[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.502147] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.949700] random: sshd: uninitialized urandom read (32 bytes read) [ 26.427910] sshd (5209) used greatest stack depth: 16696 bytes left [ 26.451523] random: sshd: uninitialized urandom read (32 bytes read) [ 27.073225] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. [ 32.657238] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/25 11:27:26 fuzzer started [ 33.854461] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/25 11:27:28 dialing manager at 10.128.0.26:42661 2018/09/25 11:27:29 syscalls: 1 2018/09/25 11:27:29 code coverage: enabled 2018/09/25 11:27:29 comparison tracing: enabled 2018/09/25 11:27:29 setuid sandbox: enabled 2018/09/25 11:27:29 namespace sandbox: enabled 2018/09/25 11:27:29 Android sandbox: /sys/fs/selinux/policy does not exist 2018/09/25 11:27:29 fault injection: enabled 2018/09/25 11:27:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/25 11:27:29 net packed injection: enabled 2018/09/25 11:27:29 net device setup: enabled [ 35.905738] random: crng init done 11:29:28 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 11:29:28 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f00000000c0)=""/143, 0x8f, 0x40000020, 0x0, 0x0) r0 = socket(0x100000010, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={"626f6e6430000000000600000100", @ifru_settings={0x1, 0x8, @fr_pvc=&(0x7f0000000040)}}) 11:29:28 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f40)={&(0x7f0000000440), 0xc, &(0x7f0000002f00)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 11:29:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0a5c3d023c126285718070") close(r0) 11:29:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x13}, 0x1c) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="15", 0x1}], 0x1) 11:29:28 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000100), 0xfffffffffffffffa, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x40000ab11, 0x8006) [ 154.720022] IPVS: ftp: loaded support on port[0] = 21 [ 154.797004] IPVS: ftp: loaded support on port[0] = 21 [ 154.829212] IPVS: ftp: loaded support on port[0] = 21 [ 154.833908] IPVS: ftp: loaded support on port[0] = 21 [ 154.854063] IPVS: ftp: loaded support on port[0] = 21 [ 154.878999] IPVS: ftp: loaded support on port[0] = 21 [ 156.388748] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.415383] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.422733] device bridge_slave_0 entered promiscuous mode [ 156.502903] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.519159] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.537248] device bridge_slave_1 entered promiscuous mode [ 156.564056] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.578523] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.586766] device bridge_slave_0 entered promiscuous mode [ 156.596990] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.603386] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.617849] device bridge_slave_0 entered promiscuous mode [ 156.631532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.642645] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.655468] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.662553] device bridge_slave_1 entered promiscuous mode [ 156.683224] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.694443] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.702184] device bridge_slave_0 entered promiscuous mode [ 156.718232] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.725707] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.736649] device bridge_slave_0 entered promiscuous mode [ 156.753955] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.761443] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.768903] device bridge_slave_1 entered promiscuous mode [ 156.776433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.788420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.799444] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.812313] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.827244] device bridge_slave_1 entered promiscuous mode [ 156.836827] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.843592] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.853013] device bridge_slave_1 entered promiscuous mode [ 156.860800] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.873805] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.881271] device bridge_slave_0 entered promiscuous mode [ 156.890286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.912278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.923524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.954976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.973766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.988583] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.995196] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.010581] device bridge_slave_1 entered promiscuous mode [ 157.034194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.091667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.113727] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.130089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 157.204025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.228392] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.269916] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.296228] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.335813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.376506] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.385206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.407747] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.425032] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.437427] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.463614] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.506721] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.578402] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.693684] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.792301] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.810270] team0: Port device team_slave_0 added [ 157.901411] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.914668] team0: Port device team_slave_0 added [ 157.927774] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.934797] team0: Port device team_slave_1 added [ 157.952403] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.976124] team0: Port device team_slave_0 added [ 157.983413] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.993391] team0: Port device team_slave_0 added [ 158.002136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.015688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.037778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.052391] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.066381] team0: Port device team_slave_1 added [ 158.072894] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.084458] team0: