, 0x600000000000002, [0x40000000], [0xc2]}) [ 289.425934] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 19:45:41 executing program 1: r0 = dup(0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000047c0)=0x2, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)="36f0ff8a112f0000c482d9aac267f365470fbc9f000000008f2a781097000000004e9e96cb8f2920992c0fc4c10bc2fe6ef0440fbab2fb000000d8660fe010c482bdaf7700c4628190a4df26000000", {}, 0x0, &(0x7f0000000480)="c4a2e59e00c4e175edbdc9000000f2460f12d464410f29e37f0cc4e261a8524f1c03650f5ec9460f4b545300676667d9fd"}, 0x8, &(0x7f0000000500)) 19:45:41 executing program 0: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x2000) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x40880040}, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='\xdd\xe1\x9f]d\xca\xf4\xe8idz\xa6\xaf\xc3\x10\xbc\x92C+cZ\xe528\x9eP\xfc\xf6\xe7\x18E\x99c\xb74\x12\xe5\b\x180\xc8\xb5Tt\x9a\xb2\x12\xf1\xaf\b[k\xe8\xe0\x01\x9b\xf0\xc3U\xbd\x01\xbc\x04\xdb\xb3\x80\xe5)\x1b\xa5\xe7\xa8?]\xa5\xc1{\r\x83\t\xd4\xebd\x02\x80\x87\xc4') fcntl$notify(r2, 0x402, 0x21) preadv(r2, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0xf8, [], 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/248}, &(0x7f00000002c0)=0x78) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000380)={0x1, 0x0, {0x1f, 0x400, 0x8001, 0x9}}) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000004c0)=0x2, 0x4) write$P9_RREADDIR(r0, &(0x7f00000003c0)={0xe4, 0x29, 0x2, {0x800, [{{0x8, 0x2, 0x6}, 0x10001, 0x3, 0x7, './file0'}, {{0x83}, 0x7, 0x3, 0x7, './file0'}, {{0x8, 0x3, 0x6}, 0x9, 0x100, 0x7, './file0'}, {{0x1, 0x1, 0x6}, 0x7, 0xe746, 0x7, './file0'}, {{0x22, 0x1, 0x8}, 0x2, 0xffffffff, 0x7, './file0'}, {{0x0, 0x4}, 0x0, 0x7, 0x7, './file0'}, {{0x40, 0x2}, 0x5, 0x7fff, 0x7, './file0'}]}}, 0xe4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 19:45:41 executing program 1: r0 = userfaultfd(0x0) r1 = gettid() sched_getparam(r1, &(0x7f0000000080)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x40000, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) sendfile(r0, r0, 0x0, 0x200) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/32, 0xffffffffffffff7f}, {&(0x7f0000000240)=""/80, 0x50}], 0x2) 19:45:41 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080), 0xfffffffffffffdf1) 19:45:41 executing program 0: eventfd2(0x2, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lseek(r0, 0x0, 0x0) 19:45:42 executing program 0: socketpair$unix(0x1, 0x800000000000008, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') lseek(r1, 0x20400000, 0x0) 19:45:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x34) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xffffffffffff0001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = accept4(r0, &(0x7f0000000080)=@rc, &(0x7f00000004c0)=0x80, 0x0) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="ffba4ac72875c39066b0"], 0x1}}, 0x4008000) sendto$inet6(r1, &(0x7f00000007fa)="97", 0x1, 0x0, &(0x7f00006f9000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 19:45:42 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, &(0x7f0000000100)=@caif, &(0x7f0000000180)=0x80, 0x80800) sendmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) close(r2) ioctl$BLKRRPART(r0, 0x125f, 0x0) 19:45:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 19:45:42 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f00000003c0)=@framed={{0x1018, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map={0x18, 0x0, 0x1, 0x7a, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x21a, &(0x7f00000000c0)=""/144, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x48) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x200) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000002c0)={'security\x00'}, &(0x7f0000000340)=0x54) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x58000, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000200)="43cb43f91c20ce059581955e3aa85231024c1b261101cb41d1efeb897904501c24ca47ab03bb03d82326edbfb8d324f7fcc39568c7db53831130ad211567f88c0aaec46260b73dfa0751ceaaf013e22afdb7faa815c730bb53366200d1157a428479fa8a10f80b446ead418bb58da19c2af7d1b48fc9ecd45c3e132df00742b6b6a4203283dff8b2055014ca9f3bc5bb13a0c0817c29eb7f982e635ccfec75b1e2d87b7eaf1fa630df8d4d11666f8d13", 0xb0) 19:45:42 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x3000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = syz_open_dev$usbmon(&(0x7f0000006200)='/dev/usbmon#\x00', 0x5, 0x18000) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000006240)={0x7ae, 0x2}) recvmmsg(r0, &(0x7f0000006000)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f0000000140)=""/27, 0x1b}], 0x3, &(0x7f00000001c0)=""/28, 0x1c}, 0x9edc}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/24, 0x18}, {&(0x7f0000001240)=""/72, 0x48}, {&(0x7f00000012c0)=""/221, 0xdd}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/245, 0xf5}, {&(0x7f00000024c0)=""/153, 0x99}, {&(0x7f0000002580)=""/236, 0xec}], 0x8, &(0x7f0000002700)=""/50, 0x32}, 0x6}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002740)=""/255, 0xff}, {&(0x7f0000002840)=""/144, 0x90}, {&(0x7f0000002900)=""/155, 0x9b}, {&(0x7f00000029c0)=""/97, 0x61}, {&(0x7f0000002a40)=""/69, 0x45}, {&(0x7f0000002ac0)=""/230, 0xe6}, {&(0x7f0000002bc0)=""/158, 0x9e}, {&(0x7f0000002c80)=""/205, 0xcd}, {&(0x7f0000002d80)=""/6, 0x6}], 0x9, &(0x7f0000002e80)=""/43, 0x2b}, 0x4e2a}, {{&(0x7f0000002ec0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f40)=""/190, 0xbe}, {&(0x7f0000003000)=""/51, 0x33}, {&(0x7f0000003040)=""/106, 0x6a}], 0x3, &(0x7f0000003100)=""/89, 0x59}, 0x9}, {{&(0x7f0000003180)=@caif=@dgm, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003200)=""/234, 0xea}, {&(0x7f0000003300)=""/21, 0x15}, {&(0x7f0000003340)=""/189, 0xbd}, {&(0x7f0000003400)=""/37, 0x25}, {&(0x7f0000003440)=""/189, 0xbd}, {&(0x7f0000003500)=""/157, 0x9d}], 0x6, &(0x7f0000003640)=""/4096, 0x1000}, 0x1c000000}, {{&(0x7f0000004640)=@l2, 0x80, &(0x7f0000004a00)=[{&(0x7f00000046c0)=""/159, 0x9f}, {&(0x7f0000004780)=""/79, 0x4f}, {&(0x7f0000004800)=""/105, 0x69}, {&(0x7f0000004880)=""/65, 0x41}, {&(0x7f0000004900)=""/243, 0xf3}], 0x5, &(0x7f0000004a80)=""/199, 0xc7}, 0x3}, {{&(0x7f0000004b80)=@hci, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004c00)=""/130, 0x82}], 0x1, &(0x7f0000004d00)=""/227, 0xe3}, 0xa}, {{&(0x7f0000004e00)=@l2, 0x80, &(0x7f0000005f80)=[{&(0x7f0000004e80)=""/219, 0xdb}, {&(0x7f0000004f80)=""/4096, 0x1000}], 0x2, &(0x7f0000005fc0)=""/53, 0x35}, 0x2}], 0x8, 0x0, 0x0) shutdown(r0, 0x0) 19:45:42 executing program 1: r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) fchdir(r0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="cc00000000000000bd01000000000000d303000000000000e9"], 0x19) execveat(r0, &(0x7f0000ff7000)='./file0\x00', 0x0, &(0x7f000034bff8)=[&(0x7f0000ff7000)='\x00\x00\x00\x00\x00\x00\x00\x06\b\x04\x00 \x00\xff\xfc\feed;y\x93e\x00_\x1bv'], 0x1000) 19:45:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:43 executing program 1: r0 = socket(0x1e, 0x809, 0x3) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x52) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x2}, 0x7) sendmsg(r0, &(0x7f0000001540)={&(0x7f00004f5000)=@generic={0x10000000001e, "0400000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000080)=0x9) ioctl(r2, 0x6f, &(0x7f00000000c0)="f5a3f7b9c4aad96c29c74a8a28ba0fa8625bc7ecfaa3a13225b944d4d9ab2881deed069d9cde431b2bbd41278461387f047b961bd8915f3f669fb0a4feac76d93c49a22c9379e59828049c88d4cd6b78cf8e0aac65054e2fc7b3d0a86abdfcb66f37cb2781b7c29ad8b9e3") 19:45:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:43 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) sendmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x2, 0x7ff, 0x3, 0x81}, {0x1, 0x7, 0x0, 0x836}, {0x3, 0x5, 0x100, 0x91}]}, 0x10) 19:45:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0xffffffffbfffbfc2, 0x0) 19:45:43 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20}, 0x20}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f00000001c0)=""/164, 0xa4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x82fb, 0x2}) 19:45:44 executing program 1: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @multicast2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0xcfef]}, 0x0) getitimer(0x2, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x186}) 19:45:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = semget(0x3, 0x3, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x4000, 0x0) semop(r1, &(0x7f0000000040)=[{0x2, 0x7, 0x1800}, {0x5, 0x1, 0x1000}, {0x7}, {0x0, 0x8, 0x800}, {0x0, 0x6, 0x1800}], 0x5) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)='t'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, 0x0}) 19:45:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) [ 292.273273] binder: 10932 RLIMIT_NICE not set [ 292.277906] binder: 10932 RLIMIT_NICE not set [ 292.300020] binder: 10932 RLIMIT_NICE not set [ 292.307149] binder_alloc: binder_alloc_mmap_handler: 10926 20001000-20004000 already mapped failed -16 [ 292.319587] binder: BINDER_SET_CONTEXT_MGR already set [ 292.325105] binder: 10926:10932 ioctl 40046207 0 returned -16 [ 292.331606] binder_alloc: 10926: binder_alloc_buf, no vma [ 292.337907] binder: 10926:10929 transaction failed 29189/-3, size 0-0 line 3035 19:45:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = semget(0x3, 0x3, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x4000, 0x0) semop(r1, &(0x7f0000000040)=[{0x2, 0x7, 0x1800}, {0x5, 0x1, 0x1000}, {0x7}, {0x0, 0x8, 0x800}, {0x0, 0x6, 0x1800}], 0x5) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)='t'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, 0x0}) 19:45:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) [ 292.396170] binder: undelivered TRANSACTION_ERROR: 29189 [ 292.599325] binder: 10945 RLIMIT_NICE not set [ 292.604069] binder: 10945 RLIMIT_NICE not set [ 292.610374] binder: 10945 RLIMIT_NICE not set 19:45:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = semget(0x3, 0x3, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x4000, 0x0) semop(r1, &(0x7f0000000040)=[{0x2, 0x7, 0x1800}, {0x5, 0x1, 0x1000}, {0x7}, {0x0, 0x8, 0x800}, {0x0, 0x6, 0x1800}], 0x5) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)='t'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, 0x0}) [ 292.672833] binder: undelivered TRANSACTION_COMPLETE [ 292.832998] binder: 10955 RLIMIT_NICE not set [ 292.837648] binder: 10955 RLIMIT_NICE not set [ 292.846375] binder: 10955 RLIMIT_NICE not set 19:45:44 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x1f, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x8001}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r2, 0xcb, "ece9e1f28679ca987cc92623f07a1c0cf9788b4055ec8e5a7335dde76f41f135ab75e927c871f8af287b752d71f8a16509437329d09963f6c8b731fe14daedf30afe2ed06dab94967c5f77848ccaa88da8d9b5dc90cf41d6dc0a8ddb8c90d591357261cccff1030b923899b39b81cd46d647d687a781bc6b58f056453f96b1ece9d6fac799329fdaa3f530675f8d83af03a43d64bf367d920e58979256bb503e498a634243b960d9d209251ec310de7df199bcb6436ef0ddcf4d259d13b15c9df631007e9a77239aad8d46"}, &(0x7f0000000200)=0xd3) listen(r0, 0x1) setsockopt(r1, 0x2000000000010d, 0x4000800000000b, &(0x7f0000000280)='\a\x00\x00\x00', 0x4) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback}, 0x10) [ 292.906675] binder: undelivered TRANSACTION_COMPLETE 19:45:45 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setfsuid(r1) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x400) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1b0410}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000200)={0xfb4, 0x7}) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x14) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x1}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={r4, 0x5}, 0x8) r5 = msgget$private(0x0, 0x8) msgrcv(r5, &(0x7f0000000440)={0x0, ""/220}, 0xe4, 0x3, 0x800) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000540)={0x5, {{0xa, 0x4e21, 0x2, @ipv4={[], [], @broadcast}, 0x9}}}, 0x88) sendmsg$nl_generic(r2, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x148, 0x10, 0x100, 0x70bd26, 0x25dfdbfb, {0x1f}, [@generic="91a0b4188125c8805ddaccf5a91cdedd5a5e8efc5807fdc2834fcbb4586a3d84e4a06c8c116e393ae1f2e6619d82202a76a7ddb7a49b7893e03f7643b04f3dad3a6f4873863a6f8d90e15410dbd5e9cccb8963082c4837f68503a834fe60cd16e2382a2e9abe8121a95ae77a1e65a3b4635886b3d5756cb2dd0adc09b89599ac95295fdf16b642e5debef466e6e8baecea71e4bf9e4e0ba2503781028664c8b91d3fb1a4c3c8017b985e291bc1d79172462afdbf994724a1945bc80b11d108a280a5682f03f06ef0600af0925feea5cc444ec519b866aa1cb71f12e13194938d6f415aacf3f2d04bd2482eb63eb726fbaeb4ab", @nested={0x40, 0x36, [@generic="a6bae05bd5f483d5607bbf4a3df5d75616e8d482a986ae3980882a3e2c412eeb9e86a03dc922d6610b91bdcbd0c6e4c6139d25665b1b5cdf12488fd5"]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000840)={0x59, "7551c5599d574a8168c2c5fc899ca1b18ad8f5c9186834e5e8db031cd0302bd37ce0985457275634ad3b0299c3d39864993f8dde862ff4de199d17b1fabffa8b3079087ca90ac45465857569f58b196e575fefb8f20419970e"}) ioctl$sock_proto_private(r2, 0x89e1, &(0x7f00000008c0)="8d8b54204f36113bec278e5d56d9802589fdf081b321dba4c8a673112229d98c9d6b556b1ae3f5817e7f5313df91d4186bb2aba4f39d7003d91f768cac121b9038d91272142b17c00e2f991cf985bc15e85fbb5189453763da9afa9363f1991ea22e77c7216d5259bab083c0d101347146f51e626f77d69fbbc8b426b040669dff1f441932aa6a3b3752b95582b3f614f00f8c32de26b9c084582869eb24d9f45cee0e8dd2ea221eb5254e5e6ce2da66f600408730fcc6daeb84b19c336d595414cc3f08f2068e9208481a0fd985b9ed4a3f4251e329571a0f33555c4e") ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000009c0)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e80)={'team0\x00', r6}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000ec0)={0x7, 0xffff}) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000f80)={0xa, &(0x7f0000000f00)=[{0x5, 0x5, 0x101, 0x40}, {0x4, 0x9, 0x10001, 0x3}, {0x3, 0x8, 0xfff, 0x1}, {0x200, 0x55, 0x6, 0x4}, {0x36fd, 0x1000000000000000, 0x7, 0xffffffffffff071b}, {0x4, 0x1, 0x0, 0x80000001}, {0x50, 0x4, 0xffffffffffffff7f, 0x6}, {0xf5, 0x2, 0x6, 0x100}, {0x2, 0x2, 0x5, 0x6}, {0x0, 0x3, 0x0, 0x1}]}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000fc0)={{0xa, 0x4e20, 0x2, @ipv4={[], [], @loopback}, 0x3}, {0xa, 0x4e22, 0x5, @empty, 0x8000}, 0x20, [0x9adc00000000000, 0x7fff, 0x7, 0x200, 0x800, 0x8, 0x400, 0x1f]}, 0x5c) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000001040)=0x2) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000001080), &(0x7f00000010c0)=0x4) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x168, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1e}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x18}}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="ed9f052dfb77bde5f6256f23e99be196"}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000001340)={0x81}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001380)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xd5b9, 0x2, 0xe93, 0x100000001, 0x8}, 0x98) r7 = syz_open_procfs(r0, &(0x7f0000001440)='autogroup\x00') ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f0000001480)={0xa, 0x3, 0x6}) 19:45:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@sndrcv={0x30}, @sndinfo={0x20}], 0x50}, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) 19:45:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:45 executing program 1: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000180)="01", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000c80)="6b7dc1446796796278661bef12c7470de5e31534c501eac106c70791749fc7d220ca1d710495c75570f7b670be558f338a72fe084fe485d7adfb96b382dd3da4e7044b18fd9f32eeb6f6e59521ca3b9a63a60f51cd72cebe5e95d3eb0b71545bf013a91e180045144f28fd0a4b4abd23a4ae5c4438810fd0ba5a096a2fbb2df6789a24767461e45e9dcc4633812a7cf3bc107ba8673af8a5af3fa1370aa88ce25897ba5d58cf82a142d3d52000000000000000d1549f53f72e0882950c212f14", 0xc0, 0xfffffffffffffffd) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha3-384-generic\x00'}}) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) sched_getscheduler(r3) 19:45:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) [ 293.785663] IPVS: ftp: loaded support on port[0] = 21 [ 294.083927] chnl_net:caif_netlink_parms(): no params data found 19:45:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:46 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200800, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r1, 0x800000c0045003, &(0x7f0000000000)=0x10000) write$FUSE_DIRENT(r1, &(0x7f00000013c0)={0x10}, 0x10) close(r1) [ 294.250144] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.256843] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.265426] device bridge_slave_0 entered promiscuous mode [ 294.276746] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.283326] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.304022] device bridge_slave_1 entered promiscuous mode [ 294.394702] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 294.426139] bond0: Enslaving bond_slave_1 as an active interface with an up link 19:45:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) [ 294.460046] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 294.469098] team0: Port device team_slave_0 added [ 294.476587] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 294.485490] team0: Port device team_slave_1 added [ 294.492106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 294.501011] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 294.577290] device hsr_slave_0 entered promiscuous mode [ 294.742738] device hsr_slave_1 entered promiscuous mode [ 294.833701] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 294.846464] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 294.909012] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.915652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.922965] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.929542] bridge0: port 1(bridge_slave_0) entered forwarding state 19:45:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) [ 294.976872] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.991051] bridge0: port 2(bridge_slave_1) entered disabled state 19:45:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) [ 295.190858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.214997] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 295.234978] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 295.241467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.249881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.266790] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 295.273438] 8021q: adding VLAN 0 to HW filter on device team0 19:45:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) [ 295.289610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 295.297942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.307882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.316241] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.322769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.357502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 295.369830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 295.394066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.402903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.411157] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.417723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.426831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.442692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 295.455441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 295.468361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 295.483033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.492583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.501734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.510642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.520397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.546945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 295.561143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 295.594629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.604498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.616334] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 295.632912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.641180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.649676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.658557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.667513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.697782] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 295.715732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.723059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 19:45:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x4) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x4) timerfd_settime(r3, 0x1, &(0x7f0000005000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000ca0000)={0x2001}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000019000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x10) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0xffffffffffffffa7, 0x0, 0xfffffffffffffeea}}], 0x1, 0x4040000) 19:45:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) 19:45:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) close(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(0xffffffffffffffff, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r1) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:48 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x16, 0x3, 0x80000001, 0x190, 0x4, 0xffffffffffffffff, 0x53a8}, 0x2c) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80002) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup3(r1, r0, 0x0) 19:45:48 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x16, 0x3, 0x80000001, 0x190, 0x4, 0xffffffffffffffff, 0x53a8}, 0x2c) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 296.393311] cgroup: fork rejected by pids controller in /syz0 19:45:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x80002) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup3(r1, r0, 0x0) 19:45:48 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x16, 0x3, 0x80000001, 0x190, 0x4, 0xffffffffffffffff, 0x53a8}, 0x2c) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) close(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(0xffffffffffffffff, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r1) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x20ff, 0x77fffb, 0x0, 0x820000, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa0008000]}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:49 