[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 29.704924] kauditd_printk_skb: 7 callbacks suppressed [ 29.704935] audit: type=1800 audit(1542316481.447:29): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 29.730858] audit: type=1800 audit(1542316481.447:30): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. 2018/11/15 21:14:51 fuzzer started 2018/11/15 21:14:53 dialing manager at 10.128.0.26:46525 2018/11/15 21:14:53 syscalls: 1 2018/11/15 21:14:53 code coverage: enabled 2018/11/15 21:14:53 comparison tracing: enabled 2018/11/15 21:14:53 setuid sandbox: enabled 2018/11/15 21:14:53 namespace sandbox: enabled 2018/11/15 21:14:53 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/15 21:14:53 fault injection: enabled 2018/11/15 21:14:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/15 21:14:53 net packed injection: enabled 2018/11/15 21:14:53 net device setup: enabled 21:18:25 executing program 0: syzkaller login: [ 254.323643] IPVS: ftp: loaded support on port[0] = 21 21:18:26 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x638, 0x8083) tee(r0, 0xffffffffffffffff, 0x9, 0x0) [ 254.610843] IPVS: ftp: loaded support on port[0] = 21 21:18:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000000)=0xffffffffffffffc1) [ 254.986057] IPVS: ftp: loaded support on port[0] = 21 21:18:27 executing program 3: syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x638, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000001c0)={0x0, &(0x7f0000000140)}) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000000100), 0x200800100000001) [ 255.453690] IPVS: ftp: loaded support on port[0] = 21 [ 255.811165] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.833289] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.841546] device bridge_slave_0 entered promiscuous mode 21:18:27 executing program 4: syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000a40)={[{@nogrpid='nogrpid'}]}) [ 255.990609] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.025811] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.033227] device bridge_slave_1 entered promiscuous mode [ 256.172639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 256.188739] IPVS: ftp: loaded support on port[0] = 21 [ 256.328381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 256.480834] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.505827] bridge0: port 1(bridge_slave_0) entered disabled state 21:18:28 executing program 5: syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x638, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r2 = dup(r1) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r2, &(0x7f0000000900)=""/4096, 0x1000) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x9, 0x78b9}]}) ftruncate(r3, 0x80080) sendfile(r2, r3, &(0x7f0000000100), 0x200800100000001) [ 256.530309] device bridge_slave_0 entered promiscuous mode [ 256.661949] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.696054] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.703440] device bridge_slave_1 entered promiscuous mode [ 256.724075] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 256.794008] IPVS: ftp: loaded support on port[0] = 21 [ 256.865474] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 256.882739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 256.995361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 257.122841] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.141166] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.156169] device bridge_slave_0 entered promiscuous mode [ 257.270368] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.284375] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.293305] device bridge_slave_1 entered promiscuous mode [ 257.367468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 257.457557] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.490157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 257.590854] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 257.660088] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.676976] team0: Port device team_slave_0 added [ 257.684698] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.696221] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.711455] device bridge_slave_0 entered promiscuous mode [ 257.761488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 257.797367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.833335] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.841273] team0: Port device team_slave_1 added [ 257.849447] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.862371] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.878038] device bridge_slave_1 entered promiscuous mode [ 257.890925] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.967290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.989019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 258.050711] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 258.130107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 258.148244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.306622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 258.319852] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 258.339244] team0: Port device team_slave_0 added [ 258.358754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.386932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.444534] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.459508] team0: Port device team_slave_1 added [ 258.498365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.506094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.514117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.579772] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.589188] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.611158] device bridge_slave_0 entered promiscuous mode [ 258.636800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 258.647805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.657865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.681305] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 258.766754] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.773164] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.788854] device bridge_slave_1 entered promiscuous mode [ 258.799155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 258.817210] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 258.824586] team0: Port device team_slave_0 added [ 258.833036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.849298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.889898] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 258.907782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 258.917815] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.926519] team0: Port device team_slave_1 added [ 258.980348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 258.997702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.016373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.067856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 259.078803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.094960] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 259.110386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 259.144404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.167196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.184357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.206759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.223833] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 259.244256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.266575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.399206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 259.416294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.430634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.466244] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.472710] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.481942] device bridge_slave_0 entered promiscuous mode [ 259.521047] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 259.604652] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.614007] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.622379] device bridge_slave_1 entered promiscuous mode [ 259.688114] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 259.725951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 259.782400] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 259.807222] team0: Port device team_slave_0 added [ 259.820991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 259.837641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.873698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 259.927348] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 259.946524] team0: Port device team_slave_1 added [ 260.144916] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.151483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.158610] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.165003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.174256] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 260.195130] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 260.230939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.322038] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 260.337047] team0: Port device team_slave_0 added [ 260.352770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.374373] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 260.408575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.436327] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 260.454163] team0: Port device team_slave_1 added [ 260.461679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 260.482012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.491202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.556381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 260.563299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.595526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 260.626562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.643018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.668438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 260.677023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.687541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.699708] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.706106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.712770] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.719208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.726584] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 260.736065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 260.755156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.790999] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 260.812324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.846848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.903215] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 260.916616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.924532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.037808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 261.045985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.053978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.174762] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.181201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.187935] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.194305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.226436] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 261.242622] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 261.267329] team0: Port device team_slave_0 added [ 261.427701] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 261.453475] team0: Port device team_slave_1 added [ 261.458761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.469723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.568552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 261.575422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.589110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.737075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 261.743970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.752973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.880489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 261.898189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.914008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.986556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 261.993727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.006481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.154488] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.160966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.167689] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.174056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.216489] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 262.476840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.738228] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.744640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.751342] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.757779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.768489] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 263.342404] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.348865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.355557] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.362021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.396533] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 263.485833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.494138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.896185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.008197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.389651] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.417029] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.453954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.897586] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.957102] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.967230] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.973368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.991247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.026298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.033393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.366652] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 267.372909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.389282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.409047] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.434501] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.536145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.801501] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.985079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.049012] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 268.468180] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 268.563812] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 268.589944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.617025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.968801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.987468] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 268.993626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.001062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.137103] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.447123] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 269.508048] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.918783] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 269.925089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.934341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 21:18:42 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") listen(r0, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) [ 270.416424] 8021q: adding VLAN 0 to HW filter on device team0 21:18:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xf0, 0x0, 0x0, 0x1f0, 0x0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, &(0x7f0000000100), {[{{@ipv6={@empty, @loopback, [0xffffffff, 0x0, 0x0, 0xff], [0x0, 0x0, 0xffffffff], 'erspan0\x00', 'irlan0\x00', {0xff}, {}, 0x11, 0x0, 0x6}, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x256c, 0x9218, 0x4}, {0x0, 0x20}}}}, {{@ipv6={@empty, @empty, [0x0, 0x0, 0xff], [0x0, 0xffffffff], 'bridge0\x00', 'bcsh0\x00', {0xff}, {}, 0x0, 0xce, 0x0, 0x40}, 0x0, 0xc8, 0x100}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0xba3, 0x8000}, {0x0, 0x1}, {0xfffffffffffffffa}, 0x7}}}, {{@uncond, 0x0, 0xc8, 0x100}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x5, 