Port device team_slave_0 added [ 158.091297] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.098615] team0: Port device team_slave_1 added [ 158.105525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.118544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.134370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.166603] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.173785] team0: Port device team_slave_1 added [ 158.195943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.205874] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.213053] team0: Port device team_slave_0 added [ 158.223685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.238439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.256312] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.264633] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.281472] team0: Port device team_slave_1 added [ 158.289805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.298362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.308523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.317464] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.324580] team0: Port device team_slave_1 added [ 158.330646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.341083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.366306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.379205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.387379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.396099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.403583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.411915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.420988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.431002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.441136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.456059] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.476017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.495805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.503310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.513640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.521177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.528758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.536253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.543818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.554328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.569675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.589681] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.601568] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.615785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.626632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.634842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.642712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.651259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.662045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.673342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.680882] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.698268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.707065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.714542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.735836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.743685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.765270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.774937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.789223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.797124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.804824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.813146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.822040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.836114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.843151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.853826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.880224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.896054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.912688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.932134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.946314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.967735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.983984] ip (5682) used greatest stack depth: 15944 bytes left [ 158.997056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.004792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.698098] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.704665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.711601] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.717986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.746185] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.843378] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.849739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.856335] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.862650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.872473] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.923389] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.929778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.936429] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.942778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.962308] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.982515] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.988882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.995536] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.001892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.046576] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.058341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.065697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.072729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.080423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.090396] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.096760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.103320] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.109656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.117646] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.126192] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.132525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.139147] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.145497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.153221] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.106874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.118591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.780597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.803093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.899715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.914198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.935283