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x16, 0x3, 0x80000001, 0x190, 0x4, 0xffffffffffffffff, 0x53a8}, 0x2c) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x20ff, 0x77fffb, 0x0, 0x820000, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa0008000]}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:49 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x20ff, 0x77fffb, 0x0, 0x820000, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa0008000]}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) close(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(0xffffffffffffffff, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r1) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:49 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x20ff, 0x77fffb, 0x0, 0x820000, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xa0008000]}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:49 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:50 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:50 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={0xffffffffffffffff, &(0x7f0000068000)}, 0x10) 19:45:50 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={0xffffffffffffffff, &(0x7f0000068000)}, 0x10) 19:45:50 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:50 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={0xffffffffffffffff, &(0x7f0000068000)}, 0x10) 19:45:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:50 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:50 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:51 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:51 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:51 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:51 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:52 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x0, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:52 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x0, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x0, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:52 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x0, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:52 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x0, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:53 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x0, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:53 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 303.383111] device bridge_slave_1 left promiscuous mode [ 303.389064] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.425307] device bridge_slave_0 left promiscuous mode [ 303.431080] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.737530] device hsr_slave_1 left promiscuous mode [ 303.878427] device hsr_slave_0 left promiscuous mode [ 303.958571] team0 (unregistering): Port device team_slave_1 removed [ 303.974441] team0 (unregistering): Port device team_slave_0 removed [ 303.988011] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 304.040256] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 304.190321] bond0 (unregistering): Released all slaves [ 304.914705] IPVS: ftp: loaded support on port[0] = 21 [ 305.072238] chnl_net:caif_netlink_parms(): no params data found [ 305.202889] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.209423] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.217606] device bridge_slave_0 entered promiscuous mode [ 305.253691] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.260188] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.268408] device bridge_slave_1 entered promiscuous mode [ 305.346854] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 305.366715] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 305.433040] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 305.442017] team0: Port device team_slave_0 added [ 305.463249] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 305.472214] team0: Port device team_slave_1 added [ 305.479668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 305.514449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 305.618251] device hsr_slave_0 entered promiscuous mode [ 305.673891] device hsr_slave_1 entered promiscuous mode [ 305.714496] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 305.722238] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 305.776550] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 305.857432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.871251] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 305.897213] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 305.905985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.913931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.932165] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 305.938265] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.953625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 305.960822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.969706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.978110] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.984666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.995558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.008786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 306.016130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.025057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.033391] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.039880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.053782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 306.068892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 306.077052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.086712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.103011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 306.117628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 306.130489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 306.139520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.148568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.157626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.166572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.175263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.183685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.198243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 306.208234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.219920] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 306.226182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.242260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.250258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.258711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.274249] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 306.291016] 8021q: adding VLAN 0 to HW filter on device batadv0 19:45:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x0, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:58 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:58 executing program 3: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getpeername$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4c0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x5da}, &(0x7f00000001c0)=0x8) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x7, 0x3ff0000, 0xffffffffffffff7f, 0x7, 0x1a, 0xffff, 0x9, 0x166, 0x9, 0x7, 0x9, 0x10001}) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r3, 0x10001, 0x6, [0x8, 0x2, 0x9, 0x0, 0x401, 0x7]}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r3, 0x7fc0000}, 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000380)={0x101, 0x1, 0x1, 0xffffffffffffff9c}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000003c0)={0x30000010}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000400)={0x7, 0x2, 0x4, 0x0, 0xa, 0x3, 0x5, 0x7, 0x9, 0x401}) r5 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key(&(0x7f00000004c0)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540), 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r5, r6) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r6, 0x2, 0xffffffffffff7427}, &(0x7f00000005c0)={'enc=', 'raw', ' hash=', {'crc32-generic\x00'}}, &(0x7f0000000640)="3074cf5f45c9013cd5cf2936205e90e164163532df701f804fdc2e908d5f03654a5841073caca2920ca225fc6f30c4fc8e6f90b0df31f3ca5fbd69e871ee30684c97703698f9bd9072da685a7fef66944553b5e17b4dad68692d83168af17cfb39189b9557acd991bc91fd0c4d31cd1d89a9c405490dc5c8286e", &(0x7f00000006c0)=""/101) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000740)={0xffffffff, 0xfffffffffffffffc}) r7 = syz_open_dev$media(&(0x7f0000000780)='/dev/media#\x00', 0x7f, 0x540) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000007c0)={r3, 0x72, "6584c39fe7b93c104659b9310956cd27cbc2ead2fa71891e7549f8e89886d6169c0b20cdeb8c4e4008ad9b6a8657a9914c6061e6ac0eadad58372b1961e403a46588c0736b8487bec04ab3c708d8e44a541de6a0133087769b651fbd77f9687a7f7371c0877186c2b0b1f3748554dbaa4129"}, &(0x7f0000000840)=0x7a) prctl$PR_MCE_KILL_GET(0x22) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000880)={0x10000, 'syz0\x00'}) ioctl$TIOCNOTTY(r7, 0x5422) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000008c0)={0x800000000, 0x1, 0x2000}, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCGPTPEER(r7, 0x5441, 0x2) ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000900)) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000940)={0x3, 0x0, [{}, {}, {}]}) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000a00)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8001800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 19:45:58 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x0, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x0, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:45:59 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:59 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:45:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 19:45:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:45:59 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 307.819648] IPVS: ftp: loaded support on port[0] = 21 [ 307.882353] IPVS: ftp: loaded support on port[0] = 21 [ 308.191778] chnl_net:caif_netlink_parms(): no params data found [ 308.307466] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.315279] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.323846] device bridge_slave_0 entered promiscuous mode [ 308.333567] chnl_net:caif_netlink_parms(): no params data found [ 308.373600] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.380098] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.388705] device bridge_slave_1 entered promiscuous mode [ 308.451046] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.457694] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.465964] device bridge_slave_0 entered promiscuous mode [ 308.478310] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 308.486112] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.493181] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.501522] device bridge_slave_1 entered promiscuous mode [ 308.511662] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 308.545550] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 