0xffffffffffffffc1, 0xef69}, {0x0, 0x20, 0x7}, {0x18, 0x0, 0x4}, 0xe2, 0xb187}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) write$P9_RSTATu(r1, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES32]], 0x4451417f) fsync(r1) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFSYNC(r2, &(0x7f0000000040)={0x7, 0x33, 0x6}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000cb18d6929a59f5a58500000000000000000000000000"], 0x1, 0x0, 0xa4a3ad41a879dde0) 21:18:42 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x400000000200003, r1}, 0x14) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000240)) 21:18:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="8b", 0x1) 21:18:42 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) 21:18:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003380), 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0) 21:18:42 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000440), 0x1000) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) [ 270.916067] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:18:42 executing program 2: r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000000c0)=""/62) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000140)={0x5}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0xd2, 0x0, 0x0, [], &(0x7f0000000040)}) 21:18:42 executing program 1: r0 = socket$inet6(0xa, 0x80807, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'trusted.', 'vboxnet1#eth0\x00'}) [ 271.908937] hrtimer: interrupt took 45198 ns [ 272.021436] audit: type=1804 audit(1542316723.767:31): pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir713520166/syzkaller.3STXpH/0/file0" dev="sda1" ino=16525 res=1 21:18:43 executing program 3: syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x638, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000001c0)={0x0, &(0x7f0000000140)}) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000000100), 0x200800100000001) [ 272.055451] audit: type=1804 audit(1542316723.797:32): pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir713520166/syzkaller.3STXpH/0/file0" dev="sda1" ino=16525 res=1 [ 272.170853] XFS (loop4): Invalid superblock magic number 21:18:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r2 = syz_open_pts(r1, 0x201) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r3 = dup3(r2, r0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000040)={0x1, 0xa0000000, {0x0, 0x2006, 0x2003, 0xf, 0xf, 0x4, 0x1}}) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RLOPEN(r3, &(0x7f0000000100)={0x18}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) ioctl$TCXONC(r2, 0x540a, 0x1) 21:18:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x7) ioctl$RTC_AIE_OFF(r1, 0x7002) 21:18:44 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = getpgid(0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect(r5, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r4, 0x5) 21:18:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x1, 0x81, 0xa1}]}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x41113, r0, 0x180000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x3c, @loopback, 0x4e24, 0x3, 'none\x00', 0xd, 0x5, 0x27}, 0x2c) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) shutdown(r0, 0x1) 21:18:44 executing program 4: syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x638, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000001c0)={0x0, &(0x7f0000000140)}) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000000100), 0x200800100000001) 21:18:44 executing program 3: syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x638, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r1, &(0x7f0000000900)=""/4096, 0x1000) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000001c0)={0x0, &(0x7f0000000140)}) ftruncate(r2, 0x80080) sendfile(r1, r2, &(0x7f0000000100), 0x200800100000001) [ 272.436146] audit: type=1804 audit(1542316724.187:33): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir685719036/syzkaller.UdbWH6/0/file0" dev="sda1" ino=16534 res=1 [ 272.462945] audit: type=1804 audit(1542316724.187:34): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir685719036/syzkaller.UdbWH6/0/file0" dev="sda1" ino=16534 res=1 21:18:44 executing program 1: r0 = socket(0x9, 0x80801, 0x7) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140)=0x20, 0x4) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffdbb, 0x1, 0x0, {0x100000000}}, 0xfffffffffffffe4a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x20400003, 0x0) ftruncate(r0, 0x2) syz_open_dev$loop(&(0x7f00000003c0)='/dev/loop#\x00', 0x0, 0x0) clone(0x20000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x127f, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000480), &(0x7f00000004c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000600)={{0x4}, 'port0\x00', 0x0, 0x10000, 0x7fff, 0x5b, 0x4, 0xc8, 0x8001, 0x0, 0x0, 0x58}) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r4 = getpgid(r3) perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f00000007c0)=""/196, 0xc4, 0x1, &(0x7f0000000280)={0xa, 0x4e22, 0x8, @empty, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000b40)=ANY=[@ANYBLOB], &(0x7f0000000040)=0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x8001}, 0x8) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200242, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xb9d, @loopback}, {0xa, 0x4e24, 0x3, @local, 0x38}, 0xffffffffffffffff, 0x7f}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) [ 272.589668] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 21:18:44 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2, 0x0, 0x33}}}, 0xe8) r3 = dup2(r1, r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000000)) 21:18:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x680401, 0x0) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000240)) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x2, 0x5, 0x89}}, 0x28) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7a2, 0x0, [{}, {0x0, 0x0, 0x0, [], 0xfdfdffff}]}}) 21:18:44 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/54) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, 0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)='[\':md5sumbdevem1\x00', 0xffffffffffffffff}, 0x30) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x200) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000ec0)="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") perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x400, 0x5, 0x2, 0x1, 0x0, 0x3ff, 0x10810, 0xf, 0x5, 0x80, 0x2, 0x8, 0x0, 0x3ff, 0x2, 0x8ce, 0xe5, 0x5, 0x80000000, 0x3c7f, 0x800, 0x6, 0x1, 0x800, 0x8, 0x40, 0xe94f, 0x0, 0xffff, 0x3, 0x1ff, 0x5b8b, 0x43c0, 0x6, 0x8, 0x1, 0x0, 0xc4, 0x3, @perf_config_ext={0x4, 0x4}, 0x7180, 0xffff, 0x8, 0x2, 0x8, 0x0, 0x5}, r1, 0x6, r2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x2000000000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc59a25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000005c0)={r3}) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000000c0)={0x3b, @multicast1, 0x4e23, 0x1, 'ovf\x00', 0x4, 0xffff, 0x24}, 0x2c) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'vlan0\x00', 0x400}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0xc}, 0x14) ftruncate(r2, 0x3) [ 272.645639] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 272.668343] print_req_error: I/O error, dev loop0, sector 0 [ 272.674127] Buffer I/O error on dev loop0, logical block 0, async page read [ 272.716083] print_req_error: I/O error, dev loop0, sector 4 [ 272.721853] Buffer I/O error on dev loop0, logical block 1, async page read 21:18:44 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000000), 0x2b428a52) socket(0x14, 0x1, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000001c0)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000300)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x0, 0x105000}) write$P9_RLERROR(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="4200ffff07020039002f65786500000000000409004bddd9de91be10eebf010ee9a90f79805854fa07424adee901d2da75af1f44b7f5ab26d7a071fb35331ce39c5a"], 0x42) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) recvmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x800030d, 0x0, &(0x7f0000002840)={0x0, 0x1c9c380}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000780)={{0x7, 0x5}, 'port0\x00', 0x72, 0x40000, 0xa5a, 0x28000000000, 0x2, 0x1, 0x28eb, 0x0, 0x5, 0x4a4}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 272.798316] print_req_error: I/O error, dev loop0, sector 0 [ 272.804201] Buffer I/O error on dev loop0, logical block 0, async page read [ 272.811395] print_req_error: I/O error, dev loop0, sector 4 [ 272.814334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 272.817156] Buffer I/O error on dev loop0, logical block 1, async page read 21:18:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x3ff, 0x1ff, 0x24, 0xffffffffffffffff, 0xff}, 0x2c) read(r0, &(0x7f00000000c0)=""/34, 0x22) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x2, 0x7, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = open(&(0x7f0000000140)='./file0\x00', 0x4000, 0x0) getsockname$netlink(r3, &(0x7f0000000180), &(0x7f0000000200)=0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0), 0x7}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000001c0), 0xdd) ioctl(r2, 0x1, &(0x7f0000000100)="383e4bb9fde8a988011457b16baba14c45fe00adb666171eb4ee363aaec306aa432fca4823a4f85c56d33d32c31f89974691") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x0, 0x80fe}, 0x314, &(0x7f00000001c0), 0xf2}, 0x0) 21:18:44 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x4, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}], 0x10) sendto$inet(r1, &(0x7f0000000340)="12", 0x1, 0x0, &(0x7f0000001340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) [ 272.852680] print_req_error: I/O error, dev loop0, sector 0 [ 272.858550] Buffer I/O error on dev loop0, logical block 0, async page read [ 272.866188] print_req_error: I/O error, dev loop0, sector 4 [ 272.871922] Buffer I/O error on dev loop0, logical block 1, async page read [ 272.972945] print_req_error: I/O error, dev loop0, sector 0 [ 272.978765] Buffer I/O error on dev loop0, logical block 0, async page read [ 272.978803] print_req_error: I/O error, dev loop0, sector 4 [ 272.991701] Buffer I/O error on dev loop0, logical block 1, async page read [ 273.043062] print_req_error: I/O error, dev loop0, sector 0 [ 273.048948] Buffer I/O error on dev loop0, logical block 0, async page read [ 273.056146] print_req_error: I/O error, dev loop0, sector 4 [ 273.061865] Buffer I/O error on dev loop0, logical block 1, async page read [ 273.090644] ldm_validate_partition_table(): Disk read failed. [ 273.110943] Dev loop0: unable to read RDB block 0 [ 273.123079] loop0: unable to read partition table [ 273.137855] loop_reread_partitions: partition scan of loop0 (p|' $`BT՜G%ֳwfѬW:B [ 273.137855] |0aWj? β) failed (rc=-5) 21:18:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x80) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000040)={0x0, 0x1, 0x1a9, &(0x7f0000000140)="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"}) 21:18:45 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) dup3(r0, r2, 0x0) 21:18:45 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8e400, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffff9c, 0x8008563f, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)=r1) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000040), 0x1) 21:18:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='numa_maps\x00') mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0x7, {0x0, 0xfffffffffffffff9, 0x4, 0xffff}}) pread64(r0, &(0x7f0000000000), 0xffffffd3, 0x800000000004) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x1, 0x6, 0x800, [], &(0x7f00000000c0)=0x3ff}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, {0x3, 0x3, 0x2, 0x4, 0x7, 0x7}, 0x5}, 0xa) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000180)=0x6, 0x4) 21:18:45 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1000, 0x400001) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x9, 0x8, 0x4, 0x100000000, 0x1, 0xfffffffffffffc00, 0x4, 0x427, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={r1, 0x2, 0xb1, "4e0c4af53d7849c8d10c83e0db53a103bd624109672f5c07a5b5ca1e3cae85a836b83a61b6d7ef9fb3e8dae768f52bee8002811612a61831d826e213016d4e3ccd3b2a65ea527c00e983fd93b24c9ec207ab2550325d0858f581cc9b5459c62124d74350ed342212aeb6cacb25768844ffd820af279f089742e213beb96cd8a2363937f02e7e454960d95753f3ff9035e0b8b0f19b9a343cb0972df24eae2a3980cf64ea84c0683006d07807d43f081f12"}, 0xb9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x5, 0x80000) sysfs$3(0x3) r3 = socket$inet(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000002c0)={{0x62, @local, 0x4e24, 0x3, 'wrr\x00', 0x28, 0x4, 0x4d}, {@multicast2, 0x4e20, 0x12000, 0xff, 0x296f636c, 0xb539}}, 0x44) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 21:18:45 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) dup3(r0, r2, 0x0) 21:18:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000000)={0x8, 0x6, 0x8}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x8001, 0xcf8, 0x3}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x7, 0x7}, 0xc) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{0x7, 0x6}, {0x80000001, 0x6ab}, 0x101, 0x6, 0x100000001}) [ 273.456887] md: invalid raid superblock magic on ram425 [ 273.462432] md: ram425 does not have a valid v0.0 superblock, not importing! 21:18:45 executing program 2: socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="000775b005e381e5b3b60ced5c54db", 0xf) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000980)=ANY=[]) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000880)='/dev/vbi#\x00', 0x0, 0x2) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000008c0)={r2}) mount$bpf(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000540)='bpf\x00', 0x100000, &(0x7f0000000780)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001002, &(0x7f0000001900)=ANY=[]) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) connect(0xffffffffffffffff, &(0x7f0000000200)=@xdp={0x2c, 0x1, 0x0, 0x12}, 0x80) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, &(0x7f0000000540)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000001a00)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000400)='bpf\x00', 0x588e, &(0x7f0000000c00)=ANY=[]) geteuid() setxattr$security_ima(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000780)='security.ima\x00', &(0x7f00000007c0)=@ng={0x4, 0xb, "1b138890179139fa"}, 0xa, 0x1) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, &(0x7f0000000b80)={[{@mode={'mode'}}]}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/icmp6\x00') ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000500)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x7, 0xa, 0x4, 0x600500, {r3, r4/1000+30000}, {0x7, 0x0, 0x4704, 0x3, 0x9, 0x9, "2a22d0eb"}, 0x0, 0x0, @fd=0xffffffffffffff9c, 0x4}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="b70000007b896e7a6997566185aa98784dfe624448397a2e8eb7f1bb4f748be056a7daef5cd13f6c57aa74cbef5785855b6677cb3e369a39552199f7ec3b1c4e0737d2ea0525b37ae6abf2184e66bcec041f4838b39e364ee09463435884f23b7f7106b2750cb448cd7315e86fc259345db2d93b0d13152556a631a9f757ef40806ab106cd46e108f7d910538c63ff4849978564d50a9830a459009d21f1fee34208616cc642d52faa6e2be0382bf16e59d13d8c376a6562cf31f6"], &(0x7f0000000740)=0xbf) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000840)=r7, 0x4) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x5) 21:18:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x80) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000040)={0x0, 0x1, 0x1a9, &(0x7f0000000140)="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"}) [ 273.545993] md: md_import_device returned -22 21:18:45 executing program 0: socketpair$inet(0x2, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="01ffffff0000000000000000"]) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @rand_addr=0x49a7}, 0x8) 21:18:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = dup3(r1, r0, 0x80000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) clock_gettime(0x0, &(0x7f0000003140)) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x400027f, 0x0, &(0x7f0000003180)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000840), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast, @rand_addr}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x6) connect(0xffffffffffffffff, &(0x7f0000000640)=@hci, 0x80) syslog(0x0, &(0x7f0000000480)=""/228, 0xe4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0xd0, 0x10000000000000, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0xfffffffffffffdf4) getpeername$unix(r2, &(0x7f0000000400)=@abs, &(0x7f00000005c0)=0x6e) getsockopt$inet6_dccp_int(r2, 