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.078821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.111516] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.184656] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.272052] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.289861] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.304875] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.339613] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.481633] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.512212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.525559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.566115] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.572370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.586515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.646055] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.652191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.660225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.696174] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.702333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.726240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.759222] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.781143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.789749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.822491] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.846139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.858992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.929964] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.001107] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.025165] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.104795] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.133954] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.221071] 8021q: adding VLAN 0 to HW filter on device team0 11:29:41 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='i~4)', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1}, 0x50) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r3 = geteuid() lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000880)='./file0/file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000a80)={{}, {0x1, 0x7}, [{0x2, 0x2, r3}], {0x4, 0x6}, [{0x8, 0x4, r4}, {0x8, 0x2, r5}, {0x8, 0x4, r6}, {0x8, 0x1, r7}, {0x8, 0x2, r8}, {0x8, 0x2, r9}, {0x8, 0x6, r10}, {0x8, 0x0, r11}, {0x8, 0x7, r12}, {0x8, 0x1, r13}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x2) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000500)={r2, 0x5, 0x74, "2c15e5406a7a75ae85b2eb9805cd44ed36b2b827d845113849962da9be11838a68314b1d655f15b534f8b54d157e2b6075b2342ee9a68d20b8a14bfe4dedf4ad1e7c15452f62b3537a"}) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0x1000) r14 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) write$FUSE_ENTRY(r0, &(0x7f0000000580)={0x90, 0x0, 0x2}, 0x90) getdents(r14, &(0x7f0000000240)=""/185, 0x18) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_STATFS(r0, &(0x7f0000000100)={0x60, 0x0, 0x4, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0x60) 11:29:41 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) r1 = open(&(0x7f0000000340)='./file0/file0\x00', 0xf0, 0x0) syncfs(r0) renameat2(r0, &(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x0) 11:29:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8040, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000080)={0x1, 0x2, 0x8}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x3) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr, [0x800000000000000]}, 0x10) pipe(&(0x7f0000000340)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 11:29:41 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x220002, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0xfffffffffffffffe, 0x2, 0x0, 0x1}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x130, r1, 0x608, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x18}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2f, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc631}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5cc}]}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x400c800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x10000000000029, 0x82d, 0x0, 0x0, {0x1}, [@typed={0x8, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000000000}, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000500)={0x0, 0x0, 0x2080}) [ 167.427383] hrtimer: interrupt took 44767 ns 11:29:41 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:41 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={[], 0x400080000, 0x6, 0x7f, 0x2, 0x800}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000680)=0x2) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000200)=""/71) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) fchmod(r3, 0x60) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 11:29:41 executing program 0: socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@nls={'nls', 0x3d, 'none'}}]}) 11:29:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454da, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x6, 0x100) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000100)=""/254) 11:29:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8040, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000080)={0x1, 0x2, 0x8}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x3) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr, [0x800000000000000]}, 0x10) pipe(&(0x7f0000000340)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) 11:29:41 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x94) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) perf_event_open(&(0x7f0000000040)={0x0, 0x451, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x47e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x5, 0x20000) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffffffff95f) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @host}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) socket$netlink(0x10, 0x3, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x20, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0f630c400000000003000000000000000503e5cd9efd187263044004000000068caf63044000000000"], 0x30, 0x0, &(0x7f0000000400)="5f285abfde6ca12d22fff7b56740874819e82b7f252a75094f4f51f191a1ab24939d30ea6c3471503b68528116e3752b"}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000003c0)=0x8) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000040)={0x9, 0x0, 0x4000, 0xf7, &(0x7f0000000180)=""/247, 0x1000, &(0x7f0000000480)=""/4096, 0x6c, &(0x7f00000002c0)=""/108}) [ 167.763283] ntfs: (device loop0): parse_options(): NLS character set none not found. 