308.557452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 308.611646] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 308.620588] team0: Port device team_slave_0 added [ 308.626863] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 308.635621] team0: Port device team_slave_0 added [ 308.641713] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 308.650847] team0: Port device team_slave_1 added [ 308.658575] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 308.675062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 308.685475] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 308.694828] team0: Port device team_slave_1 added [ 308.726925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 308.837424] device hsr_slave_0 entered promiscuous mode [ 308.962596] device hsr_slave_1 entered promiscuous mode [ 309.093242] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 309.100767] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 309.108488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 309.237117] device hsr_slave_0 entered promiscuous mode [ 309.362482] device hsr_slave_1 entered promiscuous mode [ 309.473068] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 309.481097] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 309.527741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 309.542933] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 309.670551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.704852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.718155] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 309.731455] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 309.744169] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 309.750504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.758681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.773389] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 309.779489] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.790145] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 309.798440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.806427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.819067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 309.827881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.836729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.845330] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.851860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.878332] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 309.884554] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.891443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.903218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 309.915975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 309.928078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 309.935985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.944640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.953231] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.959688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.967319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.976517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.985056] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.991532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.999556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.015459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 310.027357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 310.042383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 310.056689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 310.069934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 310.087480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 310.095081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 310.103451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 310.112351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.120926] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.127455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.137123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.146190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.155611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.164535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 310.173931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.183089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.192151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 310.205573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 310.213478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.222401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.231056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.249283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 310.257968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.266342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.282932] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 310.289038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.305822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 310.313442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 310.325715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.345755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 310.353598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.361990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 310.370809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 310.389685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 310.397006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.405819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.421609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 310.431279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.439767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.454481] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 310.460587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.477386] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 310.507976] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 310.529843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.546635] 8021q: adding VLAN 0 to HW filter on device batadv0 19:46:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:03 executing program 4: r0 = socket(0x11, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3, 0x4000000000008840) 19:46:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 19:46:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:03 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000005c0)={0x8, 0x100, 0x10000}, 0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sched_yield() futex(&(0x7f0000000500)=0x2, 0x9, 0x1, &(0x7f0000000300)={r1, r2+30000000}, &(0x7f0000000380)=0x1, 0x2) connect$inet(r0, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x28, &(0x7f0000000800)}, 0x10) getsockopt$netlink(r3, 0x10e, 0x0, &(0x7f0000000740)=""/156, &(0x7f0000000600)=0x9c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r4 = fcntl$dupfd(r0, 0x406, r0) bind$inet(r0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) write$P9_RLCREATE(r4, &(0x7f0000000400)={0xfcca}, 0xffffff25) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000880)={0x0, 0xfb, 0xd3, 0x0, 0x5, "67cd1974c5c4057582abc9604f94b735", "f742c70b7740141c72b0d86754042a4dfc42b5ba7bca3c57f07e8aa6402f1c454ab100730c7682a27ffd2742f4b0d03c012ae76b56cdd04de79dfc257a394f397e7e518b29954cb9451327367f05f4456d1096b811299bc7787cf201495029d4a260b57117342b58f9e09d6dc27d013055dc1c7001e04f51d1f3a27588ec69f3a811cf58ad4f504913d1cae0d2e722f029b1343911427ed4de13e7b3229923f6e09abf4810b42340d46631141a4dbadece4c47d6b6c68d24ec959b938e31"}, 0xd3, 0x0) bind$inet(r0, 0x0, 0xb) write$P9_RSTAT(r4, &(0x7f0000000240)={0x49, 0x7d, 0x0, {0x0, 0x42, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4, 'GPL\x00', 0x0, '', 0x4, 'GPL\x00', 0x7, 'ppp1em1'}}, 0x49) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000480)=@nl=@unspec, 0x80) 19:46:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 19:46:03 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={0xffffffffffffffff, &(0x7f0000068000)}, 0x10) 19:46:03 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x5, @initdev}}}, 0x38) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x0, 0x0, [], {0x0, @bt={0x1, 0x0, 0x1, 0x0, 0x800, 0xfff, 0x4, 0x1bd, 0x9, 0x12c, 0x0, 0x18000000000, 0x908, 0x1, 0x3, 0x20}}}) 19:46:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={0xffffffffffffffff, &(0x7f0000068000)}, 0x10) 19:46:03 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x304, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1781}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0xfffff000}}) 19:46:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0xfffffffffffffe29, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000140)='./file0\x00', 0xad) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180)={0xfffffffffffffff9, 0xb1, 0x7, 0xe309}, 0x8) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x10000, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000200)=ANY=[@ANYBLOB="a364", @ANYRES32=r5, @ANYBLOB="000000000000000050002b004c0001b8ed8343001fc9750000000000000000000000000000000000000000000000000000000000000006be45160a8aec03651207000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="3214070093"], 0x70}}, 0x0) r6 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8001, 0x400080) openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video2\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000001c0), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000280)={0x2, 0x1, 0xd7}) 19:46:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={0xffffffffffffffff, &(0x7f0000068000)}, 0x10) 19:46:04 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:04 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0x6}, 0x0, 0x1, 0x0, {}, 0x0, 0x40}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0xc7) r2 = syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x4000000000000002, 0x40ffff) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000040)) write$P9_RCREATE(r1, &(0x7f00000001c0)={0x18, 0x73, 0x2, {{0x40, 0x2}, 0x8}}, 0x18) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x20000020) 19:46:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x103080) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffffffffffff8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000800)={0x0, 0x100002}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000023000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f01cac4e2a58e1bb303260f019e7a00000080a804000000e00f20d835080000000f22d80f20580f23010f068fc97c81b200000000", 0x35}], 0xaaaabf9, 0xfffffffffffffffc, 0x0, 0x3a9) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006580)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="e1de4097e3", 0x5}], 0x1}], 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x3, @link_local, 'veth1_to_team\x00'}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 312.567816] QAT: Invalid ioctl 19:46:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, 0x0}, 0x10) [ 312.590423] QAT: Invalid ioctl [ 312.642708] QAT: Invalid ioctl [ 312.664592] QAT: Invalid ioctl 19:46:04 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="ca5d14ce558526517be238cf651bc0", 0xf, 