0x21, 0x13, &(0x7f0000000080), &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'erspan0\x00'}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) r3 = dup(r0) ioctl$KDSETMODE(r3, 0x4b3a, 0x401) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendto$inet(r1, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r1) 21:18:45 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x121) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000040)="0f425f69f20f38f10b650feda5000066b9800000c00f326635004000000f30b80d008ec86666de3c0f01cf260f01cb2665660f3a618c0060540fc76b39", 0x3d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x4, 0xf42a, 0x0, 0x8c, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x100}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) io_setup(0x400004, &(0x7f0000000300)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635002005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:18:45 executing program 4: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000300), 0x4) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x0, 0x1, 0x3, 0x3}}, 0x26) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x2f89, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000340)={0x41b000000000000, 0x120000000000}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="4810ecff4d207869"], &(0x7f0000000380), 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) write$binfmt_misc(r3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1200e) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) [ 273.741313] md: invalid raid superblock magic on ram425 [ 273.763551] md: ram425 does not have a valid v0.0 superblock, not importing! [ 273.770994] md: md_import_device returned -22 21:18:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x80) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000040)={0x0, 0x1, 0x1a9, &(0x7f0000000140)="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"}) 21:18:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = dup3(r1, r0, 0x80000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) clock_gettime(0x0, &(0x7f0000003140)) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x400027f, 0x0, &(0x7f0000003180)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000840), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast, @rand_addr}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x6) connect(0xffffffffffffffff, &(0x7f0000000640)=@hci, 0x80) syslog(0x0, &(0x7f0000000480)=""/228, 0xe4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r1, &(0x7f0000a88f88), 0xd0, 0x10000000000000, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0xfffffffffffffdf4) getpeername$unix(r2, &(0x7f0000000400)=@abs, &(0x7f00000005c0)=0x6e) getsockopt$inet6_dccp_int(r2, 0x21, 0x13, &(0x7f0000000080), &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'erspan0\x00'}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) r3 = dup(r0) ioctl$KDSETMODE(r3, 0x4b3a, 0x401) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendto$inet(r1, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r1) [ 274.019761] md: invalid raid superblock magic on ram425 [ 274.033585] md: ram425 does not have a valid v0.0 superblock, not importing! 21:18:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20040000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @local, {[@lsrr={0x83, 0xb, 0x5ef, [@remote={0xac, 0x223}, @multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) shutdown(r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x0) openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 21:18:45 executing program 2: socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="000775b005e381e5b3b60ced5c54db", 0xf) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000980)=ANY=[]) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000880)='/dev/vbi#\x00', 0x0, 0x2) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000008c0)={r2}) mount$bpf(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000540)='bpf\x00', 0x100000, &(0x7f0000000780)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001002, &(0x7f0000001900)=ANY=[]) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) connect(0xffffffffffffffff, &(0x7f0000000200)=@xdp={0x2c, 0x1, 0x0, 0x12}, 0x80) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, &(0x7f0000000540)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000001a00)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000400)='bpf\x00', 0x588e, &(0x7f0000000c00)=ANY=[]) geteuid() setxattr$security_ima(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000780)='security.ima\x00', &(0x7f00000007c0)=@ng={0x4, 0xb, "1b138890179139fa"}, 0xa, 0x1) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, &(0x7f0000000b80)={[{@mode={'mode'}}]}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/icmp6\x00') ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000500)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x7, 0xa, 0x4, 0x600500, {r3, r4/1000+30000}, {0x7, 0x0, 0x4704, 0x3, 0x9, 0x9, "2a22d0eb"}, 0x0, 0x0, @fd=0xffffffffffffff9c, 0x4}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="b70000007b896e7a6997566185aa98784dfe624448397a2e8eb7f1bb4f748be056a7daef5cd13f6c57aa74cbef5785855b6677cb3e369a39552199f7ec3b1c4e0737d2ea0525b37ae6abf2184e66bcec041f4838b39e364ee09463435884f23b7f7106b2750cb448cd7315e86fc259345db2d93b0d13152556a631a9f757ef40806ab106cd46e108f7d910538c63ff4849978564d50a9830a459009d21f1fee34208616cc642d52faa6e2be0382bf16e59d13d8c376a6562cf31f6"], &(0x7f0000000740)=0xbf) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000840)=r7, 0x4) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x5) [ 274.066804] md: md_import_device returned -22 21:18:45 executing program 0: socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="000775b005e381e5b3b60ced5c54db", 0xf) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000980)=ANY=[]) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000880)='/dev/vbi#\x00', 0x0, 0x2) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000008c0)={r2}) mount$bpf(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000540)='bpf\x00', 0x100000, &(0x7f0000000780)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001002, &(0x7f0000001900)=ANY=[]) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) connect(0xffffffffffffffff, &(0x7f0000000200)=@xdp={0x2c, 0x1, 0x0, 0x12}, 0x80) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, &(0x7f0000000540)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000001a00)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000400)='bpf\x00', 0x588e, &(0x7f0000000c00)=ANY=[]) geteuid() setxattr$security_ima(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000780)='security.ima\x00', &(0x7f00000007c0)=@ng={0x4, 0xb, "1b138890179139fa"}, 0xa, 0x1) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, &(0x7f0000000b80)={[{@mode={'mode'}}]}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/icmp6\x00') ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000500)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x7, 0xa, 0x4, 0x600500, {r3, r4/1000+30000}, {0x7, 0x0, 0x4704, 0x3, 0x9, 0x9, "2a22d0eb"}, 0x0, 0x0, @fd=0xffffffffffffff9c, 0x4}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="b70000007b896e7a6997566185aa98784dfe624448397a2e8eb7f1bb4f748be056a7daef5cd13f6c57aa74cbef5785855b6677cb3e369a39552199f7ec3b1c4e0737d2ea0525b37ae6abf2184e66bcec041f4838b39e364ee09463435884f23b7f7106b2750cb448cd7315e86fc259345db2d93b0d13152556a631a9f757ef40806ab106cd46e108f7d910538c63ff4849978564d50a9830a459009d21f1fee34208616cc642d52faa6e2be0382bf16e59d13d8c376a6562cf31f6"], &(0x7f0000000740)=0xbf) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000840)=r7, 0x4) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x5) 21:18:46 executing program 4: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000300), 0x4) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x0, 0x1, 0x3, 0x3}}, 0x26) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x2f89, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000340)={0x41b000000000000, 0x120000000000}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="4810ecff4d207869"], &(0x7f0000000380), 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) write$binfmt_misc(r3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1200e) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) 21:18:46 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x0, [], [{0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2}, {0x4}], [[]]}) add_key(&(0x7f0000000440)='blacklist\x00', &(0x7f0000000480)={'syz'}, &(0x7f00000004c0), 0x0, 0xffffffffffffffff) setresgid(r1, r1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x109602) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000000c0)=""/18) 21:18:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x4001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000380)={0x1bacf914c1bb05a, &(0x7f0000000300)}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x20, 0x6, 0xfc13, 0x8, 0x9}, 0x14) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000300)={0x5, 0x0, 0x9, 0x5, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x10000}) r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, &(0x7f0000000f80)}) 21:18:46 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x1c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0x48) [ 274.489718] binder: 7837:7841 Acquire 1 refcount change on invalid ref 0 ret -22 21:18:46 executing program 0: socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="000775b005e381e5b3b60ced5c54db", 0xf) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000980)=ANY=[]) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000880)='/dev/vbi#\x00', 0x0, 0x2) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000008c0)={r2}) mount$bpf(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000540)='bpf\x00', 0x100000, &(0x7f0000000780)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001002, &(0x7f0000001900)=ANY=[]) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) connect(0xffffffffffffffff, &(0x7f0000000200)=@xdp={0x2c, 0x1, 0x0, 0x12}, 0x80) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, &(0x7f0000000540)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000001a00)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000400)='bpf\x00', 0x588e, &(0x7f0000000c00)=ANY=[]) geteuid() setxattr$security_ima(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000780)='security.ima\x00', &(0x7f00000007c0)=@ng={0x4, 0xb, "1b138890179139fa"}, 0xa, 0x1) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, &(0x7f0000000b80)={[{@mode={'mode'}}]}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/icmp6\x00') ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000500)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x7, 0xa, 0x4, 0x600500, {r3, r4/1000+30000}, {0x7, 0x0, 0x4704, 0x3, 0x9, 0x9, "2a22d0eb"}, 0x0, 0x0, @fd=0xffffffffffffff9c, 0x4}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="b70000007b896e7a6997566185aa98784dfe624448397a2e8eb7f1bb4f748be056a7daef5cd13f6c57aa74cbef5785855b6677cb3e369a39552199f7ec3b1c4e0737d2ea0525b37ae6abf2184e66bcec041f4838b39e364ee09463435884f23b7f7106b2750cb448cd7315e86fc259345db2d93b0d13152556a631a9f757ef40806ab106cd46e108f7d910538c63ff4849978564d50a9830a459009d21f1fee34208616cc642d52faa6e2be0382bf16e59d13d8c376a6562cf31f6"], &(0x7f0000000740)=0xbf) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000840)=r7, 0x4) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x5) [ 274.574123] binder: 7837:7841 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 274.581747] binder: 7837:7838 Release 1 refcount change on invalid ref 0 ret -22 21:18:46 executing program 2: socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="000775b005e381e5b3b60ced5c54db", 0xf) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000980)=ANY=[]) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000880)='/dev/vbi#\x00', 0x0, 0x2) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000008c0)={r2}) mount$bpf(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000540)='bpf\x00', 0x100000, &(0x7f0000000780)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001002, &(0x7f0000001900)=ANY=[]) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) connect(0xffffffffffffffff, &(0x7f0000000200)=@xdp={0x2c, 0x1, 0x0, 0x12}, 0x80) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000580)='bpf\x00', 0x80000, &(0x7f0000000540)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000001a00)='bpf\x00', 0x5004, &(0x7f0000000900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000400)='bpf\x00', 0x588e, &(0x7f0000000c00)=ANY=[]) geteuid() setxattr$security_ima(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000780)='security.ima\x00', &(0x7f00000007c0)=@ng={0x4, 0xb, "1b138890179139fa"}, 0xa, 0x1) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, &(0x7f0000000b80)={[{@mode={'mode'}}]}) umount2(&(0x7f0000000800)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/icmp6\x00') ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000500)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x7, 0xa, 0x4, 0x600500, {r3, r4/1000+30000}, {0x7, 0x0, 0x4704, 0x3, 0x9, 0x9, "2a22d0eb"}, 0x0, 0x0, @fd=0xffffffffffffff9c, 0x4}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="b70000007b896e7a6997566185aa98784dfe624448397a2e8eb7f1bb4f748be056a7daef5cd13f6c57aa74cbef5785855b6677cb3e369a39552199f7ec3b1c4e0737d2ea0525b37ae6abf2184e66bcec041f4838b39e364ee09463435884f23b7f7106b2750cb448cd7315e86fc259345db2d93b0d13152556a631a9f757ef40806ab106cd46e108f7d910538c63ff4849978564d50a9830a459009d21f1fee34208616cc642d52faa6e2be0382bf16e59d13d8c376a6562cf31f6"], &(0x7f0000000740)=0xbf) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000840)=r7, 0x4) ioctl$int_in(r6, 0x5452, &(0x7f00000002c0)=0x5) [ 274.652968] binder: 7837:7848 Acquire 1 refcount change on invalid ref 0 ret -22 [ 274.667448] binder: 7837:7848 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 274.676286] binder: 7837:7838 Release 1 refcount change on invalid ref 0 ret -22 21:18:46 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x0, [], [{0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2}, {0x4}], [[]]}) add_key(&(0x7f0000000440)='blacklist\x00', &(0x7f0000000480)={'syz'}, &(0x7f00000004c0), 0x0, 0xffffffffffffffff) setresgid(r1, r1, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x109602) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000000c0)=""/18) 21:18:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00_vs_stats\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)) ioctl$TIOCCBRK(r0, 0x5428) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) 21:18:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) alarm(0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 21:18:46 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x440100) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x2e}, @IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0xfe8e}}, 0x0) 21:18:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x803, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x1, 0xbbe}, 0x2) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) mq_timedsend(r0, &(0x7f0000000100)="c0cae0fe3befe1f7a188cf98851cb2224fc4d3f0d24b327b651f25bf0a612ba591a29f8890f32fdabac014f449b3ff5715a269a7e7a56064a07ebd1a1212", 0x3e, 0x6, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000001c0)={0x7f, 0x85a, &(0x7f0000000140)="2f970c4e8bd80254cd48c99d1a866fa51e5d15102ec9334a840efd56cffe12827f580b9444f5ac03c267588dad3138679fafecfc8597c63afa78978fc66e839b219d1e699a5973329e2f9a5739d793a5e44b59110353f12834", &(0x7f0000000240)="f3dcba9a7695a89c56a1e002f5192070d2cd665662a97ff3f41573e97a89dcc0f7dc79fb0828e414252f2bd3f74d39770ba6fc1e36f052772965779b2b90e63f475650217c50820a902077463f5fd41e7a0b5e7101d83348d48684586a8e06ced11bc1cbcf11ab0a98c7baa4d45be7648485", 0x59, 0x72}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f00000002c0)=0x8) 21:18:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x57, 0x0, 0x20, {0x3}, {}, @ramp={0x2}}) socketpair$unix(0x1, 0x800000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="1400060000000000bbf1ffff000000000000000014000100fe8000000000000000000000000000aa"], 0xff12}}, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)) getresgid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) 21:18:46 executing program 5: io_setup(0x6, &(0x7f0000000140)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) close(r1) r2 = dup(r1) unlinkat(r2, &(0x7f00000000c0)='./file0\x00', 0x200) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @empty, 'bond0\x00'}}, 0x1e) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080)) 21:18:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x5d, &(0x7f0000000340), 0x1000000000000203}, 0x40) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e24, @multicast2}}) keyctl$session_to_parent(0x12) listen(r1, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz'}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001f00), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e22, 0x0, @local, 0x3f}}, 0x0, 0x2, 0x0, "748c6f9a3af6871589903bd148f11f71e75d6d585fb6cc6a4ce3df66de753a299193e72d5f81ed7e450af55e0f373a0aa6ed1f833c7343327ee1cfad1603864d0270006cc7a279245ff41c1ba1ea24a2"}, 0xd8) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x1, 0x35}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000003c0)={0x900, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="02070000020000000000000000000000d1b899a69f7731576f8dd02acef2"], 0x10}}, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000900)=""/105) recvmmsg(r3, &(0x7f0000008840)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/3, 0x3}], 0x2, &(0x7f0000000640)=""/186, 0xba, 0x4}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000018c0)=""/89, 0x59}, {&(0x7f0000001940)=""/4, 0x4}, {&(0x7f0000001980)=""/202, 0xca}, {&(0x7f0000001b00)=""/101, 0x65}, {&(0x7f0000001bc0)=""/99, 0x63}], 0x5, &(0x7f0000001cc0)=""/142, 0x8e, 0x2}}, {{&(0x7f0000008600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000008740)=[{&(0x7f0000008680)=""/137, 0x89}], 0x1, &(0x7f0000008780)=""/151, 0x97}}], 0x3, 0x2, 0x0) 21:18:46 executing program 2: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000040)='attr\x00') setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x62, @multicast2, 0x4e24, 0x3, 'sed\x00', 0x28, 0x46f5, 0xf}, 0x2c) fcntl$setstatus(r1, 0x4, 0x80000000407fd) fallocate(r1, 0x3, 0x100000000001, 0x400) preadv(r1, &(0x7f00000026c0)=[{&(0x7f0000000100)=""/190}, {&(0x7f00000013c0)=""/4096}, {&(0x7f0000000280)=""/14}, {&(0x7f0000000200)=""/69}, {&(0x7f00000023c0)=""/66, 0x55}, {&(0x7f0000002440)=""/162}, {&(0x7f0000002500)=""/179}, {&(0x7f00000025c0)=""/224}], 0x10000000000000c5, 0x0) fcntl$setpipe(r1, 0x407, 0x1000) r2 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000000)={0x100000000}) [ 275.051303] netlink: 40 bytes leftover after parsing attributes in process `syz-executor1'. [ 275.075574] netlink: 40 bytes leftover after parsing attributes in process `syz-executor1'. [ 275.146305] ldm_validate_privheads(): Disk read failed. 