11:29:41 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={[], 0x400080000, 0x6, 0x7f, 0x2, 0x800}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000680)=0x2) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000200)=""/71) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) fchmod(r3, 0x60) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 167.852435] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 168.006498] syz-executor2 (6830) used greatest stack depth: 13704 bytes left 11:29:42 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r0 = socket(0x7, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r0, r1, &(0x7f0000000100), 0x80000001) 11:29:42 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={[], 0x400080000, 0x6, 0x7f, 0x2, 0x800}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000680)=0x2) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000200)=""/71) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) fchmod(r3, 0x60) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 11:29:42 executing program 5: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x71d6, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000300)={0x1, {}, 0x0, 0x80000000}) 11:29:42 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0xfffffffffffffe1e) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000580)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0x6, 0x80000000, 0x6, 0x27}}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000300)=0xffffffffffffffb3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e22}, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x5, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e21, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) r5 = socket$inet6(0xa, 0x3, 0x5fffffff) ioctl(r5, 0x8912, &(0x7f0000000480)="0047f82f07d82c99240970") madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4) bind$rds(r1, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000600)=""/193, &(0x7f0000000280)=0xc1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x7fff, 0x3cb, 0x89d1, 0x7, 0x0, 0x0, 0x20140, 0x4, 0x2, 0x6, 0x1f, 0xfffffffffffffff8, 0x8, 0x2, 0x40, 0x8000, 0x7c4, 0x8, 0x81, 0x9, 0x9, 0x7, 0x7, 0x101, 0x7, 0x1, 0x6, 0x3, 0x9b8d, 0xfffffffffffffff7, 0x80, 0xffffffff, 0x3, 0x1000, 0x8, 0x8, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000380), 0x9}, 0x1000, 0x4, 0x200, 0x2, 0x7ff, 0x2, 0x1ff}, r6, 0xe, r2, 0x2) fcntl$dupfd(r4, 0x406, r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1b}, 0x800, 0x1, 0xff, 0xc, 0x0, 0x12000}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x100000000001d, &(0x7f00000005c0)=0x5, 0x4) 11:29:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x10000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x101, 0x0, 0x7fffffff, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 168.278073] IPVS: length: 193 != 8 [ 168.334495] IPVS: length: 193 != 8 11:29:42 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010002703000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00120010f9000069703670616e0000000800020004001200000000"], 0x3c}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x8, 0x2) 11:29:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3400f}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000030002908000000000000000003000000000000000000000000010000000000000000000000000000"], 0x2c}}, 0x0) 11:29:42 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0xfffffffffffffe1e) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000580)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0x6, 0x80000000, 0x6, 0x27}}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000300)=0xffffffffffffffb3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e22}, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x5, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e21, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) r5 = socket$inet6(0xa, 0x3, 0x5fffffff) ioctl(r5, 0x8912, &(0x7f0000000480)="0047f82f07d82c99240970") madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4) bind$rds(r1, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000600)=""/193, &(0x7f0000000280)=0xc1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x7fff, 0x3cb, 0x89d1, 0x7, 0x0, 0x0, 0x20140, 0x4, 0x2, 0x6, 0x1f, 0xfffffffffffffff8, 0x8, 0x2, 0x40, 0x8000, 0x7c4, 0x8, 0x81, 0x9, 0x9, 0x7, 0x7, 0x101, 0x7, 0x1, 0x6, 0x3, 0x9b8d, 0xfffffffffffffff7, 0x80, 0xffffffff, 0x3, 0x1000, 0x8, 0x8, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000380), 0x9}, 0x1000, 0x4, 0x200, 0x2, 0x7ff, 0x2, 0x1ff}, r6, 0xe, r2, 0x2) fcntl$dupfd(r4, 0x406, r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1b}, 0x800, 0x1, 0xff, 0xc, 0x0, 0x12000}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x100000000001d, &(0x7f00000005c0)=0x5, 0x4) 11:29:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3400f}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000030002908000000000000000003000000000000000000000000010000000000000000000000000000"], 0x2c}}, 0x0) [ 168.453830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor5'. [ 168.466293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 168.468572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor5'. 11:29:42 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0xfffffffffffffe1e) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000580)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0x6, 0x80000000, 0x6, 0x27}}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000300)=0xffffffffffffffb3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e22}, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x5, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e21, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) r5 = socket$inet6(0xa, 0x3, 0x5fffffff) ioctl(r5, 0x8912, &(0x7f0000000480)="0047f82f07d82c99240970") madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4) bind$rds(r1, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000600)=""/193, &(0x7f0000000280)=0xc1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x7fff, 0x3cb, 0x89d1, 0x7, 0x0, 0x0, 0x20140, 0x4, 0x2, 0x6, 0x1f, 0xfffffffffffffff8, 0x8, 0x2, 0x40, 0x8000, 0x7c4, 0x8, 0x81, 0x9, 0x9, 0x7, 0x7, 0x101, 0x7, 0x1, 0x6, 0x3, 0x9b8d, 0xfffffffffffffff7, 0x80, 0xffffffff, 0x3, 0x1000, 0x8, 0x8, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000380), 0x9}, 0x1000, 0x4, 0x200, 0x2, 0x7ff, 0x2, 0x1ff}, r6, 0xe, r2, 0x2) fcntl$dupfd(r4, 0x406, r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1b}, 0x800, 0x1, 0xff, 0xc, 0x0, 0x12000}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x100000000001d, &(0x7f00000005c0)=0x5, 0x4) [ 168.606242] IPVS: length: 193 != 8 11:29:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x10000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x101, 0x0, 0x7fffffff, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 11:29:42 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0xfffffffffffffe1e) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000180)=[0xfffe, 0x7]) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000580)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0x6, 0x80000000, 0x6, 0x27}}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000002c0)=""/60, &(0x7f0000000300)=0xffffffffffffffb3) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e22}, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x21}}, 