0xfffffffffffffff8) keyctl$update(0x2, r1, &(0x7f00000001c0)="5cdbc26aa02c60f5a4a52a07aef8080150ebffc35463291e8d565fc5617d88483223842f6d6e51077751a88e49bc7550c6bd968317040ba90aa5d6df5f1f01ee1501041e778d622f8de800041b117ceabdb84c37c8eb19ca35729d30dc18b79fb9cd91eddca1407089d89106998d89e3b6e3e53a9a0d7a8cdb693cb305a169cbbbecf4ef5f0ce954add30f279ffb85f454398eb69c4f75a5e42a20b951c2c3cf7c05ff3ba29e712f4099f452299f977444c8e01d59951d2849", 0xb9) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0xf74f, 0x400) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000300)={r4, 0x1}) sendfile(r2, r2, &(0x7f0000000040), 0x8) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:46:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) close(0xffffffffffffffff) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r2, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(0xffffffffffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, 0x0}, 0x10) 19:46:05 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) close(0xffffffffffffffff) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r2, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(0xffffffffffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vxcan1\x00', 0x10) r1 = request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)='\xa5\x9e\x7f\xd5\xae\x9e\\^\x82F\xb0\xd0\x910\x00', 0xfffffffffffffffd) r2 = dup(r0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='security%(\x00', r1) sendto(r0, &(0x7f00000001c0)="96", 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) 19:46:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x600201, 0x100) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x1, 0x8002) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) r3 = socket$inet6(0xa, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f00000001c0)=""/206, &(0x7f00000002c0)=0xce) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @local}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0xfec0, @local}], 0x2c) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000300)={0x1, "23cd85b3d26d1c72d09ef19cc0f48fbdd6d4cb5018061272d1f2e9a2a797b1de", 0x0, 0x1}) 19:46:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, 0x0}, 0x10) 19:46:05 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) close(0xffffffffffffffff) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r2, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(0xffffffffffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:05 executing program 3: bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) 19:46:05 executing program 1 (fault-call:1 fault-nth:0): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:46:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x35, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)) fallocate(r0, 0x10, 0x7, 0xb10) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x21) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0xa29e, 0x20, 0x3, 0x8001}, &(0x7f0000000140)=0x18) [ 313.840994] FAULT_INJECTION: forcing a failure. [ 313.840994] name failslab, interval 1, probability 0, space 0, times 1 [ 313.852447] CPU: 0 PID: 12129 Comm: syz-executor.1 Not tainted 5.0.0-rc1+ #9 [ 313.859670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.869055] Call Trace: [ 313.871720] dump_stack+0x173/0x1d0 [ 313.875414] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 313.880654] should_fail+0xa19/0xb20 [ 313.884441] __should_failslab+0x278/0x2a0 [ 313.888735] should_failslab+0x29/0x70 [ 313.892698] __kmalloc_track_caller+0x1ce/0xc70 [ 313.897465] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 313.902724] ? __do_sys_bpf+0x5091/0x11260 [ 313.907044] memdup_user+0x79/0x190 [ 313.910762] __do_sys_bpf+0x5091/0x11260 [ 313.914905] ? secondary_startup_64+0x98/0xb0 [ 313.919503] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 313.924933] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 313.930208] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 313.935475] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 313.941065] ? prepare_exit_to_usermode+0x114/0x420 [ 313.946150] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 313.951469] __se_sys_bpf+0x8e/0xa0 [ 313.955184] __x64_sys_bpf+0x4a/0x70 [ 313.958967] do_syscall_64+0xbc/0xf0 [ 313.962772] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 313.968010] RIP: 0033:0x457e39 [ 313.971253] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:46:06 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) [ 313.990203] RSP: 002b:00007f02365aac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.997979] RAX: ffffffffffffffda RBX: 00007f02365aac90 RCX: 0000000000457e39 [ 314.005323] RDX: 0000000000000010 RSI: 00000000204f1ff0 RDI: 0000000000000003 [ 314.012637] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 314.019961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02365ab6d4 [ 314.027263] R13: 00000000004be0fd R14: 00000000004ce660 R15: 0000000000000004 19:46:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000200)=""/160, 0xa0, 0x8000, 0x1000, 0x20, 0xaa4f, 0x8fae}, 0x120) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x40500) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='ip6gre0\x00') setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@ipv4={[], [], @remote}}, 0x14) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/230) 19:46:06 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40200, 0x0) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000040)=0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x3) 19:46:06 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:06 executing program 1 (fault-call:1 fault-nth:1): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:46:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000180)=0x64, &(0x7f00000001c0)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000000c0)="fddafd69e19bb8dcd1c60ac08e2ed83f827a13fc6033126ebee1be22aa9b49dffb5aaa67b5d276dcc03d0b2eaaa45ffb3207cedeb6b4e4f4468def9bd80000e432e71ce4797ddd26e255dd2b21cebf060043cedbc1ff3bbbe6909a328093a97150f5c9832c2ba147db954f952ac6addc651c597efa37b61875c0cb27a0bb20179bc0bbe72bfcaa6f30185a8637c1859314153f67d02d49243f872096d7eb1383c190", &(0x7f0000000500)="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"}, 0x20) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "1073ec6f7d4e9cd1083180ac773dd089b5afd8cf382b3cd4efe6b8a4e6652891f919da4e4473cfb5e2299b451aeeaa963f3373b3e77354f741a0f4b744c70533", "6e45410d610e2ea7a9ef71fea55b328d0d84f7bcf9e1c27c0f30cca408c37b3f13bfc4c038f43d1cbad7050be54263bca1164eda7ed6431d8be5a72030899f92", "c87e5c0168c4ad7ba5a4d725b89c09767070249bbc848cf24c5c6f674450172e"}) 19:46:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000b40)='/dev/input/mouse#\x00', 0x9c, 0x41) connect$bt_rfcomm(r2, &(0x7f0000000b80)={0x1f, {0x2008000, 0x1, 0x100000000, 0x3, 0x0, 0x27a214dc}, 0x1}, 0xa) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0xa91, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001100], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000001100000000000000000076657468315f746f5f626f6e6400000069705f76746930000000000000000000726f736530000000000000000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000000000000000000000000000000080900000809000040090000616d6f6e6700000000000000000000000000000000000000000000000000000038080000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6c2d930a498a62f161df6eac43be2fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f724c6b9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000ac1414bb000000006d616300000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000003000000000000000000626f6e645f736c6176655f300000000000000000000000000000000000000000726f736530000200000000000000000069706464703000000000000000000000e915b0505f73000000000000aaaaaaaaaaaa00000000000000007000000070000000a00000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000d85e91fd2cd8f960000000000000000000000000000002000000feffffff0000000000000000000000000000000000000000003e3943a5690c169300000000000000000000ab02000000ffffffff0000000058b7f9b2013ef11a7090fa618ae0f00d23"]}, 0xb09) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000bc0)={0x80000001, 0x9, 0x8000, 0xffffffffffff0001, 0x0, 0x100000001, 0x4, 0x101, 0x0}, &(0x7f0000000c00)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000c40)={r3, 0xac, "1e82c545f8febe29420f58f7815f79568865c647237807d8efa6a736017d9da5af1e3007c3ac9570f5e086857f1e4f6232441926e088cb119766002b61cbf1a4440e3046c4f8f3b65416f8e4106b353fef9615ce1452e5b880dbaa11084469663d031ead9752eafd0de4392b2cba323672981e7d6b4f91b417958b8efb9bc63afbb86ad2b2e1c4a0ea7745842f7be51dc36420e1d747f1faa6ad2e78bb25a9e6f830a14949fe69ce5239c3c6"}, &(0x7f0000000d00)=0xb4) 19:46:06 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 314.762370] loop_reread_partitions: partition scan of loop0 (sìo}NœÑ1€¬w=Љµ¯ØÏ8+<Ôï渤æe(‘ùÚNDsϵâ)›E?3s³çsT÷A ô·DÇ) failed (rc=-13) 19:46:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0x139) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000340)={0x0, 0x0, {0x2, 0x5, 0x5, 0x6ff}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/154, &(0x7f00000001c0)=0x9a) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) syz_open_dev$sg(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 19:46:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)}, 0x51) 19:46:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e652e0f29f0260f0f2390f20f219a66b9ac0a00000f323ef20f1a5b00ba4100edfe47070f210866b8000000000f23c80f21f866350800f0000f23f8f3a5", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000009c25a2ef857df67519d9f95111af000000000000000000000000000000000000000000000000000000"]) pipe(&(0x7f0000000180)) write(r0, &(0x7f0000000300)="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", 0x7c16d07f58083906) [ 315.006898] __loop_clr_fd: partition scan of loop0 failed (rc=-22) 19:46:07 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="94"], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x1013, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000000005008, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x0) 19:46:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 19:46:07 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)=""/62) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f00000003c0)="9491b7b68da507ba45e88ced13e5509939387d5acbfbc34996c77480bfeb0d8893cdd74a74f5617645289d3e92356cf405d213c49b8368b1786e21c6e613112c0252e393902c9d508319006fe78f1fcb7bff4cd038525fa368ff") 19:46:07 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x311001, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x7, 0x2, 0x1, 0x1, 0x40040000}, 0xffffffffffffffc2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80002, 0x0) fdatasync(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r1, &(0x7f0000068000)}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @rand_addr=0x8}}, 0x8e6, 0x2, 0x6, 0xfffffffffffffffd, 0x1}, 0x98) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x10000, 0x0) 19:46:07 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r1, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:08 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x8000) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x401, 0x0, 0x0, [], 0x0}) 19:46:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xb) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) mq_notify(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x10, 