21:18:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000240)={0x0, @aes128, 0x0, "8000"}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) accept(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000400)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@rand_addr, @in=@multicast2}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000002000), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000140), 0xd, 0x1, &(0x7f0000fd7ff0)={r1, r2+10000000}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x150) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, "e91f7189591e9233614b00"}, 0xffffffffffffffb1) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(0xffffffffffffffff, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x7) 21:18:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0xfffffffffffffe44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 275.186901] loop4: p1 p2 p3 p4 [ 275.190592] loop4: partition table partially beyond EOD, truncated [ 275.302617] loop4: p1 start 1 is beyond EOD, truncated 21:18:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) r3 = socket$inet6(0xa, 0x3, 0x3c) socket$inet(0x2, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r3, &(0x7f0000002ec0)={'!! ', './file0'}, 0xfdef) [ 275.328476] loop4: p2 start 101 is beyond EOD, truncated [ 275.350643] loop4: p3 start 201 is beyond EOD, truncated 21:18:47 executing program 1: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x100000000032, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) [ 275.376243] loop4: p4 start 301 is beyond EOD, truncated 21:18:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xa000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xd0, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xba9f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1a2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$inet_sctp(r0, &(0x7f0000001540)={&(0x7f0000000180)=@in6={0xa, 0x4e21, 0x6, @ipv4, 0x4}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000300)="4f6c72df74d63e637812bf1dbb7e04d0240532867af5d059526438986f4b8915b60e1d3459e437754407d029024704b7a66c5cf5032c7c0a886bdf233b15e36d38ff4fac4eec45c2f60f6c5a74a85538f5ecbd273c156aabd9681e58c68c269d7f5dfa0e00611dc3353fa4dc96a254d862fc8ebe8ffb0d45a68fcbc77be2b18dc0b5749e3f946fa9ccf976ebdac99a04934f829f10dc777a747c3a1f4aaba721e60476de2330a959f7c74d9aab21706cf41b0a0a63b0b942dd7ae7c9e6521e0ad3cc9221793325d7811c4c0aa70326fdd7217012e5cb0100c40df3fcff9db2ca92d57c90f33c621f383e691b0e051d5bb8a4c735f94bd12fd15476cb1a592f00d24a5f861d2c558468941b6d8975ad96edcb8ab25f582fef1450b4cf34ef0664e7f9495b706d16805bdd317122aa32467aa036af1c608063a463de665787c9540fa06b677c171ae835fe2d91ff8b7abeca9a3e4a57081bb4cbcc5d0694634fef53ba206fe05d91266a6440d21f7f31e5056e5df7a7a5a3b3c27b5ec2b1e12890838727023c027487b675bc28aca0f64440d4b629af26f37862c9811dd55fc22363aa1f5c0ef5bdd69799d240b70b88dd091ca04f155525dde53f92f86a225c6079e3ca8f29459ea73256863c364f7bad7d52be94bcb5d9cbeeb7c8631bd9f2895a46c199559271f46f62fc6033ad7494a258368327e56ff418a7b570969e4b43fe315214f52dd9b2866016a20a17386e4743e59ac7d5049873dc637ad25ba04d639709b3e3584a0b1bafb4d9fb9743b95aa1724c6fb297b28fbcb9bb33edd21ae0689ba020aefbc39b15439c961833c06af0352f71d0b8e49797f3b5304f4fca2a3c79b220956b94c68bea1985983374f485409a64b0b7e48aa2fcaf1ea895e7f322a2b6dcdf1ae7ba93a5600ab698cefddf7d2a2fb90dfcf29698f73d8f0d2e4490800416f5e9ea88cf23f6c62b97b71021d25b7178a0973eb6f199cddda9083a032ba1b032195a1d891b289abffabe5c08a2598b368a4537fd1e021fe7dc3b63f1f0fe292c5ea5c465a2a22db5dd85d8dce5d176cc0de570a981470cdacf5a9818365ab4d03f67bc66416192070a405f083cb5c4af6fb62d6e2afcf429220b3ad9645fcdecac86b4c0e60a7ef958786fd3aaef7ee4590e190eacb476ae61d68ed6316689d1d2d0f0f9d8c7c050498abfa89d94ecf2decc1811e05ef5c518050ac976535cc6542179b2047d2adee53d96b5eed90b4f8580e47b5b1e088cfc1b6e3ee0b1077a3112c1bc141f5950ef0f8829d2bf175c42be4b99f9fde7d30ba76f6847fa4249a142fb1f279883b74dd8c882dad70d31a9b5b6e5d6b859161beb723090b2b8039e0bfb7e881019fec2ae7697fad34654e5dbd67b4ccd09c24f7d46830bde5cffbd40baf326caa2152c1d101a1ba0241da5c16e46837802f0d94030f738f3c733a2a47e43e9385295b7d87738684bafd9ae24a64e5eac83ee678424299865fa6357a20db4ab604b6fd79f5df86e2114a6b89b3d7c2302e47082b2be306dff82efd9c870166fdf61ea42042ec55a594bf8c6eb77a6696e660c9348bc12bc92c2c5a4652c2eb3eb762d335f49f0633d28615fc8fddd2dd7d8cb2b49d49f68d231555ba030995457b54c4557bce18b50649f2dc0ce7a77470d2c6bd07823caf26e1220ddd48f358f151b947598a497b8cafb2e38d9eed457e7d28178144235fb6d79c57040a1ff5b508d8a1070b2cbf46370e729adf82da7b9aee6b6d1194ed7b2603ca06f7bdc5683a2914c5dc3ae3a9769fcafd653eb635ab04370ad901f31950e082d90923c49a49aa8e9620353aa6c68cbe05b70ddb716fc9df2dba2d9197dc834cbadc276f96c7dadc48dc683239c84a88ea02cb6ca4828ab3a904ef6984d734b7c00e01f50b7c1f55b8fa302e3cc8fd54a71f25d7cba3045db1d641f0f2a8b5f8351b907fb75704cf351f8c78141317cd2d3572ba71498396e39ae50302ad4e71388e4e7abd030439b1d7e8fe7b78b6475aedc4dca061622d32dee471421366f1ebaa642389757b72b7815b8b6e44cde38efb4ed2b542d209f3f0ef8f47f1f1ca8ebde6bff36cd0f172e031b404bf2faaaeb9cbf07e84da8f84f5164d36f9482a8e6c11887f7a8be6fdfa3d86533f51f87396878c32a8f4a00b5a4bef18438acf7cffeec6e1ba7880cf288682c633fc3be13674a955fbf851a1af2b60cad0b73c65fe381f7b6d9ab148ad676206d63a40a47f99080bcbbfbf34798a5e02259c56381c6f759df7445bb54acef1bb5f235bac38458214191022652c897c9176f34548d5b2bb0117109bc1485b0cee8d8af06d2af668beaddf5701ce95ec2e598d489867fb77717eb379767a7cf64d7e2702590ace6cb1b52e301cb8a7e11d69053d58c1ebbaeb5481b50998847930ce821e7c42315a8442ba0733d35a87a7b89b10b67a39f6459888d698fa34c2055dee7198518b543ca6117e4b796d54d96a7922a433ff374542ea464d9daa1c8729c5550235d0925b463793693aa95477853d3f3166ff78edfbe04e2a54d5d88ecb27185e5a455d3419d209d4f2884d5a629af045f12c29a22ead0f6cce5e6197c953520bf8d8b3ba69d8f7c2dd9ad2880a9031486235014234d0858b7f5d23c4a1e099cb76c2a510923e4f34c73de842abd20c64dffcefcbbe97a6429a6730331e2508fc56b1342adaf64e45fed9e2e971da45cc949a9d20897a18237a00cfa468e2774b53d4a009fc225c8e55e3f1dd8225f7105b0fd9e8d11ad72a5ce6d4aa0abdac5c8ea9a75dffa2438b5b897711e6c6c73a1cc1f8b19911ef16c04b6eaacf75c8562924ab3fc92f7c618e0d377f53df270fd6dc385740dfc3462467e8cd8fb1d4107900af98b7601d25220efc3ffe2bb10f76595a07d6b8ef14c4b607a93568cc2a8049a4cbbff5e44f19e41dda7085a5c6350a38ba151b44ea06b69d0c8a1d39aa01f1aabe8cbe2204731b855aefe3d1be2d71483e3640c6f20063fe11d9f303d7cffe77ba36d4ebefd75e65675f616d89aa3db45f99230d77bb4a041c3ed7c332d97952ebc40039456dfb3200fa5a8af734662c91c59c3eebbd50d0c913c28eb5659ca658e048be91adc802f530cf2a83bad962a74e47d7a74d57af5100ddd22f55ed13e2f8f37003b3c9884bad5006820f39babe7e9b638bd6587804acd733e23075709680e023bdacac69c838081e2041a09629e342a5e6de745aa5a6562831ce339ded8570fc8bee058541d2cd0aa5fc33fbf42a6c79b5a99b3fcac21ca80340d0edacc1ddecb26f4c6dc034562f3654769f3d54869eee73ebe97bb8f21df7518936dedb8356ce576b8ff785acb16da93936ed98c2fbcfbe9f92bf2044f6078ecfdc8e65c9b9f1ab64db735f09347ac748dc63aa850f40b5bfed209e77bfb7df0771ce2192f80000089476a73f1dc45ef32b8188d37d0793df92fb644c6673cfe820866acd5f1c869fd8eb59550ae0fa76dedb3975c42dfed19ca4e5da8a91565fea04e59d7c9ee5259a4b230d32a21c45b8c27a9f461a7ae40ca660a64c5d33436485a4bcd15265c931e9dee2a3c87ccda60a10a9139dbe7c40d2aaaf537204f1aa924c4fc10bdad051dcdb9d668331982c6f085cab4972c2bf900f7f19894fa381fb966de7c53f20bd26818946b4c5398276bea0f4ad0dddf72d45fcac485b0fb6585cc0e81cebbb6b4d4aeff1f4d389e077beaec98b3630391fa959cd3a7e48d1fe4db5f81ddeaadf80dad1447c60e8c7a34744ee8eb7b30e10ec1b33b4c46c149c698ec41924c38a6db6343df4b207c186d9768d0eb69d051e83e0d92fb5f9a1a83fbad7f013293a82ef35fa83f5181656d731bf6f8074a1b2ee6d3cdaef622115b01555ab8c6438ec06436424cf1aaf8337e31537d8e941d912f6400c2b7f218cd2a3e4b415acf4f6f0fbad70c36fd52a11e3a89eb3468255bc5da8195513168642cf3ab165c17181a1c5230e4b7798e8ea13f70e537a2152babdcccc70458b156288605f12fb0e5ce0060128c2fa62008709f9ce1da72559fdb56b773a45d01366d26ea14977962f35642cfde8f129a99af2b7c691366101a37311b038617765f8bb3ab780bb820becb40fc96e6a4cfc5ab76ba1b91e65919d72e4854d4e85998123f75ddb158332670b41982b53a96922f86d48051e3f435fd43b9f8df8e69d0a3034d46a46849acb355e8268fce74a7b2b8a868fa5d86ac7e54d8943c1a67c2091236ac46be7f0cc12e7f413cbd5cb9abf660b5b7994d753c5fb333c30d8c1163ff315407d6ff90830baaf0f46f0aa504fbb7883a8985933577f7d58e3e64fe770f02f2e8c21dbaab74e928033fe500c16ed2992f266575c2c56895e357c7e8666b2dc33edb5546ffd5fe9022917f5a4a892db332f917f032c53346c278016cd686c5f874f91044ca17de844d04fe0cc7a701d1d9a4a40ce88d621ef838365e96bfe82a6e3034caf0a06535854c07fb2a404ad7a405b818b064d4f6cf055e36a427c9ac26634e72ad437b9cedfb5444a75d1052bc242c93f13439c97e1bc062a1b1548f3605b8a2351c90f196e70a54bd3bb7b14a3663df4987fcccb3aeb24f0734959216f36b34c0c61ae621b64edc11f1feb1dc27cc40bffc7ac6028583f5a6ed88adee5d74b0b91cabd4afdb7b237a33ea9a2559be3d9e15070a8b0ff3065383fcea1ce2b878f3deb64956f3acd71a6e070a3c04f0048d7922e04b149ae7551b2798ddbde7c9ac05125940db8b4619b9e8bc575c6d84aaff97b5823b5eaa9896cb8782816927aa0ad16944141a1fa65f71f9619954d51f4bad30b6b6692a0073bd5ee8f2bec05f18721a9787c6d89d07a51fcd845cdfa6bd676a8d36a32f822f31798889d3b878c2f0049def0eced54008a41f7c032ac965b61ff9ef31c16a9172a7cc1e1783d5c013c9dc18b56f8d1d1b67f5471ff0d4502017090c46950768b3c3696af42f1f461de27083735ec5c14f27796f0d4362091beecf7b4e611c86cfb009104d3df5d87f30009918b37b7a6eda90e29371f472148a6319ac1e27c87a8f036e067292863c96d8ffb7a5befcecf748a28f37cdcb73f363beb6b5ea501a4dc8bc10b1320dba5f9da8ce46ddb6d1de322a3324295f38d567cdedee454b0ef09256edf19055f08c258de163a6501f051107159e9fa1df5fa8a812922fa9515abb7e54004a0874b16f9bb62a99d20ced854d688186c8ae55715f6f2c43cbcae4fb23ca5bb5a44d8afb0d91eeb9afe36473a07a067eac09b37c9e5be4559a397d9d2fc0ce42a7ea0324f8fbf8696c634b4c702bff1138df0c0113774c2f76488a982a1110903a86a563100870d5514058c82183a593f33cece8cfb917858e6e758ac8e2ba86dda508ea23bff6be2cd88bd436a43e712ea2fd4cc0fcb965d00aa4df4985c88e8564aa716d6d6959de79c4c5674d50f98e53ef458b4ebeda548e02ebb3d650fde7b195a9b29ac7a7e801f77595fdcfaeadd4bde5219d74346663bf3ca6dbed40d433e8b1e2f167222fe5334a50948c07985f7c9b189334e6a23b3be8c980087d56eb365354802c0036b48e5eac82e2796de9bfc509820b46c06be9ab6c1714869822ef31fda589e62c87224069a7755b4c5ad0c55ab82a84843666e6dcc824104f164dc796be0243c6939a17f205df19f0d7a0ba8e22fb6b27ca4b3d0b308b1883527793c8ec1553d595150ef509b8cef8a414dc06408aa007cbc9e19bdafb6783f7d9dbf69d8f588e328df28ef2ab203cfd9ff71ce5298730d3", 0x1000}, {&(0x7f0000001300)="b97aff84f77e1502308ad7803700ebff395a19ae9c6db7b80275d20da1e32fba966d961671c473b8e9147f297b0771f8f6385919d68110f814b64e76990b08c3d2f2a72dded556fdd418eea240f4a2cf17d05f555e96015d0118309dbfe9a250c22613432e377b52be5230d29a83dd78004dd4f0494ff50a0a6a7d1a847c4a6e5db5f034cc8767935060c2179f9d13de914073bf6e89bc1eebead4f41d19792e5a38cb4bd87f5ea6be5e7ba38a486dfb7b68c6f0afbff6da28edac95204f196bf24fe88da1463b70b8bcce78144f99a58cb753c7d9c4d603f430e01eb99138d950be5d1b82a0216ef4f93a83", 0xec}], 0x2, &(0x7f0000001440)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @dstaddrv4={0x18}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x700000000000}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x101}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3881}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @broadcast}}], 0xd0, 0x40}, 0x4000000) socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0xfffffffffffffe3d) 21:18:50 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="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", 0x1ff) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') 21:18:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x9) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x0, 0x6d, 0x20000000000014, 0x0, 0x0}, 0x1db) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00c727000000000000e305640e52"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000003c0)={0x84, @local, 0x1100, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x20000000000, 0x0, 0x800}, 0x2c) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000680)={0x0, 0x0, 0x10001, 0x7}) ioctl$DRM_IOCTL_AGP_UNBIND(r7, 0x40106437, &(0x7f00000006c0)={r8, 0x28526e09}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x9}, &(0x7f0000000380)=0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa26}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000045) poll(&(0x7f0000000440)=[{r4}, {r7, 0x4208}, {0xffffffffffffffff, 0x401}, {r2, 0x2}, {r5, 0x109}], 0x5, 0x3ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xb1, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0bb0dd083e178aad54873b562fe52f6950828ba125c384392c30338ee00067b6eabc1038b49ce196542a3524113e88c4da815f90558eff5d5167c660b2122d5b5388bb6954da9a7dba84777facc06d3c6df2ec15f212b46575e7c9604215ac0aec5a6a18026e0575adeb2eb0195aed56d80468a3e769544b7d7e2dfe1986c3a4d0041309bb370adbd5b12a40439810e8c5d1146e19ad09566c0ef14b23199c9ba8c338238b87ca684d0040df1a4901470d"], 0x1, 0x0, &(0x7f0000000140)="14"}) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xc1010, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=[0x48, 0x45c2fd6a264ae34a, 0x28, 0x38]}}], 0x0, 0x0, &(0x7f0000000300)}) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x101000) fstat(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r9, 0x5) 21:18:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x803, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x1, 0xbbe}, 0x2) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) mq_timedsend(r0, &(0x7f0000000100)="c0cae0fe3befe1f7a188cf98851cb2224fc4d3f0d24b327b651f25bf0a612ba591a29f8890f32fdabac014f449b3ff5715a269a7e7a56064a07ebd1a1212", 0x3e, 0x6, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000001c0)={0x7f, 0x85a, &(0x7f0000000140)="2f970c4e8bd80254cd48c99d1a866fa51e5d15102ec9334a840efd56cffe12827f580b9444f5ac03c267588dad3138679fafecfc8597c63afa78978fc66e839b219d1e699a5973329e2f9a5739d793a5e44b59110353f12834", &(0x7f0000000240)="f3dcba9a7695a89c56a1e002f5192070d2cd665662a97ff3f41573e97a89dcc0f7dc79fb0828e414252f2bd3f74d39770ba6fc1e36f052772965779b2b90e63f475650217c50820a902077463f5fd41e7a0b5e7101d83348d48684586a8e06ced11bc1cbcf11ab0a98c7baa4d45be7648485", 0x59, 0x72}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f00000002c0)=0x8) 21:18:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = socket(0x40000000015, 0x1, 0xcc93) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x4, 0x10031, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 21:18:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000240)={0x0, @aes128, 0x0, "8000"}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) accept(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000400)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@rand_addr, @in=@multicast2}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000002000), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000140), 0xd, 0x1, &(0x7f0000fd7ff0)={r1, r2+10000000}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x150) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, "e91f7189591e9233614b00"}, 0xffffffffffffffb1) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(0xffffffffffffffff, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x7) 21:18:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x22, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0x7, @dev={[], 0xe}}) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 21:18:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x7fffffff, &(0x7f0000000000)="0a5c2d0240316285717070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000016000)=[{0x3c}, {0x6}]}, 0x10) [ 278.531878] raw_sendmsg: syz-executor3 forgot to set AF_INET. Fix it! [ 278.586022] ldm_validate_privheads(): Disk read failed. [ 278.601777] loop4: p1 p2 p3 p4 [ 278.618498] loop4: partition table partially beyond EOD, truncated [ 278.638258] loop4: p1 start 1 is beyond EOD, truncated [ 278.643760] loop4: p2 start 101 is beyond EOD, truncated [ 278.676875] binder: 7989:7996 unknown command 148746251 [ 278.682857] print_req_error: 1846 callbacks suppressed [ 278.682867] print_req_error: I/O error, dev loop0, sector 33664 [ 278.694368] buffer_io_error: 1844 callbacks suppressed [ 278.694378] Buffer I/O error on dev loop0, logical block 8416, async page read [ 278.707211] print_req_error: I/O error, dev loop0, sector 33668 [ 278.713281] Buffer I/O error on dev loop0, logical block 8417, async page read [ 278.718681] binder: 7989:7996 ioctl c0306201 200000c0 returned -22 [ 278.727311] loop4: p3 start 201 is beyond EOD, truncated 21:18:50 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000200)={0x1}) r1 = semget(0x0, 0x1, 0x40) semtimedop(r1, &(0x7f0000000040)=[{0x5, 0x8}], 0x1, &(0x7f0000000080)) [ 278.727510] loop4: p4 start 301 is beyond EOD, truncated [ 278.739690] print_req_error: I/O error, dev loop0, sector 33784 [ 278.745877] Buffer I/O error on dev loop0, logical block 8446, async page read [ 278.753276] print_req_error: I/O error, dev loop0, sector 33788 [ 278.759979] Buffer I/O error on dev loop0, logical block 8447, async page read [ 278.775268] print_req_error: I/O error, dev loop0, sector 0 [ 278.781128] Buffer I/O error on dev loop0, logical block 0, async page read [ 278.788330] print_req_error: I/O error, dev loop0, sector 4 [ 278.794060] Buffer I/O error on dev loop0, logical block 1, async page read [ 278.802421] binder: 7989:8018 got transaction with invalid offset (72, min 0 max 0) or object. 21:18:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) listxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)=""/160, 0xa0) read$FUSE(r0, &(0x7f00000030c0), 0x1000) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000880)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4}}, &(0x7f00000009c0)=0xe8) r9 = getgid() fstat(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() getresgid(&(0x7f0000000b40)=0x0, &(0x7f0000000b80), &(0x7f0000000bc0)) lstat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000d80)={{}, {}, [{0x2, 0x6, r1}, {0x2, 0x7, r2}, {0x2, 0x1, r3}, {0x2, 0x0, r4}, {0x2, 0x6, r5}, {0x2, 0x7, r6}, {0x2, 0x0, r7}, {0x2, 0x4, r8}], {0x4, 0x2}, [{0x8, 0x5, r9}, {0x8, 0x0, r10}, {0x8, 0x2, r11}, {0x8, 0x0, r12}, {0x8, 0x2, r13}, {0x8, 0x1, r14}, {0x8, 0x2, r15}, {0x8, 0x4, r16}], {0x10, 0x3}, {0x20, 0x1}}, 0xa4, 0x3) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, 0x2}, 0x10) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)=""/172, 0xac) [ 278.853205] binder: 7989:8018 transaction failed 29201/-22, size 0-32 line 3036 [ 278.878064] print_req_error: I/O error, dev loop0, sector 8 [ 278.883849] Buffer I/O error on dev loop0, logical block 2, async page read [ 278.891040] print_req_error: I/O error, dev loop0, sector 12 21:18:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="12"]}, 0x18}}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x445, 0x100000) 21:18:50 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0xfff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x2, 0x310, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x45a) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r2, 0x1, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0xfcb, 0x1}, 0x8) [ 278.896880] Buffer I/O error on dev loop0, logical block 3, async page read [ 278.901920] binder_alloc: binder_alloc_mmap_handler: 7989 20001000-20004000 already mapped failed -16 [ 278.918391] print_req_error: I/O error, dev loop0, sector 33800 [ 278.922741] binder: BINDER_SET_CONTEXT_MGR already set [ 278.924521] Buffer I/O error on dev loop0, logical block 8450, async page read [ 278.926709] print_req_error: I/O error, dev loop0, sector 33800 [ 278.930695] binder: 7989:8018 ioctl 40046207 0 returned -16 [ 278.937343] Buffer I/O error on dev loop0, logical block 8450, async page read 21:18:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x22, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0x7, @dev={[], 0xe}}) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) [ 279.033476] binder: 7989:8014 unknown command 148746251 [ 279.057806] binder: 7989:8014 ioctl c0306201 200000c0 returned -22 [ 279.084150] binder_alloc: 7989: binder_alloc_buf, no vma 21:18:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2abd, 0x14440) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/116, 0x74, 0x40, &(0x7f0000000500)=@ethernet={0x6, @local}, 0x80) r2 = syz_open_dev$mouse(&(0x7f00000005c0)='/dev/input/mouse#\x00', 0x20005, 0x400000) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) connect(0xffffffffffffffff, &(0x7f0000000300)=@sco={0x1f, {0x80000001, 0x1, 0x6, 0x80000001, 0x0, 0x101}}, 0x80) ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') fcntl$addseals(r2, 0x409, 0x0) sendfile(r1, r4, &(0x7f00000002c0)=0xe00, 0x1000007ffff000) [ 279.113017] binder: 7989:8018 transaction failed 29189/-3, size 0-32 line 2973 21:18:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="12"]}, 0x18}}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x445, 0x100000) [ 279.171933] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.189429] binder: undelivered TRANSACTION_ERROR: 29189 21:18:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f00000000c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="12"]}, 0x18}}, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x445, 0x100000) 21:18:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000040)=0x9) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x0, 0x6d, 0x20000000000014, 0x0, 0x0}, 0x1db) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00c727000000000000e305640e52"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000003c0)={0x84, @local, 0x1100, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x20000000000, 0x0, 0x800}, 0x2c) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x16, 0x8, "9b93d7a7e4fb39daab332f2646ffb445fad3e6c64c7d19642a6510b05534a93dd1a7783832ccacc5a22e5745656880afdcaa3e913561c539a8dd796454a735b0", "46e63151428224c434353aedc66eb25afeb82377b1c529267d29919b97a34529", [0x9, 0x3f]}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000680)={0x0, 0x0, 0x10001, 0x7}) ioctl$DRM_IOCTL_AGP_UNBIND(r7, 0x40106437, &(0x7f00000006c0)={r8, 0x28526e09}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x6, 0x9}, &(0x7f0000000380)=0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa26}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000045) poll(&(0x7f0000000440)=[{r4}, {r7, 0x4208}, {0xffffffffffffffff, 0x401}, {r2, 0x2}, {r5, 0x109}], 0x5, 0x3ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xb1, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0bb0dd083e178aad54873b562fe52f6950828ba125c384392c30338ee00067b6eabc1038b49ce196542a3524113e88c4da815f90558eff5d5167c660b2122d5b5388bb6954da9a7dba84777facc06d3c6df2ec15f212b46575e7c9604215ac0aec5a6a18026e0575adeb2eb0195aed56d80468a3e769544b7d7e2dfe1986c3a4d0041309bb370adbd5b12a40439810e8c5d1146e19ad09566c0ef14b23199c9ba8c338238b87ca684d0040df1a4901470d"], 0x1, 0x0, &(0x7f0000000140)="14"}) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xc1010, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=[0x48, 0x45c2fd6a264ae34a, 0x28, 0x38]}}], 0x0, 0x0, &(0x7f0000000300)}) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x101000) fstat(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r9, 0x5) 21:18:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x22, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0x7, @dev={[], 0xe}}) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 21:18:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x220000, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000005c0)=0xffffffffffff4413, 0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$apparmor_exec(r2, &(0x7f00000001c0)={'exec ', '\x00'}, 0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffffffffffffffe, @loopback}, {0xa, 0x4e25, 0x400, @remote, 0x2}, r5, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}, r5, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) sendto(r3, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x4000, 0x0) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000001fe8)={0x7f, 0x0, 0x0, 0xffffffffffffffff, 0x5}) r6 = semget$private(0x0, 0x7, 0x1) semctl$SEM_INFO(r6, 0x3, 0x13, &(0x7f00000003c0)=""/61) fcntl$setstatus(r2, 0x4, 0x0) shmget$private(0x0, 0x2000, 0x820, &(0x7f0000ffd000/0x2000)=nil) dup3(r3, r0, 0x0) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0), &(0x7f0000000140)='hash\x00', 0x0) 21:18:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="d045fdb6"], 0x4) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x40, 0x0) recvfrom(r3, &(0x7f0000000240)=""/243, 0xf3, 0x41, &(0x7f0000000340)=@nfc={0x27, 0x1, 0x0, 0x2}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10f7f"], 0x3) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x46bccd48, 0x400000) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) 21:18:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x6e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa000000004) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f00000001c0)="580000001400add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) [ 279.526911] binder: 8047:8050 unknown command 148746251 [ 279.551952] binder: 8047:8050 ioctl c0306201 200000c0 returned -22 21:18:51 executing program 1: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x37}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000001740)=""/155, 0xfffffffffffffde3}, {&(0x7f00000001c0)=""/11, 0xffb5}, {&(0x7f0000000300)=""/102, 0x66}], 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5}, {&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 21:18:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, &(0x7f00000004c0)="660f3a20e8002e2e0f23902e3e420fc7660048b867e275534fcc403c0f23d00f21f835100000080f23f865420f381e62020f009905000000b9800000c00f3235010000000f30420fae85000000800f225ef36741d01f", 0x56}], 0x1, 0x0, &(0x7f00000007c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000180)=0x7ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:18:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2abd, 0x14440) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/116, 0x74, 0x40, &(0x7f0000000500)=@ethernet={0x6, @local}, 0x80) r2 = syz_open_dev$mouse(&(0x7f00000005c0)='/dev/input/mouse#\x00', 0x20005, 0x400000) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) connect(0xffffffffffffffff, &(0x7f0000000300)=@sco={0x1f, {0x80000001, 0x1, 0x6, 0x80000001, 0x0, 0x101}}, 0x80) ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') fcntl$addseals(r2, 0x409, 0x0) sendfile(r1, r4, &(0x7f00000002c0)=0xe00, 0x1000007ffff000) [ 279.590207] binder: 8047:8050 got transaction with invalid offset (72, min 0 max 0) or object. [ 279.684362] binder: 8047:8050 transaction failed 29201/-22, size 0-32 line 3036 21:18:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000040)=0x81, 0x4) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x442001, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000280)={0x40, 0x6, 0x0, [{0x9, 0xff, 0x18, 0x6, 0x9, 0x6, 0xffffffffffffffff}, {0xfffffffeffffffff, 0x4, 0x8001, 0x4, 0x0, 0x66c, 0xffffffffffffff81}, {0x7ff, 0x4, 0xff, 0x5, 0x8, 0xfffffffffffffff8, 0x1ff}, {0xa82, 0x4, 0xfffffffffffffffe, 0x9, 0x9, 0x20}, {0xac9e, 0x5, 0x1, 0xc04, 0xfff, 0x3f6c, 0x7ff}, {0x3, 0x24a4, 0xff, 0x9, 0x0, 0x1, 0x3f}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f00009dd000), 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10}, 0x10}}, 0x0) 21:18:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0xc005, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x3d}, 0x7fc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") [ 279.788286] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.842570] kvm [8074]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000035 data 0x0 21:18:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r1, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_CLOCK(r2, 0xae78, &(0x7f0000000040)) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0xa) [ 279.892030] kvm [8074]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000031 data 0x0 21:18:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[{0x3, 0x7e3d81ea}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {0xc}, {}], 0x2000000000000324) [ 279.946440] kvm: pic: non byte read [ 279.950717] kvm: pic: non byte read [ 279.971015] kvm: pic: non byte read [ 279.985542] kvm [8074]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000016 data 0x0 21:18:51 executing program 3: ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000100)={{0x2, 0x4e22, @multicast1}, {0x6}, 0x2, {0x2, 0x4e22, @local}, 'veth0_to_bond\x00'}) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80000000, 0x10000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x3, 0x9, 0x3, 0x10000, 0x6, 0x2, 0x9, 0x1000000003, 0x6, 0x100}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x224000, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000600)=ANY=[], 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$BLKRRPART(r2, 0x125f, 0x0) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@rand_addr, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000001c0)=@ipx={0x4, 0x2, 0x9, "c220a378143c", 0x4}, 0x80, &(0x7f00000019c0), 0x0, &(0x7f0000001a80), 0x0, 0x20000000}, 0x805) [ 280.008878] kvm [8074]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000003a data 0x0 [ 280.032356] kvm [8074]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000003a data 0x0 [ 280.071026] kvm [8074]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000000d data 0x0 [ 280.118368] kvm [8074]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000006 data 0x0 21:18:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f0000001400)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000180)={0x0, 0x0, 0x13f, 0x1, 'syz0\x00', 0x2}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1, 0x1f5) sendto$inet6(r0, &(0x7f0000000040)="040300000309c14609005375c52cf7c21975e697b02f5c566b2b2ff0dac8897c6b11876d886b0000000000000002257e55e86eb29406cfb1d7a5c082e33faecf323a9e4472a5a1b0d9effc0a", 0x4c, 0x0, &(0x7f0000000000)={0xa, 0x800800, 0x5, @mcast2}, 0x1c) msgget$private(0x0, 0x40) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0), &(0x7f0000000300)=0x3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1c, &(0x7f00000001c0)=0x10001, 0x4) 21:18:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x22) r1 = accept4(r0, 0x0, &(0x7f0000000200)=0xffffff19, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x0, 0x20000000, 0x0, 0x18e) perf_event_open(&(0x7f000000a200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @rand_addr=0x2}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x1b8}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @local, 0x992}], 0x98) 21:18:52 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40282) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") poll(&(0x7f0000000000)=[{r0, 0x1}], 0xff, 0x0) renameat(r0, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000100)) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f0000000140)}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000002c0)={0x0, 0x3, 0x5, 0x3, 0x2}) 21:18:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, &(0x7f00000004c0)="660f3a20e8002e2e0f23902e3e420fc7660048b867e275534fcc403c0f23d00f21f835100000080f23f865420f381e62020f009905000000b9800000c00f3235010000000f30420fae85000000800f225ef36741d01f", 0x56}], 0x1, 0x0, &(0x7f00000007c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/65, 0x41}], 0x1, &(0x7f0000000a00)=""/181, 0xb5}}], 0x1, 0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000280), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000880)=0x800) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000009c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:18:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x220000, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000005c0)=0xffffffffffff4413, 