0x4, @thr={&(0x7f0000000100)="384a9d03de10a2073b9ebb5f666a2da918273f2f46982467136641bbf4ab6ff15abf293986cad7faa4314d14dd80d66ff73bd222b84dbbdc19420543bda570b2d3e7165d6eab43fdf69109eaa7e39a8d2505ca5930948681b27f58f5ec51541591a8f7ce8c8558b135676aa634d04be6308bb55e537cb11603aa9ac988bf083415a0b8597101f006da19150ac78a0ab7ee008b0549cb6baad7636928a1a4548c3e57f5b38e36223f241e8dc50d43c0b514ef6589af9d6e6d375df4fa07fd212c7408f2f9901a87201db234d680247a6d6cfbb1ccbca04e235bdf888fb6cf570017e01149fbb14848143363f248c13dcaf9df03d8", 0x0}}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 19:46:08 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = dup(r0) read$eventfd(r0, &(0x7f00000000c0), 0x8) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="5ccb1ab8f95bb83794", 0x9}], 0x1) dup3(r0, r0, 0x80000) 19:46:08 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r1, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0xffffffffffffffc0) 19:46:08 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000280)={'erspan0\x00', @ifru_mtu=0x1}) r2 = syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x8, 0x101000) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000300)={0x57, 0x88f, 0xffffffff, {0xfd97, 0x4c0}, {0xff, 0x4}, @ramp={0x6, 0x95, {0x5, 0x100000000, 0xcc09, 0x9}}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000340)="c18971064f1cf49e5e2519216e7493edb7fba867969a47d7cd354bbc91f18bb1d48a2d6ae145665624405a7e54f7fd648789b51557fdc487ade23129998818899fbcd7418ed1742c32d7d015851d7e212970f0c06b5590cc71e3231b8403e4c13c85e2248ddf2a619d4f3ffccacf241250a6") prctl$PR_GET_FP_MODE(0x2e) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000480)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x7ff, @ipv4={[], [], @remote}, 0x10000}, r3}}, 0x30) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000540)=0x5) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000580)={0x6, 0x0, 0x2, 0xf}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000005c0)={0x7f, r4, 0x10003, 0x59}) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000600)) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000680)={0x2, 0x2, 0x0, 0x200}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000006c0)={0x4, 0x8, 0xfa00, {r3, 0x401}}, 0x10) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000700)=0x8ff, &(0x7f0000000740)=0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000780)={0x0, @aes256, 0x1, "ab09ee6ad4263083"}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000007c0)={0x0, r0}) modify_ldt$write(0x1, &(0x7f0000000800)={0x9, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x4, 0x1, 0xfffffffffffff001, 0x8000, 0x3ff}, 0x10) statx(r0, &(0x7f0000000840)='./file0\x00', 0x1000, 0x800, &(0x7f0000000880)) ioctl$void(r2, 0x408db798121b0b08) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r5, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x850) sendfile(r2, r0, &(0x7f0000000ac0)=0x20, 0x1) 19:46:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000068000)}, 0xfffffe13) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x280000, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:46:08 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r1, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:08 executing program 3: r0 = gettid() perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x103, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) tkill(r0, 0x1000000000014) 19:46:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x10000000020, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:46:09 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x401, 0x14040) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:46:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:09 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) 19:46:09 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 317.592895] IPVS: ftp: loaded support on port[0] = 21 [ 317.660041] ptrace attach of "/root/syz-executor.4"[12293] was attempted by "/root/syz-executor.4"[12294] [ 317.932393] chnl_net:caif_netlink_parms(): no params data found [ 318.014102] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.020680] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.029187] device bridge_slave_0 entered promiscuous mode [ 318.037193] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.043809] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.051546] device bridge_slave_1 entered promiscuous mode [ 318.078252] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 318.088936] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 318.112696] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 318.120758] team0: Port device team_slave_0 added [ 318.127056] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 318.135872] team0: Port device team_slave_1 added [ 318.141670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 318.150023] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 318.215539] device hsr_slave_0 entered promiscuous mode [ 318.253592] device hsr_slave_1 entered promiscuous mode [ 318.293630] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 318.300964] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 318.322002] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.328723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.335945] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.342576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.402198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.413233] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 318.425721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.433937] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.441166] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.456912] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 318.463177] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.474675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.483040] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.489510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.506064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.514122] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.520565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.536275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 318.547336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 318.554794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.564182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.580521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 318.589453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.598750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.608514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.619386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 318.627046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.635579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.649925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 318.657149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.665302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.680408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 318.687689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.696164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.709547] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 318.715774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.736768] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 318.751275] 8021q: adding VLAN 0 to HW filter on device batadv0 19:46:10 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:10 executing program 5: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) setresuid(0x0, r3, 0x0) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) 19:46:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000010c0)={r0, &(0x7f0000000040)="b6cd03c58f3d5a48e263af26902ce1d6c12e1621f187febf00fd00a9bef04e29e00e6a16c3ffecbb0f66b0eafc4d8aa0eae8a0cadd5a7808924d1792314d2d11ae68f974", &(0x7f00000000c0)=""/4096}, 0x18) 19:46:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400218) sendmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000015c0)="fc", 0x1}], 0x1}, 0x1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 19:46:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) msgget$private(0x0, 0x1) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) getgroups(0x4, &(0x7f0000000140)=[0x0, 0x0, 0xffffffffffffffff, 0xee00]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in=@initdev}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) getgid() r1 = socket(0xa, 0x1, 0x0) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, &(0x7f00000003c0)) setresuid(0x0, r4, 0x0) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) 19:46:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 19:46:12 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1263, 0x0) 19:46:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000380)="585ccb83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2572829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c0100000000000000c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725392a368f4d95b827e096900ba47ae05e3c223b24497ff15cf7bb7353a436ef3e363e802a5a7c369080cabc1749d7b7f767c0c4a338b158950de66b00f483ee3501983407", 0x101, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r2, r1, r1}, &(0x7f00000009c0)=""/240, 0x412, 0x0) 19:46:12 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x1000000000000c, 0x1f, 0x2, 0x4, r0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r1, &(0x7f0000000000)="6322960f1822ea0000000000000000000000000000"}, 0x10) 19:46:12 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:12 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) socketpair$unix(0x1, 0x80000000000002, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) ioctl$PPPIOCSFLAGS(r0, 0x4008744b, 0x0) 19:46:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) close(0xffffffffffffffff) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r3, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r2) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket(0xa, 0x1, 0x0) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, &(0x7f00000003c0)) setresuid(0x0, r4, 0x0) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) 19:46:12 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000180)={0x3, 0x401}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x1, 0x1f, 0x1, 0x0, r2}, 0x2c) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f00000003c0)={'bond0\x00', 0x9}) close(r3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x8001}, &(0x7f0000000200)=0x8) fanotify_mark(r0, 0x40, 0x20, r1, &(0x7f0000000440)='./file0\x00') getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xfffffffffffffff9, 0x9, 0x80}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x800000003, 0x2, 0xffff, 0x7, 0x200, {r5, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0x6, 0x80000001, 0xf868, 0x32}}, &(0x7f0000000480)=0xb0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000080)=0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f00000000c0)}, 0x10) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000400)=0x10000) 19:46:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket(0xa, 0x1, 0x0) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) 19:46:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000300}) 19:46:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) close(0xffffffffffffffff) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r2, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r1) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:13 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000000040)="803b1d9106e17e2a4703329f1b2fefd68150665a0d798c0f110daad2eae50e438580b5aee4de65a5ad821ae21414cebefc2921e23cb178119ba6469196bbcebb5307523c24c2ec4f8a47d7624de00a917fd5e31b28"}, 0x10) 19:46:13 executing program 5: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:46:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) uname(&(0x7f0000000040)=""/16) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40085203, &(0x7f0000000080)) 19:46:13 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xe, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000200)={0xb0, 0x0, 0x7, [{0x0, 0x2, 0x6, 0x0, 'vmnet0'}, {0x0, 0x0, 0xf, 0x27c, ']-@systemmd5sum'}, {0x0, 0xffffffff, 0x12, 0x7, '-em1vmnet1vboxnet1'}, {0x5, 0x80, 0x9, 0x7, 'bdev^user'}]}, 0xb0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 19:46:13 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) close(0xffffffffffffffff) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r2, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r1) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:13 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x80000000000009) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000001}) 19:46:13 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x10000000000008, 0x1f, 0x2, 0x0, 0x1}, 0x2c) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000000100)="5050e8c64966ec04d4823ea582ced1b1e1a667d9e3c0937134b73665502dd1d92e2a92ed09000000000000004ce1424b07e935e805a031ed9964f791a1a05cf941b8b6061cdf874143200600000000000000623275da23aadfbc5f03f625ef7b9db4dea225573662f6c73512a4941dc4d43f1a26a7cc48f9"}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x78, &(0x7f0000000080)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @loopback}, 0x5}, @in6={0xa, 0x4e24, 0x1, @remote, 0x36131a9}, @in={0x2, 0x4e23, @remote}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r2, 0x2}, 0x8) 19:46:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)='4', 0x1, r1}, 0x68) [ 321.989551] QAT: Invalid ioctl 19:46:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @local}], 0x10) [ 322.056176] QAT: Invalid ioctl 19:46:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000000140)="5f6dce299992eb96b0cbca89549f436418326d84616d319e37f86b64d1f85cc135396ea0a0792f3363f9d25b838d4ef7625e09779e38aec2c23619ae4c28904ecd29e8b39e05"}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x400) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x7, 0x1, [0x6]}, &(0x7f00000000c0)=0xa) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x7}, &(0x7f00000001c0)=0x8) 19:46:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x220001, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000240)=0xc1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) pipe2(&(0x7f00000002c0), 0x0) [ 322.529376] binder: 12526:12527 ERROR: BC_REGISTER_LOOPER called without request [ 322.565040] binder_alloc: binder_alloc_mmap_handler: 12526 20001000-20004000 already mapped failed -16 [ 322.617621] binder: BINDER_SET_CONTEXT_MGR already set [ 322.623187] binder: 12526:12532 ioctl 40046207 0 returned -16 [ 322.640957] binder: 12526:12527 ERROR: BC_REGISTER_LOOPER called without request 19:46:14 executing program 5: r0 = syz_open_procfs(0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000280)=ANY=[]) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) stat(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132441) syz_execute_func(&(0x7f00000001c0)="3666440f50f564ff0941c3c4e2c99758420fc5fc14c441db5ed83e0f1110c442019dccd3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x2}, 0x20) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x0, 0x7, 0x70bd26}, 0x14}}, 0x0) creat(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) 19:46:14 executing program 4: syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/11, 0x10158) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) open$dir(&(0x7f0000000100)='./file0\x00', 0x841, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, 0x0) 19:46:14 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) close(0xffffffffffffffff) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r2, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r1) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x60000000000, 0x10002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)="658ba027e8781d3bce1904f3b47ed3ff4f0ee76d0f9f246e8530cdf5a0d9d68a2561e33c9c09e0da6c075c46829fe44f3465641ff84b7ef280000f68cbe822c43a4145d10bbeece30d0cdba493eed5e2135a27838b7d15bbe1a110136299570ab8eb272cf8402487bcb1"}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r1, &(0x7f0000068000)}, 0x10) 19:46:14 executing program 3: syz_execute_func(&(0x7f0000000080)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fa6e33e0f111040d91ad3196f") clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 19:46:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xa, 0x0, 0x0) r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 19:46:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x105) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000080)={0x2, @capture={0x1000, 0x1, {0x0, 0xc196}, 0x100, 0x516}}) 19:46:15 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:15 executing program 3: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) write(r0, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 19:46:15 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) close(0xffffffffffffffff) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r1, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r0) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 19:46:15 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:15 executing program 5: r0 = timerfd_create(0x3, 0x2000000) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000340)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$sock_ifreq(r1, 0x899f, &(0x7f00000002c0)={'nr0\x00', @ifru_names='bond_slave_0\x00'}) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) r2 = creat(&(0x7f0000000500)='./file0\x00', 0x100) uname(&(0x7f0000000cc0)=""/66) write$smack_current(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000d80)={0x0, 0x70, 0x3, 0x500, 0x0, 0x3, 0x0, 0x9, 0x8, 0xc, 0x81, 0x1, 0x0, 0x6e, 0x3, 0x2b, 0xc44c, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x2f8, 0x100, 0xfffffffffffffe00, 0x7, 0x0, 0x0, 0xffffffffffffffe1, 0x0, @perf_bp={0x0, 0xa}, 0x44, 0x10001, 0x7, 0xf, 0x2}, 0xffffffffffffffff, 0x0, r2, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x24004800) finit_module(0xffffffffffffffff, &(0x7f0000000240)='/dev/urandom\x00', 0x1) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, 0x0, &(0x7f0000000300)) write$uinput_user_dev(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0xa, 0x0, 0x80000001, 0x5d0b, 0x0, r3, 0x1}, 0x2c) sendto$packet(r4, &(0x7f0000000a80), 0x0, 0x4000, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x6c00) 19:46:15 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={0xffffffffffffffff, &(0x7f0000068000)}, 0x10) 19:46:15 executing program 4: socket$packet(0x11, 0x400000000000003, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x0, 0x300) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f00000001c0)}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x50) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000003c0)=""/83) creat(&(0x7f0000000700)='./bus\x00', 0x4000000000) fcntl$notify(r0, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) 19:46:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) close(r0) r1 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r2 = request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='&[/eth0%\x00', 0xffffffffffffffff) keyctl$link(0x8, r1, r2) 19:46:15 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:16 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 19:46:16 executing program 3: r0 = timerfd_create(0x0, 0x2000000) timerfd_settime(r0, 0x3, 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$sock_ifreq(r1, 0x899f, &(0x7f00000002c0)={'nr0\x00', @ifru_names='bond_slave_0\x00'}) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) r2 = creat(0x0, 0x100) uname(&(0x7f0000000cc0)=""/66) write$smack_current(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000d80)={0x7, 0x70, 0x3, 0x500, 0x0, 0x3, 0x0, 0x9, 0x8, 0xc, 0x81, 0x1, 0x0, 0x6e, 0x3, 0x2b, 0xc44c, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x4, 0x6, 0x0, 0x8, 0x0, 0x4, 0x9, 0x65bc, 0x8, 0x4, 0x2f8, 0x100, 0xfffffffffffffe00, 0x7, 0x7a, 0x0, 0xffffffffffffffe1, 0x0, @perf_bp={0x0, 0xa}, 0x44, 0x10001, 0x7, 0xf, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') keyctl$join(0x1, &(0x7f0000000000)) write$uinput_user_dev(r3, 0x0, 0x0) 19:46:16 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) close(0xffffffffffffffff) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r1, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r0) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) r2 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) 19:46:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0x0, 0x0, 0x0) 19:46:16 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:16 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:46:16 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r1, &(0x7f0000068000)}, 0x10) 19:46:16 executing program 4: socket$packet(0x11, 0x400000000000003, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x0, 0x300) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x8000, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f00000001c0)}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x50) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000003c0)=""/83) creat(&(0x7f0000000700)='./bus\x00', 0x4000000000) fcntl$notify(r0, 0x402, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) 19:46:17 executing program 2: r0 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x40, 0x2000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') pread64(r0, 0x0, 0x0, 0x0) 19:46:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x8, {{0xa, 0x4e21, 0x80, @ipv4={[], [], @loopback}}}, 0x1, 0x1, [{{0xa, 0x4e22, 0xf7, @rand_addr="225c22e92ac7d8cf0dc56d6c03b1851d", 0x3}}]}, 0x110) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x101000) [ 325.222691] protocol 88fb is buggy, dev hsr_slave_0 [ 325.228378] protocol 88fb is buggy, dev hsr_slave_1 19:46:17 executing program 2: bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r1, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:17 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff56, 0x2) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in6=@remote}}}, &(0x7f0000000340)=0xe8) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)=0x1f) creat(&(0x7f0000000500)='./file0\x00', 0x100) uname(&(0x7f0000000cc0)=""/66) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 326.823294] device bridge_slave_1 left promiscuous mode [ 326.829057] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.884337] device bridge_slave_0 