0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$apparmor_exec(r2, &(0x7f00000001c0)={'exec ', '\x00'}, 0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffffffffffffffe, @loopback}, {0xa, 0x4e25, 0x400, @remote, 0x2}, r5, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}, r5, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) sendto(r3, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x4000, 0x0) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000001fe8)={0x7f, 0x0, 0x0, 0xffffffffffffffff, 0x5}) r6 = semget$private(0x0, 0x7, 0x1) semctl$SEM_INFO(r6, 0x3, 0x13, &(0x7f00000003c0)=""/61) fcntl$setstatus(r2, 0x4, 0x0) shmget$private(0x0, 0x2000, 0x820, &(0x7f0000ffd000/0x2000)=nil) dup3(r3, r0, 0x0) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0), &(0x7f0000000140)='hash\x00', 0x0) 21:18:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, &(0x7f00000004c0)="660f3a20e8002e2e0f23902e3e420fc7660048b867e275534fcc403c0f23d00f21f835100000080f23f865420f381e62020f009905000000b9800000c00f3235010000000f30420fae85000000800f225ef36741d01f", 0x56}], 0x1, 0x0, &(0x7f00000007c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"55c990aa4964e82a3ec457f4c7d69681319b32c4fe546fdaa52a7f1ee7a27d5f71fb895c4bf21bf0301d2a160f646d230ecc224077896302fd1e64ad393ef24145492c44f164e53100dc89f52d25895dcd4320f649fc784145767a5224088c492511d0a5d7bb0c0176706c238dfeee9caae8811ba9d2ec92a4a340c091647ae36123d290d72c375af37957c01aa945bdb6a7a6870069350c7c2ac6b9c032e80d8150743be19fbaf9447badcc1908d174e06fd466e64e24e3c892ee52a4b31338ad67030baeffa5bfa701c1e7bfbd8fd016d87018d05ab11f9e813877bd9cdf0884cbaabe09190f95550884f8a1e6510f6bbe96f86859597bf89741aea068e55b938ebee9d9bff58478513c4b72edbf79f75431b54743ab05d3980b30b2127cf13bf94beba0828a4bb1848bc1f862fac00698e4bd2f4bde3bb35107056c4147c0ed8d7d588ba03c37b82ea384d1db706a8b46ee351812ad747d1045540a48b542996812548270c5af5d27ff72920bebd8371348c7f55a953e236ac13fe737a81bd9b61e30a5e9c526cf61862f5a0a90963c73febe3b66ab29f17b6da74b7647bcc4e527356d57fa1fe3f3dffab39df7b353eda6b839decb4484939f4fc0c84bda1c964941ccf4db1ca0d2c152fd356ac66441c8b68755d533b416d9f7999678227c7a69db08e997252dd6a38fc458d93fac9f1f14f49b7ca4a0b0c8b538d2f30c34503a0975506ae9004b3e5c3d2469cf4e03d9b79dc1499647b5b680a02bdc56c18782c48120dee663918288f068c49d85355d114cfe0c5d1405cf5e37b181f296fa7dc9af116fbe220121fe139739226eefce468f27f5d21ab51ef0e26134c5341cf13799003ceb38d4050c2ba1c9e6decc2d11a8f14a6adadd45e615106b5dd4c07093ba114ac55b4e80d1a3545ab6e8fbf796b908ecc244340fc06e4d4bd6e069b7f0232198ab067a709bcdd4d41500e5dc7032e5993f965d4603033fe61cc523937d7345df42b4f1b62c4daf64f6c29eb2f214b88680bfe19252b67719ccea37d19fe3bfb0c8ad0bd6f4a1df532ec9220269453df5144ff48f63c2ad655b8f20db01b3af95c11f4e7de2bd0a47d47b08b620589a33327bef9ee310505c1736510e88b74281f098099c753d30fcf32f31a0521e32407d689b093f24d07049682ff4662b5b94616699fd704589c0edb02cf3e622088c685564b0c166f9f3cdb12dd8a70684ac6e24570191dda2db2b1965d2397a45060f834405b81fa79204e029b7cd93333dfbef669f3e480fd071f5b87e9fdf984dfe176353ed12ea15484366548336f540a5f1e8b9e19bdeb8d71dce9ecf03d09515bc4bcf7be382176e7e12395ee0f795f76695d0d90eee181d300deb89d7098403ac76309e63f6ca3eade1ce57dcd9de56e24610ed5c470d5540e9f50d068ee8a1431bb3216ae99b18"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000180)=0x7ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:18:52 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x220000, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000005c0)=0xffffffffffff4413, 0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$apparmor_exec(r2, &(0x7f00000001c0)={'exec ', '\x00'}, 0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffffffffffffffe, @loopback}, {0xa, 0x4e25, 0x400, @remote, 0x2}, r5, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}, r5, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) sendto(r3, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x4000, 0x0) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000001fe8)={0x7f, 0x0, 0x0, 0xffffffffffffffff, 0x5}) r6 = semget$private(0x0, 0x7, 0x1) semctl$SEM_INFO(r6, 0x3, 0x13, &(0x7f00000003c0)=""/61) fcntl$setstatus(r2, 0x4, 0x0) shmget$private(0x0, 0x2000, 0x820, &(0x7f0000ffd000/0x2000)=nil) dup3(r3, r0, 0x0) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0), &(0x7f0000000140)='hash\x00', 0x0) [ 280.525839] kvm [8117]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000035 data 0x0 [ 280.534680] kvm [8117]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000031 data 0x0 [ 280.545083] kvm: pic: non byte read [ 280.549946] kvm: pic: non byte read [ 280.553788] kvm: pic: non byte read [ 280.558239] kvm [8117]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000016 data 0x0 [ 280.610862] kvm: pic: non byte read [ 280.619674] kvm: pic: non byte read [ 280.641025] kvm: pic: non byte read 21:18:52 executing program 4: creat(&(0x7f0000000700)='./bus\x00', 0x4) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(0x0, r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) set_robust_list(&(0x7f0000000080)={0x0, 0x80000001}, 0xfffffd01) [ 280.665158] kvm: pic: non byte read 21:18:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, &(0x7f00000004c0)="660f3a20e8002e2e0f23902e3e420fc7660048b867e275534fcc403c0f23d00f21f835100000080f23f865420f381e62020f009905000000b9800000c00f3235010000000f30420fae85000000800f225ef36741d01f", 0x56}], 0x1, 0x0, &(0x7f00000007c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000180)=0x7ff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:18:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x101000) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r3, 0x3, &(0x7f0000000100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)}]) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 21:18:52 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000006c0)=""/151) 21:18:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x101000) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r3, 0x3, &(0x7f0000000100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)}]) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 21:18:53 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'ip_vti0\x00'}, 0x18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") listen(r0, 0x54094e12) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'veth0_to_bridge\x00'}, 0x18) 21:18:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x101000) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r3, 0x3, &(0x7f0000000100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)}]) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) [ 281.423675] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 0, id = 0 [ 281.453188] IPVS: stopping master sync thread 8173 ... 21:18:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x101000) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r3, 0x3, &(0x7f0000000100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)}]) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 21:18:53 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x800000000000007) getsockopt$inet6_buf(r0, 0x29, 0x18, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3ff, @remote, 0x100000000}, 0x1c) 21:18:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, 0x4000000, 0x0, 0x0, 0x257f8827, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x8000000010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 21:18:53 executing program 5: close(0xffffffffffffffff) accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="2a000000290100000000000000000009000000000000000000000007002e2f66696c6530000000000000e9f9bd3b598943ad96174d0b0b1740a2280d3645fa6067db67471ca568ed1cb7e015554c2df66f68367f0ed19ec291f7ce331435f73ceef15be2d94ad4c2b646f9018805682c78e7db72580827fe740d33597fd33ef9028ae41f721be0cbecf1ba2c0a74e768bb7c4c943fbbbbb1ae54bf857593369b4587e0c644223c9d075cd62e37b5754924a291f6f3580210c474332a933668c485fb4f1db7aba73e3385c10f60308c58fd3b804b2bc0576f09bd7a33720ff265d9de5b4a0009db689d2210cdf904f25a19821539d0113ba3aa0848c70e355df2a1ba57d5cb21c624a0078145312e585f1e613b7d254ca2be728554e8"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}]}}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='proc\'\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xab, 0x1000, &(0x7f0000000580)="abcc524f136c69bf0c73d1d6d4c24e6bfaf5d9e1391621a6ecac0e5c7276d054b9157d45a4ec0e7db8689406222f711bb90becdf3012e94b7ea50ec19f65962d62bdfcdd53bfaf39f1f4881912f5d21317ce63f447a8a43bdd7f15fe1f1f16070557c5f47649b6b6621f637e07d38179f2dd3a34d91ac2c5221899c43e2c01a037d0388fdabec58778f73c8da684104d7316380fd88789acf5470b0e4f905de64f35e6e37b1bb025947a58", &(0x7f0000000b80)=""/4096, 0x8000}, 0x28) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000340)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2000}, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000640)={"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"}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x81, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="2f6a7374617400c65381b47aaedf2af5c8af3423fc41891bd2a3c56d8c88e29bad43f1da906e855ff182de04227edcbbc2b1df8f180e158e8abd442cc049cffda030ff277875ee010000000000000000000000000000000000000000000000f532144d1671a6cdf5069e5bddcf25cd7f23956b4a82df900f5eb5763b4fe8cc7172962d2590b2dca2a1308c382541b053194d9027d83ee7ba2e3280857f8f9f63fc90bae959c6e67078bf97e615bfd9409914958aadcfb37973543c60d83526e5c267f7dfa54bd524cc9671dedd665199322bdadee125a35b40b7be0c07301f439a7edfa26fa98277c8078b02e2076291c33787c58b0eabbc39288fc10509409de108f5ca26a8c8e1afb70b2a9569cf8f4cdb6d4e97eb7fdf241dee160e6071618333cc0b0e8bc6a17a0b7d604550fd149ad078ffe54c6392fba29015a3ae73774cd12c9c0ed251a7cf843d712d", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000000)) 21:18:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[]}}, 0x40000000001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200140002000000000000000000000105000600200000000a00000000000010000500e50000070000401f000000e9ffff020000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x8000000000000f1, 0x0) [ 281.571779] IPVS: stopping master sync thread 8175 ... [ 281.571990] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 0, id = 0 [ 281.680497] sched: DL replenish lagged too much 21:18:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000700)={{0xa, 0x4e20, 0x0, @loopback, 0x3}, {0xa, 0x4e21, 0x2, @remote, 0xf269}, 0x9, [0x6, 0x8000, 0xfffffffffffffff8, 0x68dd7b42, 0x3, 0x1033, 0xf95b, 0x7]}, 0x5c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x3f, 0x20}, &(0x7f0000000100)=0xc) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000640)=0xe8) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0xa58d, 0x4, &(0x7f0000000400)=[{&(0x7f0000000200)="26e0695214", 0x5, 0x8}, {&(0x7f00000002c0)="73b95f55f4fed687a50bdbd87428bcf6c37b33ba3c3a4fde432f54904f259f690f8c073b6b9b0818cafa5049a55920b534c5b1a96e92fc8685b7c6e8b04ffce470f2c16e97fda5a8e7ef56bf2912a107a71057a5c7e98cc7edf6ff0e796a4d14dd881fe446d97348f9609e1a312fb8927661526675fc0359a88d59f0aa61c22688c3008b6fd0ad019edef7ba709434", 0x8f, 0x5}, {&(0x7f0000000380)="244eb4f746425253be3c47ec8ce8bce468aeaba851319f50fb3cd81450b85e0512e117154c05678eece12ff4619e1f3a7e6003c0920b2d125658685db8c0fbbbe2272d26dd5f2cd5bd9920c3e4e092aa1284fed28c6cff22523bb15d59a9c99261382836bb5c7d", 0x67}, {&(0x7f0000000240)="b4b441840bae6c7ce5f931a5379463178e841e59d36b89d200b1bfedf0b3198bc07688", 0x23, 0x7}], 0x250000, &(0x7f0000000680)={[], [{@fowner_lt={'fowner<', r5}}, {@dont_measure='dont_measure'}, {@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r6}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64], 0xfffffdf3) close(r2) recvmmsg(r1, &(0x7f0000005b80)=[{{&(0x7f0000005440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000005600)=[{&(0x7f0000005540)=""/163, 0xa3}], 0x1, &(0x7f0000005640)=""/190, 0xbe}}, {{&(0x7f0000005700)=@ipx, 0x80, &(0x7f0000005840)}}], 0x2, 0x0, &(0x7f0000005d00)={0x0, 0x989680}) close(r1) 21:18:53 executing program 2: setpriority(0x0, 0x0, 0x7) unshare(0x8000000) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80000, 0x0) mq_getsetattr(r0, &(0x7f00000000c0)={0x4, 0xc0f, 0x2, 0x9, 0x4, 0x6, 0x4, 0x5}, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x8}) mq_timedreceive(r1, &(0x7f0000000240)=""/162, 0xa2, 0x0, &(0x7f0000000100)={0x77359400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedreceive(r1, &(0x7f0000000300)=""/199, 0xc7, 0x0, &(0x7f0000000040)={0x77359400}) mq_timedreceive(r1, &(0x7f0000000180)=""/160, 0xa0, 0x0, 0x0) 21:18:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xb, 0x0) read(r2, &(0x7f0000000100)=""/158, 0x9e) ioctl$int_in(r2, 0x800000c0045005, &(0x7f00000000c0)=0x40000) close(r2) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000880)) syz_open_dev$radio(&(0x7f00000008c0)='/dev/radio#\x00', 0x0, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000940)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000980)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = shmget$private(0x0, 0x1000, 0x204, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000900)=""/60) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000000700)=""/151, 0x97}], 0xa, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000a00)) 21:18:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[]}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 21:18:53 executing program 5: close(0xffffffffffffffff) accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}]}}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='proc\'\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xab, 0x1000, &(0x7f0000000580)="abcc524f136c69bf0c73d1d6d4c24e6bfaf5d9e1391621a6ecac0e5c7276d054b9157d45a4ec0e7db8689406222f711bb90becdf3012e94b7ea50ec19f65962d62bdfcdd53bfaf39f1f4881912f5d21317ce63f447a8a43bdd7f15fe1f1f16070557c5f47649b6b6621f637e07d38179f2dd3a34d91ac2c5221899c43e2c01a037d0388fdabec58778f73c8da684104d7316380fd88789acf5470b0e4f905de64f35e6e37b1bb025947a58", &(0x7f0000000b80)=""/4096, 0x8000}, 0x28) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000340)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2000}, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000640)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x81, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000000)) 21:18:53 executing program 0: close(0xffffffffffffffff) accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}]}}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='proc\'\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xab, 0x1000, &(0x7f0000000580)="abcc524f136c69bf0c73d1d6d4c24e6bfaf5d9e1391621a6ecac0e5c7276d054b9157d45a4ec0e7db8689406222f711bb90becdf3012e94b7ea50ec19f65962d62bdfcdd53bfaf39f1f4881912f5d21317ce63f447a8a43bdd7f15fe1f1f16070557c5f47649b6b6621f637e07d38179f2dd3a34d91ac2c5221899c43e2c01a037d0388fdabec58778f73c8da684104d7316380fd88789acf5470b0e4f905de64f35e6e37b1bb025947a58", &(0x7f0000000b80)=""/4096, 0x8000}, 0x28) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000340)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2000}, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000640)={"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"}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x81, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000000)) 21:18:53 executing program 1: close(0xffffffffffffffff) accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}]}}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='proc\'\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xab, 0x1000, &(0x7f0000000580)="abcc524f136c69bf0c73d1d6d4c24e6bfaf5d9e1391621a6ecac0e5c7276d054b9157d45a4ec0e7db8689406222f711bb90becdf3012e94b7ea50ec19f65962d62bdfcdd53bfaf39f1f4881912f5d21317ce63f447a8a43bdd7f15fe1f1f16070557c5f47649b6b6621f637e07d38179f2dd3a34d91ac2c5221899c43e2c01a037d0388fdabec58778f73c8da684104d7316380fd88789acf5470b0e4f905de64f35e6e37b1bb025947a58", &(0x7f0000000b80)=""/4096, 0x8000}, 0x28) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000340)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2000}, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000640)={"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"}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x81, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000000)) 21:18:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x109) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f00000002c0)=""/250, &(0x7f00000000c0)=0xfa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="f866b8f3ffffff0f23c80f21f866350800a0000f23f80f01da14000f2344f0826500030f20d86635080000000f22d866b9800000c00f326635000100000f30f0207c0066b8006000000f23d00f21f86635300000030f23f8", 0x58}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="06828416a7cf3acea3863d67b252a58ee61d24ce31d0fd", 0x17}) 21:18:54 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0), &(0x7f0000000a80)=0x353) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000c00)=0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005800)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@rand_addr}}, &(0x7f0000005900)=0xe8) r3 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x100000001f, &(0x7f0000000300)=0x6, 0x3dd) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)=' \x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3d, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], r2}, 0x48) r4 = request_key(&(0x7f0000000cc0)='trusted\x00', &(0x7f0000000d00)={'syz', 0x0}, &(0x7f0000000d40)='nfs\x00', 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000c40)='keyring\x00', &(0x7f0000000c80)={'syz', 0x2}, 0x0, 0x0, r4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000380)) exit(0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180), 0xc) write$P9_RSTATFS(r3, &(0x7f0000000b00)={0x43, 0x9, 0x2, {0x3ff, 0x9, 0x1, 0xd0, 0xffff, 0x5, 0x0, 0xffffffff, 0x1f}}, 0x43) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000b80)={0x0, 0x71, "d086cb160a4bb008e3fd8568f8a4d0e206fac4eedb296aae3ad8e9474f86990fdfb89e6819ee5325c47cbca12b7d2f8fc8a926a05c8e32fd507f8aa6f223812354c5d3f59e1d45fb61dfd621594490abbf82da1be1af35884218d07d08e93ea806c4643abaf05fb32c29c12552c22a1df1"}, &(0x7f0000000280)=0x79) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000440)={r5, 0x2, 0x2}, 0x8) r6 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)='GPL\x00', 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000680)=0xc) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rfkill\x00', 0x400000, 0x0) add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000006c0)="12ed1e092826894cbb2c96d8deccc428155a6c735f2706a504dfb6affdf286e4948cdcff260410a95c9b43af5898c920b4730286ed55625e5fc4c1f5abe3b470c548fc9ccad07fa1d318af0d76900a69527a5f0ad033e73a65b7913212c5f550359d882c932460510244208ba03bb07b164ce9c79d1c", 0x76, r6) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f0000000800)=0x3) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') syz_mount_image$nfs(&(0x7f0000000600)='nfs\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x1010088, &(0x7f0000000740)='user:') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x44000040}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000000000fedbdf2511000000"], 0x1}}, 0x800) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz1'}, 0x4) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000002c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) [ 282.539464] kvm: emulating exchange as write 21:18:54 executing program 1: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[]) r0 = getpid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x200000000000000}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) sched_setaffinity(r2, 0xffffffffffffffd9, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x28) close(r3) fsetxattr$security_selinux(r1, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000400)={0x6, 0x0, 0x5f4, 0x7, 0x20}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) write$P9_RXATTRCREATE(r6, &(0x7f00000001c0)={0x7}, 0x7) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) sendfile(r3, r6, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x80) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x3) ptrace(0x11, r0) write(r1, &(0x7f00000002c0)="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", 0xff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)}, 0x10) 21:18:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl(r2, 0x5, &(0x7f0000000080)="881f700b121bfad606becf971a6af8742d7744054e0448311a3dd554168942") sendto(r2, &(0x7f0000000100)="0aef5b2189a917d448a3a616b7d7d594e508a823bedb87e1eb73057a5f6afa7404629b27fd998568b29bcd", 0x2b, 0xd0, &(0x7f0000000140)=@rc={0x1f, {0x4, 0x4, 0x2, 0x7fff, 0x3, 0x5}, 0xbf49}, 0x80) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$TCFLSH(r0, 0x541b, 0x70f000) 21:18:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r2) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="ac93f9714864fcca590433948eba9a50340442b52bd8d640221ff29b708d27f8a986ad5970cc06408ba7452be3905c9800770f93640cf50de6d8e5ed30e95b97f9560500000022e5cc65fa9c2fbbfa57dac08e1451cfb1da4c34ba9fe9711b65be5ff4646377bed2a798d3fc315cd03d3d3a34792ecd8d84d88f251154d8712d9d5b527d9eee5893cc40b200a882afe487ee5b95c335b39e6d205a71375d8426e35aa83596889f30d1e6000000000000000000000000006fbc3454f83e7313d18ac0ce36121ec5ec694716574ae19cec6b20a41490cc387bffae8669c8274a63dad220"]]], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x5000000fffffffe, @empty, [0x5a8, 0x3e8, 0x0, 0x4000]}, 0x0) ustat(0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x19, &(0x7f0000000200)={0x77359400}, 0x10) 21:18:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)="6367726f75702e636c6f6e655f6368696c6472658b00", 0x2, 0x0) fchmod(r1, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0x74) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) 21:18:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shmget(0x2, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x4000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) recvmmsg(r2, &(0x7f0000008e40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000040)=""/38, 0x26}], 0x3, &(0x7f0000000340)=""/205, 0xcd, 0x4}, 0x1}, {{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/209, 0xd1}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/94, 0x5e}, {&(0x7f0000000880)=""/125, 0x7d}, {&(0x7f0000000900)=""/231, 0xe7}], 0x8, &(0x7f0000000a80)=""/4096, 0x1000, 0x1}, 0x1}, {{&(0x7f0000001a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/102, 0x66}], 0x1, &(0x7f0000001bc0)=""/149, 0x95, 0x2}, 0x7}, {{&(0x7f0000001c80)=@rc, 0x80, &(0x7f0000005000)=[{&(0x7f0000001d00)=""/177, 0xb1}, {&(0x7f0000001dc0)=""/167, 0xa7}, {&(0x7f0000001e80)=""/36, 0x24}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/184, 0xb8}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/97, 0x61}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x8, &(0x7f0000005080)=""/161, 0xa1, 0x1}, 0x7f}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000005140)=""/125, 0x7d}], 0x1, &(0x7f0000005200)=""/231, 0xe7, 0x40}, 0x100000000}, {{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/224, 0xe0}, {&(0x7f0000006400)=""/124, 0x7c}], 0x3, &(0x7f00000064c0)=""/146, 0x92, 0x8}, 0x100000000}, {{&(0x7f0000006580)=@alg, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006600)=""/189, 0xbd}], 0x1, &(0x7f0000006700)=""/107, 0x6b, 0x5c58863e}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000006940)=[{&(0x7f0000006780)=""/166, 0xa6}, {&(0x7f0000006840)=""/242, 0xf2}], 0x2, 0x0, 0x0, 0xfffffffffffffffa}, 0x40f7}, {{&(0x7f0000006980)=@nl, 0x80, &(0x7f0000007ac0)=[{&(0x7f0000006a00)=""/171, 0xab}, {&(0x7f0000006ac0)=""/4096, 0x1000}], 0x2, &(0x7f0000007b00)=""/4096, 0x1000, 0x2}, 0x9}, {{&(0x7f0000008b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000008d40)=[{&(0x7f0000008b80)=""/238, 0xee}, {&(0x7f0000008c80)=""/183, 0xb7}], 0x2, &(0x7f0000008d80)=""/142, 0x8e, 0x6}, 0x10001}], 0xa, 0x1, &(0x7f00000090c0)={0x0, 0x1c9c380}) 21:18:54 executing program 2: write(0xffffffffffffffff, &(0x7f0000000140), 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x603) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000), 0x4) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00h'}, &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0) ioctl(r0, 0x3, &(0x7f0000000700)="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") socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000300), &(0x7f0000000080)=0x4) 21:18:54 executing program 0: getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001340)=""/178, &(0x7f00000001c0)=0xb2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000500)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f00000017c0), 0x1a1, 0x0) 21:18:54 executing program 2: r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev_snmp6\x00') unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) [ 283.059331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.126856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.164824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 21:18:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r2) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="ac93f9714864fcca590433948eba9a50340442b52bd8d640221ff29b708d27f8a986ad5970cc06408ba7452be3905c9800770f93640cf50de6d8e5ed30e95b97f9560500000022e5cc65fa9c2fbbfa57dac08e1451cfb1da4c34ba9fe9711b65be5ff4646377bed2a798d3fc315cd03d3d3a34792ecd8d84d88f251154d8712d9d5b527d9eee5893cc40b200a882afe487ee5b95c335b39e6d205a71375d8426e35aa83596889f30d1e6000000000000000000000000006fbc3454f83e7313d18ac0ce36121ec5ec694716574ae19cec6b20a41490cc387bffae8669c8274a63dad220"]]], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x5000000fffffffe, @empty, [0x5a8, 0x3e8, 0x0, 0x4000]}, 0x0) ustat(0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x19, &(0x7f0000000200)={0x77359400}, 0x10) 21:18:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x80000) open(&(0x7f00000000c0)='./file0\x00', 0x10900, 0x40) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1f, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x6}}) close(r4) close(r3) [ 283.273713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 21:18:55 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000280)={0xffffffffffffffff, 0x20000008}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 283.321108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:18:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xff800000000000, 0x20000800) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x1) [ 283.864145] print_req_error: 3110 callbacks suppressed [ 283.864155] print_req_error: I/O error, dev loop0, sector 33664 [ 283.875582] buffer_io_error: 3110 callbacks suppressed [ 283.875592] Buffer I/O error on dev loop0, logical block 8416, async page read [ 283.888991] print_req_error: I/O error, dev loop0, sector 33668 [ 283.895115] Buffer I/O error on dev loop0, logical block 8417, async page read [ 283.903375] print_req_error: I/O error, dev loop0, sector 33784 [ 283.909535] Buffer I/O error on dev loop0, logical block 8446, async page read [ 283.916970] print_req_error: I/O error, dev loop0, sector 33788 [ 283.923034] Buffer I/O error on dev loop0, logical block 8447, async page read [ 283.931472] print_req_error: I/O error, dev loop0, sector 0 [ 283.937251] Buffer I/O error on dev loop0, logical block 0, async page read [ 283.944375] print_req_error: I/O error, dev loop0, sector 4 [ 283.950149] Buffer I/O error on dev loop0, logical block 1, async page read [ 283.958227] print_req_error: I/O error, dev loop0, sector 8 [ 283.963991] Buffer I/O error on dev loop0, logical block 2, async page read [ 283.971161] print_req_error: I/O error, dev loop0, sector 12 [ 283.977016] Buffer I/O error on dev loop0, logical block 3, async page read [ 283.987145] print_req_error: I/O error, dev loop0, sector 33800 [ 283.993256] Buffer I/O error on dev loop0, logical block 8450, async page read [ 284.001736] print_req_error: I/O error, dev loop0, sector 33800 [ 284.007861] Buffer I/O error on dev loop0, logical block 8450, async page read 21:18:55 executing program 2: socket$unix(0x1, 0x80000000000001, 0x0) socket$unix(0x1, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000026766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) write(r1, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000240)) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'rose0\x00'}) syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) 21:18:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) prctl$setptracer(0x59616d61, r1) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @broadcast}}) r2 = getpid() getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000280)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000240)={0xffffffff, 0x1, 0x400, 0xc6, &(0x7f0000000100)=""/198, 0xb2, &(0x7f00000002c0)=""/178, 0x2, &(0x7f0000000200)=""/2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3d, &(0x7f0000000080), 0x4) 21:18:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000013c0)={0x58, 0x0, &(0x7f0000000340)=[@acquire_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f00000003c0)}) 21:18:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1000, 0x240) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000080)={0x0, 0x5, 0x8, &(0x7f0000000040)=0x4}) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x8}], 0x18}, 0x0) 21:18:55 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0xb}}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bond_slave_1\x00') 21:18:55 executing program 1: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[]) r0 = getpid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x200000000000000}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) sched_setaffinity(r2, 0xffffffffffffffd9, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x28) close(r3) fsetxattr$security_selinux(r1, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000400)={0x6, 0x0, 0x5f4, 0x7, 0x20}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) write$P9_RXATTRCREATE(r6, &(0x7f00000001c0)={0x7}, 0x7) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) sendfile(r3, r6, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x80) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x3) ptrace(0x11, r0) write(r1, &(0x7f00000002c0)="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", 0xff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)}, 0x10) 21:18:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/hci\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/90, 0x5a}], 0x1, 0x14cd) [ 284.145340] binder: 8317:8320 BC_ACQUIRE_DONE node 6 has no pending acquire request [ 284.169282] binder: 8317:8320 got transaction to context manager from process owning it [ 284.188188] binder: 8317:8320 transaction failed 29201/-22, size 0-0 line 2825 21:18:56 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1, 0x100) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000001c0)={0xff, 0x1, 0x0, 0x3}) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000140)='./file0\x00', r1, r2) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="736d61636b66736861743d7ebdef71e23c73439d24910a6d643573756d76626f786e6574312c736d61636b66732f636f2e74726f6c432300abbe4b1392bbd6e4c42c00"]) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x800000000000027d, 0x20000) write$cgroup_subtree(r3, &(0x7f0000000300)={[{0x2b, "fffffcff"}, {0x2d, 'pids'}, {0x2f, 'cpu'}, {0x2d, 'io'}, {0x2d, 'io'}]}, 0x19) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0xb9, 0x40040) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x8) 21:18:56 executing program 5: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0xffbd) sendto$inet6(r0, &(0x7f00000002c0)="86bafa4a07aef1e4b4eee26cf2fef7085dd2fa3f43a7502de7129cc356fa23189daf3fdfca3dc4f3b4dbe29c2619df1bf86c317d1b10ef31bb6c24e29c59e3953d256a3667c6f7567fe4e020f8de02f07618a2bd00f4274ad4b0d18fe042b6d73750c06f024d157ea9d1b05e7ef2dfa260fd51c0649fb0edd62e86959a3d4a2ea319b7dcc187acd000ae5c131d05b6c5c9bb41c1d01595c42a58a2ba85fcf2a0d8463d67666feab20a4503639e309237d42ce6411a73b48ca833d255428e440a56e6e97ed8fc120ef98c132ebb0568605a0458be6a7c8d0f690edc5188c14b5dcee760c4cedf7cab67b93fd64ec8d2e28fdf3c958c4b02", 0xf7, 0x40000, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @local, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0xf4010000, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 21:18:56 executing program 0: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000001100)=0x80000001) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x402, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xe03) [ 284.280109] binder: undelivered TRANSACTION_ERROR: 29201 21:18:56 executing program 3: r0 = getpid() sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001280)='/dev/uhid\x00', 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x3, 0x70, 0x20, 0x1f, 0xe28, 0x9, 0x0, 0x2d9, 0xd0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x9d3, 0x0, 0x5, 0x0, 0x10000, 0x0, 0x0, 0x4, 0x758, 0xff, 0x0, 0x3f, 0xff, 0x0, 0x7, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000011c0), 0x8}, 0x2000, 0xfff, 0x80000000, 0xd, 0x0, 0x9, 0xfffffffffffffff8}, r0, 0x7, r2, 0x0) socket$inet6(0xa, 0x803, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) ioctl$KVM_NMI(r3, 0xae9a) r4 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r6 = dup2(r5, r4) pselect6(0x40, &(0x7f0000000040)={0x8001, 0x3, 0x0, 0x0, 0x9a}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x7, 0x0, 0x81, 0x0, 0x7b}, &(0x7f00000000c0)={0x3, 0x9, 0x0, 0x2, 0x100000000, 