left promiscuous mode [ 326.889988] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.035344] device hsr_slave_1 left promiscuous mode [ 327.076307] device hsr_slave_0 left promiscuous mode [ 327.116711] team0 (unregistering): Port device team_slave_1 removed [ 327.129649] team0 (unregistering): Port device team_slave_0 removed [ 327.140538] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 327.197178] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 327.279235] bond0 (unregistering): Released all slaves [ 328.029702] IPVS: ftp: loaded support on port[0] = 21 [ 328.185219] chnl_net:caif_netlink_parms(): no params data found [ 328.250009] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.256505] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.265071] device bridge_slave_0 entered promiscuous mode [ 328.273316] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.279768] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.287784] device bridge_slave_1 entered promiscuous mode [ 328.314324] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 328.326265] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 328.357302] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 328.366177] team0: Port device team_slave_0 added [ 328.375907] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 328.384763] team0: Port device team_slave_1 added [ 328.396762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 328.405459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 328.485840] device hsr_slave_0 entered promiscuous mode [ 328.542709] device hsr_slave_1 entered promiscuous mode [ 328.583448] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 328.591069] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 328.620728] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 328.692732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.704595] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 328.715716] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 328.725042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.732937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.747324] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 328.753548] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.765171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 328.772921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.781567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.789888] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.796338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.806495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.817899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 328.826489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.835326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.843804] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.850304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.862066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 328.873807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 328.880771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.890197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.904801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 328.911745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.920999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.929877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.942967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 328.949908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.958954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.976842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.991602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.003766] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 329.009945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.020259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.043189] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 329.060451] 8021q: adding VLAN 0 to HW filter on device batadv0 19:46:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00\x82\x0f|@\v\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'ix6_\x81ti0\x00', 0x400}) dup3(r0, r1, 0x0) 19:46:21 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x3}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) 19:46:21 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) close(0xffffffffffffffff) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0), 0x1000) read(r1, &(0x7f0000000300)=""/184, 0xb8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1Tto_bond\x00', 0x2}) close(r0) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) 19:46:21 executing program 1: getpriority(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) 19:46:21 executing program 2: bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x2408}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r1, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 19:46:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001e0001000000000008000000", @ANYRES32=0x0], 0x2}}, 0x0) 19:46:21 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="c10900000000000000021fe4ac141417e0", 0x11}], 0x1}, 0x0) [ 329.452677] protocol 88fb is buggy, dev hsr_slave_0 [ 329.458345] protocol 88fb is buggy, dev hsr_slave_1 [ 329.472660] protocol 88fb is buggy, dev hsr_slave_0 [ 329.478237] protocol 88fb is buggy, dev hsr_slave_1 19:46:21 executing program 2: bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x1, 0x380c}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair(0x0, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x80000) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) mknodat(r1, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) [ 329.542845] protocol 88fb is buggy, dev hsr_slave_0 [ 329.548622] protocol 88fb is buggy, dev hsr_slave_1 19:46:21 executing program 1: lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1000000000000c, 0x1f, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10) [ 329.613850] protocol 88fb is buggy, dev hsr_slave_0 [ 329.619538] protocol 88fb is buggy, dev hsr_slave_1 [ 329.718075] ================================================================== [ 329.725515] BUG: KMSAN: uninit-value in nf_nat_setup_info+0x700/0x3b00 [ 329.732202] CPU: 0 PID: 12919 Comm: syz-executor.3 Not tainted 5.0.0-rc1+ #9 [ 329.739413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.748801] Call Trace: [ 329.751431] dump_stack+0x173/0x1d0 [ 329.755093] kmsan_report+0x12e/0x2a0 [ 329.758927] __msan_warning+0x82/0xf0 [ 329.762766] nf_nat_setup_info+0x700/0x3b00 [ 329.767180] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.772429] nf_nat_inet_fn+0x106c/0x11f0 [ 329.776636] ? cpu_partial_store+0x60/0x270 [ 329.780994] nf_nat_ipv4_local_fn+0x2bf/0x870 [ 329.785536] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.790765] ? nf_nat_ipv4_out+0x790/0x790 [ 329.795027] nf_hook_slow+0x176/0x3d0 [ 329.798884] __ip_local_out+0x6dc/0x800 [ 329.802904] ? __ip_local_out+0x800/0x800 [ 329.807083] ip_local_out+0xa4/0x1d0 [ 329.810874] iptunnel_xmit+0x8a7/0xde0 [ 329.814849] ip_tunnel_xmit+0x35b9/0x3980 [ 329.819085] ipgre_xmit+0x1098/0x11c0 [ 329.822933] ? ipgre_close+0x230/0x230 [ 329.826879] dev_hard_start_xmit+0x604/0xc40 [ 329.831352] __dev_queue_xmit+0x2e48/0x3b80 [ 329.835763] dev_queue_xmit+0x4b/0x60 [ 329.839586] ? __netdev_pick_tx+0x1260/0x1260 [ 329.844111] packet_sendmsg+0x79bb/0x9760 [ 329.848300] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 329.853785] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.859014] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 329.864493] ___sys_sendmsg+0xdb9/0x11b0 [ 329.868593] ? compat_packet_setsockopt+0x360/0x360 [ 329.873648] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.878858] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 329.884240] ? __fget_light+0x6e1/0x750 [ 329.888259] __se_sys_sendmsg+0x305/0x460 [ 329.892466] __x64_sys_sendmsg+0x4a/0x70 [ 329.896544] do_syscall_64+0xbc/0xf0 [ 329.900284] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 329.905484] RIP: 0033:0x457e39 [ 329.908687] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.927603] RSP: 002b:00007f8f521cac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.935321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39 [ 329.942597] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 329.949875] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 329.957154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f521cb6d4 [ 329.964437] R13: 00000000004c53f6 R14: 00000000004d91c0 R15: 00000000ffffffff [ 329.971732] [ 329.973362] Uninit was created at: [ 329.976909] No stack [ 329.979233] ================================================================== [ 329.986592] Disabling lock debugging due to kernel taint [ 329.992046] Kernel panic - not syncing: panic_on_warn set ... [ 329.997943] CPU: 0 PID: 12919 Comm: syz-executor.3 Tainted: G B 5.0.0-rc1+ #9 [ 330.006519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.015877] Call Trace: [ 330.018491] dump_stack+0x173/0x1d0 [ 330.022143] panic+0x3d1/0xb01 [ 330.025409] kmsan_report+0x293/0x2a0 [ 330.029239] __msan_warning+0x82/0xf0 [ 330.033068] nf_nat_setup_info+0x700/0x3b00 [ 330.037472] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 330.042689] nf_nat_inet_fn+0x106c/0x11f0 [ 330.046884] ? cpu_partial_store+0x60/0x270 [ 330.051231] nf_nat_ipv4_local_fn+0x2bf/0x870 [ 330.055770] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 330.060983] ? nf_nat_ipv4_out+0x790/0x790 [ 330.065259] nf_hook_slow+0x176/0x3d0 [ 330.069094] __ip_local_out+0x6dc/0x800 [ 330.073101] ? __ip_local_out+0x800/0x800 [ 330.077266] ip_local_out+0xa4/0x1d0 [ 330.081006] iptunnel_xmit+0x8a7/0xde0 [ 330.084951] ip_tunnel_xmit+0x35b9/0x3980 [ 330.089178] ipgre_xmit+0x1098/0x11c0 [ 330.093016] ? ipgre_close+0x230/0x230 [ 330.096917] dev_hard_start_xmit+0x604/0xc40 [ 330.101374] __dev_queue_xmit+0x2e48/0x3b80 [ 330.105779] dev_queue_xmit+0x4b/0x60 [ 330.109622] ? __netdev_pick_tx+0x1260/0x1260 [ 330.114136] packet_sendmsg+0x79bb/0x9760 [ 330.118312] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 330.123796] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 330.129005] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 330.134462] ___sys_sendmsg+0xdb9/0x11b0 [ 330.138553] ? compat_packet_setsockopt+0x360/0x360 [ 330.143732] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 330.150201] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 330.155578] ? __fget_light+0x6e1/0x750 [ 330.159597] __se_sys_sendmsg+0x305/0x460 [ 330.163789] __x64_sys_sendmsg+0x4a/0x70 [ 330.167865] do_syscall_64+0xbc/0xf0 [ 330.171616] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 330.176817] RIP: 0033:0x457e39 [ 330.180016] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.198961] RSP: 002b:00007f8f521cac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.206677] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39 [ 330.213953] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 330.221225] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 330.228504] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f521cb6d4 [ 330.235800] R13: 00000000004c53f6 R14: 00000000004d91c0 R15: 00000000ffffffff [ 330.244053] Kernel Offset: disabled [ 330.247685] Rebooting in 86400 seconds..