0x7}, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000140)={0x80}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) mmap(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000480)={0x0, 0x0, 0x80000001, 'queue0\x00', 0x10000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000380)) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) fstatfs(r7, &(0x7f00000001c0)=""/4096) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) epoll_create1(0x0) [ 284.550593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:18:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/ipc\x00') sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x34003}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="37fdffff2800080029bd70007f00000015000000"], 0x14}}, 0x0) 21:18:57 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x8001, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x541000, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1, r2}) 21:18:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008913, &(0x7f0000000140)="0a5c2dfcce142685717070655ed1e6b385c0bdf3242e5f402747a1b80522627ac12ec9c4faff4d3e1e8f323e66ea260fadd4a52947352c1bd3004ae4d26ffe2b4122177c1b") r1 = memfd_create(&(0x7f00000004c0)="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", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, "7175657565310000000000000000000000000000220000000000000000000078e9000000060000000000ccbf7ddd000000003f000d4500"}) write$sndseq(r1, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {0xf401}, @connect}], 0xffffff76) 21:18:57 executing program 0: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300)='cgroup.type\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000340)={0x7, 0x94, 0x4, 'queue1\x00', 0x3f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_getres(0x2, &(0x7f0000000080)) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="9273f37292675b4191c9b2ed5041e85fca009210979c738e7713000000"], 0x1) 21:18:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @local}}, 0x0, 0x1, 0x0, "d0d6da7076e758bde75e37467d5bcc6e6f33a354ca80942257501777b59fa0b6fc4c6fcbb4cc3be715b69f49252dcaa248f70c0036517e49ec4b86db5c037f9b72bbda52ae894a7af084010fd24bd1f3"}, 0xd8) r2 = syz_open_dev$dspn(&(0x7f0000000c40)='/dev/dsp#\x00', 0x5, 0x400) socket$inet(0x2, 0x0, 0x400) faccessat(r2, &(0x7f0000000c80)='./file0\x00', 0x82, 0x400) sendto$inet(r1, &(0x7f0000000000)="d5a02543e3ca", 0x6, 0x2000560e, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0x0, 0x2]}, 0x10) poll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0xed5) shutdown(r1, 0x2200000008000001) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000180)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000140)={0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}]}) r4 = getpid() process_vm_readv(r4, &(0x7f0000000680)=[{&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/44, 0x2c}], 0x2, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/155, 0x9b}, {&(0x7f0000000780)=""/104, 0x68}, {&(0x7f0000000800)=""/170, 0xaa}, {&(0x7f00000008c0)=""/52, 0x34}, {&(0x7f0000000900)=""/202, 0xca}, {&(0x7f0000000a00)=""/139, 0x8b}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/171, 0xab}], 0x8, 0x0) sendto$inet(r3, &(0x7f0000000cc0)="31813c10f6f006603665d0402b2a31a4c6c4b9b5c65c62a55eea21bc14393f0121fca63070e7fb4124c4882f0d8253cfff5bb89de5d719a3dcf8f93cce226a7cba5ce4412cc33e7bc205f3bf12592044668a4bee01eab5f1798092ceb21edb77a944c00b90b3f4949b4ab891bed9e5ed686195bf", 0x74, 0x40000, 0x0, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x2f, &(0x7f0000000d40)={@dev, @broadcast, @multicast1}, &(0x7f0000000d80)=0xc) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000100)) [ 285.518363] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:18:57 executing program 3: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000004c0)={[{0x2d1, 0x3, 0x1, 0x270c, 0x10001, 0x1, 0x0, 0x401, 0x6, 0x12, 0x8001, 0x8, 0xed}, {0x7527, 0x10000, 0x2b60, 0x7f, 0x2, 0x99d9, 0x6400000, 0x101, 0x20, 0x3, 0x8, 0xfa4, 0x4}, {0x0, 0x680, 0x10001, 0xa8f, 0x0, 0x7, 0xfffffffffffffff8, 0xffffffffffff8001, 0x8, 0x100000000, 0x100, 0x9, 0x5}], 0x7ff}) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x4001, 0x94, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000480)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) semget$private(0x0, 0x0, 0x181) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000300)={0x5, 0x0, 0x100000000009, 0x5, 0x0, 0x0, 0xfffffffffffffff9, 0x80000000000, 0x0, 0x10000}) syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000340)) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/222, 0xde}, {&(0x7f0000000380)=""/55, 0x37}, {&(0x7f0000000900)=""/198, 0xc6}], 0x3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xdb, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="05630440000000227e000db7ca34512c0f56b1fc7e014c2a2dbf4ae037cc73835c3b4c76b0bb654c0bd40438403798caf302dcbed58591014279bac1c971ecf41a2adb1652758cb3ddd1f205cf1587d5558977e0adaa935ab8255ff64f51f2d0be49252a046909b08abe0fae054c1686bc7d1a65e60912ad477568e824e721ccbc60a315897e529ebf21a3a54c2a861a7ba65624537a30ff4815297d1cf15ee04f7731940e0f646727ba502713432a3b656b02050000004b1a639814d3ae8895c442376f610c3b9fe63f20e2b64c31cbb4ca55846951b6e4b63917ee21168ebb7ad53c106f63c59323da9d6ac67ad410ba0a9a3fdda0bc11af1747b459aec5240be806000000000000005b1d91dddd36bca2128e45c1f1d5028cb16c5d3f00a8f94fde098c5d9787bc361a44f219c55265310e1770686c5430e45b0d61dd49a5b81b3f45a4a5d6cb5b2ae1317eca8614ce62b788118b4ed8f63d1bf8e9e5191763f3d5a1a9ea4f465f0fe0c207c6e202397fd4fdb413578c93f583c9d1"], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{0x7ff, 0x92}, {0x6ab9, 0x7}, 0x5, 0x7, 0x9}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580)) lstat(&(0x7f0000000100)='./bus\x00', &(0x7f00000003c0)) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x113, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x0, 0x1, @ib={0x1b, 0x0, 0x2, {"7bfa2cf8852a2f002ebb0be57a500899"}, 0xfffffffffffffff7}}}, 0xa0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 390.085677] rcu: INFO: rcu_preempt self-detected stall on CPU [ 390.091742] rcu: 0-....: (1 GPs behind) idle=3d6/1/0x4000000000000002 softirq=10332/10333 fqs=5225 [ 390.101234] rcu: (t=10500 jiffies g=11041 q=1602) [ 390.106240] NMI backtrace for cpu 0 [ 390.109849] CPU: 0 PID: 8328 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #114 [ 390.117099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.126485] Call Trace: [ 390.129106] [ 390.131325] dump_stack+0x244/0x39d [ 390.134940] ? dump_stack_print_info.cold.1+0x20/0x20 [ 390.140192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.145740] ? do_raw_spin_lock+0x14f/0x350 [ 390.150074] nmi_cpu_backtrace.cold.2+0x5c/0xa1 [ 390.154744] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 390.159930] nmi_trigger_cpumask_backtrace+0x1e8/0x22a [ 390.165203] arch_trigger_cpumask_backtrace+0x14/0x20 [ 390.170397] rcu_dump_cpu_stacks+0x16f/0x1bc [ 390.174807] print_cpu_stall.cold.67+0x1f3/0x3c7 [ 390.179547] ? print_other_cpu_stall+0x160/0x160 [ 390.184285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.189805] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.195344] ? do_trace_rcu_torture_read+0x10/0x10 [ 390.200266] ? rcu_preempt_need_deferred_qs+0x74/0x1f0 [ 390.205542] ? __lock_is_held+0xb5/0x140 [ 390.209591] ? __rcu_read_lock+0x50/0x50 [ 390.213634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.219152] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.224723] ? check_preemption_disabled+0x48/0x280 [ 390.229742] rcu_check_callbacks+0xf3b/0x13f0 [ 390.234224] ? rcutree_dead_cpu+0x10/0x10 [ 390.238360] ? lock_downgrade+0x900/0x900 [ 390.242505] ? lock_release+0x970/0xa00 [ 390.246466] ? zap_class+0x640/0x640 [ 390.250167] ? zap_class+0x640/0x640 [ 390.253862] ? zap_class+0x640/0x640 [ 390.257562] ? zap_class+0x640/0x640 [ 390.261257] ? find_held_lock+0x36/0x1c0 [ 390.265302] ? cpuacct_account_field+0x219/0x3d0 [ 390.270042] ? zap_class+0x640/0x640 [ 390.273773] ? kasan_check_read+0x11/0x20 [ 390.277926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.283455] ? check_preemption_disabled+0x48/0x280 [ 390.288474] ? trace_hardirqs_off+0xb8/0x310 [ 390.292880] ? __lock_is_held+0xb5/0x140 [ 390.296936] ? trace_hardirqs_on+0x310/0x310 [ 390.301362] ? check_preemption_disabled+0x48/0x280 [ 390.306415] ? raise_softirq+0x199/0x420 [ 390.310476] ? raise_softirq_irqoff+0x2e0/0x2e0 [ 390.315157] ? account_system_index_time+0x333/0x5d0 [ 390.320244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.325782] ? check_preemption_disabled+0x48/0x280 [ 390.330783] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 390.336442] ? hrtimer_run_queues+0x9a/0x400 [ 390.340840] ? run_local_timers+0x19b/0x230 [ 390.345143] ? timer_clear_idle+0x90/0x90 [ 390.349278] ? irqtime_account_process_tick.isra.6+0x35b/0x490 [ 390.355235] ? account_process_tick+0x282/0x350 [ 390.359906] update_process_times+0x2d/0x70 [ 390.364241] tick_sched_handle+0x9f/0x180 [ 390.368379] tick_sched_timer+0x45/0x130 [ 390.372466] __hrtimer_run_queues+0x41c/0x10d0 [ 390.377035] ? tick_sched_do_timer+0x1a0/0x1a0 [ 390.381599] ? hrtimer_start_range_ns+0xe00/0xe00 [ 390.386476] ? pvclock_read_flags+0x160/0x160 [ 390.390968] ? trace_hardirqs_on+0x310/0x310 [ 390.395363] ? kvm_clock_read+0x18/0x30 [ 390.399324] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 390.404321] ? ktime_get_update_offsets_now+0x3b3/0x540 [ 390.409700] ? do_timer+0x50/0x50 [ 390.413137] ? rwlock_bug.part.2+0x90/0x90 [ 390.417367] ? trace_hardirqs_on+0x310/0x310 [ 390.421758] ? rcu_softirq_qs+0x20/0x20 [ 390.425725] hrtimer_interrupt+0x313/0x780 [ 390.429978] smp_apic_timer_interrupt+0x1a1/0x760 [ 390.434808] ? smp_reschedule_interrupt+0x109/0x650 [ 390.439806] ? smp_call_function_single_interrupt+0x650/0x650 [ 390.445680] ? interrupt_entry+0xb5/0xc0 [ 390.449732] ? trace_hardirqs_off_caller+0xbb/0x310 [ 390.454730] ? trace_hardirqs_off_caller+0xbb/0x310 [ 390.459744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.464570] ? trace_hardirqs_on_caller+0x310/0x310 [ 390.469566] ? trace_hardirqs_on_caller+0x310/0x310 [ 390.474566] ? task_prio+0x50/0x50 [ 390.478092] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.483640] ? check_preemption_disabled+0x48/0x280 [ 390.488645] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.493473] apic_timer_interrupt+0xf/0x20 [ 390.497683] [ 390.499919] RIP: 0010:_raw_spin_unlock_irq+0x56/0x80 [ 390.505005] Code: 51 89 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 32 48 83 3d 43 4e 82 01 00 74 1f fb 66 0f 1f 44 00 00 01 00 00 00 e8 60 05 86 f9 65 8b 05 79 40 32 78 85 c0 74 05 5b [ 390.523885] RSP: 0018:ffff888179406c68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 390.531575] RAX: dffffc0000000000 RBX: ffff8881dae2ccc0 RCX: 1ffff1102f2fcd2c [ 390.538823] RDX: 1ffffffff12a3f70 RSI: 0000000000000000 RDI: ffffffff8951fb80 [ 390.546114] RBP: ffff888179406c70 R08: ffff8881797e6960 R09: 0000000000000006 [ 390.553394] R10: 0000000000000000 R11: ffff8881797e60c0 R12: ffff8881797e66e0 [ 390.560646] R13: ffffffff882afea0 R14: ffff8881dae2ccc0 R15: ffff8881797e60c0 [ 390.567943] ? _raw_spin_unlock_irq+0x27/0x80 [ 390.572433] __schedule+0x168a/0x21d0 [ 390.576217] ? mark_held_locks+0x130/0x130 [ 390.580438] ? __sched_text_start+0x8/0x8 [ 390.584594] ? _raw_spin_unlock_irq+0x27/0x80 [ 390.589082] ? _raw_spin_unlock_irq+0x27/0x80 [ 390.593559] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 390.598124] ? zap_class+0x640/0x640 [ 390.601820] ? trace_hardirqs_on+0xbd/0x310 [ 390.606130] ? kasan_check_read+0x11/0x20 [ 390.610262] ? __schedule+0x168a/0x21d0 [ 390.614220] ? trace_hardirqs_off_caller+0x310/0x310 [ 390.619307] ? lock_pin_lock+0x350/0x350 [ 390.623355] ? find_held_lock+0x36/0x1c0 [ 390.627404] schedule+0xfe/0x460 [ 390.630755] ? lock_downgrade+0x900/0x900 [ 390.634884] ? __schedule+0x21d0/0x21d0 [ 390.638846] ? kasan_check_read+0x11/0x20 [ 390.642978] ? do_raw_spin_unlock+0xa7/0x330 [ 390.647372] ? do_raw_spin_trylock+0x270/0x270 [ 390.651934] ? lock_pin_lock+0x350/0x350 [ 390.656018] do_sched_yield+0x1bf/0x2a0 [ 390.659991] ? ttwu_do_activate+0x1f0/0x1f0 [ 390.664297] ? _raw_spin_unlock_bh+0x30/0x40 [ 390.668689] yield+0xb3/0xe0 [ 390.671690] ? schedule+0x460/0x460 [ 390.675324] ? dev_deactivate_many+0x5c9/0xdd0 [ 390.679893] ? __local_bh_enable_ip+0x160/0x260 [ 390.684546] dev_deactivate_many+0x5d3/0xdd0 [ 390.688942] ? qdisc_free_cb+0x20/0x20 [ 390.692842] ? rtnl_is_locked+0xb5/0xf0 [ 390.696816] ? rtnl_trylock+0x20/0x20 [ 390.700629] ? netpoll_poll_disable+0x190/0x260 [ 390.705303] ? raw_notifier_call_chain+0x2d/0x40 [ 390.710094] __dev_close_many+0x197/0x380 [ 390.714230] ? netdev_notify_peers+0x1d0/0x1d0 [ 390.718799] ? print_usage_bug+0xc0/0xc0 [ 390.722846] dev_close_many+0x2df/0x860 [ 390.726806] ? __lock_acquire+0x62f/0x4c20 [ 390.731027] ? dev_fill_metadata_dst+0x840/0x840 [ 390.735990] ? __lock_acquire+0x62f/0x4c20 [ 390.740215] ? mark_held_locks+0x130/0x130 [ 390.744435] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.749965] ? rtnl_is_locked+0xb5/0xf0 [ 390.753920] ? rtnl_trylock+0x20/0x20 [ 390.757711] rollback_registered_many+0x543/0x1250 [ 390.762638] ? zap_class+0x640/0x640 [ 390.766340] ? generic_xdp_install+0x590/0x590 [ 390.770907] ? mark_held_locks+0x130/0x130 [ 390.775127] ? mark_held_locks+0x130/0x130 [ 390.779348] ? zap_class+0x640/0x640 [ 390.783076] ? print_usage_bug+0xc0/0xc0 [ 390.787124] ? print_usage_bug+0xc0/0xc0 [ 390.791171] ? zap_class+0x640/0x640 [ 390.794867] ? print_usage_bug+0xc0/0xc0 [ 390.798914] ? find_held_lock+0x36/0x1c0 [ 390.802976] ? mark_held_locks+0xc7/0x130 [ 390.807111] rollback_registered+0x1e9/0x420 [ 390.811501] ? lockdep_hardirqs_on+0x351/0x5b0 [ 390.816069] ? rollback_registered_many+0x1250/0x1250 [ 390.821241] ? trace_hardirqs_on+0xbd/0x310 [ 390.825561] ? linkwatch_schedule_work+0x150/0x170 [ 390.830473] ? trace_hardirqs_off_caller+0x310/0x310 [ 390.835575] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.841093] ? rtnl_is_locked+0xb5/0xf0 [ 390.845050] ? rtnl_trylock+0x20/0x20 [ 390.848898] ? queue_delayed_work_on+0x130/0x1f0 [ 390.853639] unregister_netdevice_queue+0x321/0x5e0 [ 390.858652] ? rollback_registered+0x420/0x420 [ 390.863218] ? linkwatch_schedule_work+0x170/0x170 [ 390.868153] ? tun_setup+0x2d0/0x2d0 [ 390.871856] ? netif_set_real_num_tx_queues+0x10d/0x710 [ 390.877233] ? __tun_detach+0x6ba/0x15c0 [ 390.881499] __tun_detach+0x11b8/0x15c0 [ 390.885455] ? __call_rcu.constprop.55+0x3ea/0x950 [ 390.890369] ? __call_rcu.constprop.55+0x3ea/0x950 [ 390.895284] ? tun_attach+0x1900/0x1900 [ 390.899243] ? trace_hardirqs_off_caller+0x310/0x310 [ 390.904328] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.909875] ? locks_remove_posix+0x47d/0x840 [ 390.914357] ? vfs_lock_file+0xe0/0xe0 [ 390.918230] ? zap_class+0x640/0x640 [ 390.921944] ? fsnotify+0x4e5/0xf20 [ 390.925568] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.931085] ? locks_remove_file+0x3c6/0x5c0 [ 390.935482] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 390.941025] ? ima_file_free+0x132/0x650 [ 390.945079] ? __lock_is_held+0xb5/0x140 [ 390.949140] ? __tun_detach+0x15c0/0x15c0 [ 390.953277] ? __tun_detach+0x15c0/0x15c0 [ 390.957410] tun_chr_close+0xe3/0x180 [ 390.961226] __fput+0x385/0xa30 [ 390.964494] ? get_max_files+0x20/0x20 [ 390.968366] ? trace_hardirqs_on+0xbd/0x310 [ 390.972690] ? kasan_check_read+0x11/0x20 [ 390.976836] ? task_work_run+0x1af/0x2a0 [ 390.980884] ? trace_hardirqs_off_caller+0x310/0x310 [ 390.985980] ? filp_close+0x1cd/0x250 [ 390.989789] ____fput+0x15/0x20 [ 390.993050] task_work_run+0x1e8/0x2a0 [ 390.996922] ? task_work_cancel+0x240/0x240 [ 391.001246] ? copy_fd_bitmaps+0x210/0x210 [ 391.005466] ? do_syscall_64+0x9a/0x820 [ 391.009430] exit_to_usermode_loop+0x318/0x380 [ 391.014009] ? __bpf_trace_sys_exit+0x30/0x30 [ 391.018488] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.024008] do_syscall_64+0x6be/0x820 [ 391.027877] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 391.033225] ? syscall_return_slowpath+0x5e0/0x5e0 [ 391.038135] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.042970] ? trace_hardirqs_on_caller+0x310/0x310 [ 391.047978] ? prepare_exit_to_usermode+0x291/0x3b0 [ 391.052995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.057822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.062991] RIP: 0033:0x411021 [ 391.066165] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 391.085065] RSP: 002b:00007ffe7abbc1d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 391.092756] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000411021 [ 391.100015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 391.107267] RBP: 0000000000000000 R08: ffffffff8139cb49 R09: 000000004a15e932 [ 391.114530] R10: 00007ffe7abbc100 R11: 0000000000000293 R12: 0000000000000000 [ 391.121780] R13: 0000000000000001 R14: 000000000000001b R15: 0000000000000001 [ 391.129058] ? __virt_addr_valid+0xb9/0x230