0x1c, 0x5, 0x7fff, 0x9976, 0x5, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e21, @dev}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x0, 0x0, 0xcf39, 0x80000001, 0x4}) r5 = socket$inet6(0xa, 0x3, 0x5fffffff) ioctl(r5, 0x8912, &(0x7f0000000480)="0047f82f07d82c99240970") madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4) bind$rds(r1, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000600)=""/193, &(0x7f0000000280)=0xc1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x7fff, 0x3cb, 0x89d1, 0x7, 0x0, 0x0, 0x20140, 0x4, 0x2, 0x6, 0x1f, 0xfffffffffffffff8, 0x8, 0x2, 0x40, 0x8000, 0x7c4, 0x8, 0x81, 0x9, 0x9, 0x7, 0x7, 0x101, 0x7, 0x1, 0x6, 0x3, 0x9b8d, 0xfffffffffffffff7, 0x80, 0xffffffff, 0x3, 0x1000, 0x8, 0x8, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000380), 0x9}, 0x1000, 0x4, 0x200, 0x2, 0x7ff, 0x2, 0x1ff}, r6, 0xe, r2, 0x2) fcntl$dupfd(r4, 0x406, r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x1b}, 0x800, 0x1, 0xff, 0xc, 0x0, 0x12000}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x100000000001d, &(0x7f00000005c0)=0x5, 0x4) 11:29:42 executing program 2: socket$inet6(0xa, 0x807, 0x80000000) r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x9, 0x400000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x401, 0x202c03) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000240)=""/74) fcntl$setflags(r1, 0x2, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) clock_settime(0x0, &(0x7f00000001c0)={0x0, 0x1c9c380}) r5 = fcntl$dupfd(r0, 0x406, r1) r6 = dup(r4) ioctl$BLKROSET(r3, 0x125d, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x800004e20, 0x1, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) [ 168.631236] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 168.712051] IPVS: length: 193 != 8 11:29:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x80) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x34114f26, 0x40000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/autofs\x00', 0x204, 0x0) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x40) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000400)={0x1, 0x3, 0x100000001, 0x3, 0x3}) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x800, 0x0) r9 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhci\x00', 0x101002, 0x0) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rtc0\x00', 0x40, 0x0) r12 = syz_open_dev$vcsa(&(0x7f00000005c0)='/dev/vcsa#\x00', 0x572e, 0x100) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x1, 0x0) r14 = openat$full(0xffffffffffffff9c, &(0x7f0000000840)='/dev/full\x00', 0xfe, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe4, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r0}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r14}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7eca86f5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x48cc06be}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r15 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r16, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r16, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10fa0"], 0x3) ioctl$KVM_RUN(r16, 0xae80, 0x0) r17 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r17, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0xfc, "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"}, &(0x7f00000000c0)=0x120) 11:29:42 executing program 5: syz_emit_ethernet(0x48, &(0x7f0000000000)={@empty, @empty, [{[{0x9100, 0xfff, 0x3, 0x2}], {0x8100, 0x3, 0x0, 0x4}}], {@arp={0x806, @generic={0x108, 0x800, 0x6, 0xe, 0x7, @remote, "e82065f69686eb248546514d2693", @random="c6d53b839c53", "5eeae54bb0a6f0ea6be0675faa261d3a"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0xa07, 0xcd0, 0x4c8, 0x7cd]}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x2400, 0x0) write$P9_RAUTH(r0, &(0x7f0000000180)={0x14, 0x67, 0x1, {0x2, 0xfffffffffffffffc, 0x2}}, 0x14) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000001c0)={@rand_addr=0x10b4}, 0xc) syz_emit_ethernet(0xfdef, &(0x7f0000000240)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xffffca88}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000080)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x6, 0x7, 0x2000}, 0x4) [ 168.777034] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.777099] IPVS: length: 193 != 8 11:29:42 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x8) 11:29:43 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:43 executing program 5: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="46ebf67a0bed6b0a9afd9f5b678816", 0xf, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') r3 = fcntl$dupfd(r2, 0x0, r2) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r4 = getpid() write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000840)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000008c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000780), r5, 0x7}}, 0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r7) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={r6}, &(0x7f00000001c0)=0x8) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000700)={'nat\x00'}, &(0x7f0000000600)=0x78) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000480)={{0x3, 0x6, 0x86a, 0x67a, 'syz1\x00'}, 0x0, 0x10000000, 0x6, r4, 0x6, 0xcd99, 'syz0\x00', &(0x7f0000000440)=['wchan\x00', "76626f786e657431e500", 'user\x00', '\x00', 'user\x00', 'user\x00'], 0x20, [], [0x5, 0x401, 0x3, 0x101]}) sched_setscheduler(r4, 0x5, &(0x7f0000000200)) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={r3}) accept4$inet(r3, &(0x7f0000000340)={0x2, 0x0, @rand_addr}, &(0x7f0000000400)=0x10, 0x800) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)) getsockname$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, &(0x7f0000000380)=0x10) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000180)) 11:29:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x101000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007d00), 0x0, 0x0, &(0x7f0000007e00)={0x77359400}) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000ffffffff) 11:29:43 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x802, 0x0) io_setup(0x804000000cb, &(0x7f0000000040)=0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/155, 0x9b}], 0x1) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)}]) socket$inet6_udp(0xa, 0x2, 0x0) 11:29:43 executing program 3: syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000300)=ANY=[@ANYBLOB="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"]}, 0x1cd) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0xc4, "ea5a55835109a0bd5bdaa8f87adff316acd7f681406e620e5b9bf18489398a0b809d7b6564cf3a927b625af497cd9b714b4e194d8d0531e9cb5308f5b4e02f7e219d10b660d052c93efedbbc02f0edb20643f272e51e2ec562c5c23e678469f658c01f081b257a358507810bd632205dbe844781a15f9f9c00f96c9f1d479c229bdd1385f6a21f1fd9f5f46a5e30a7e434407aa36a4fcdd0d4b26d24f04cc98f6e37369efa49140fb999a7e2a9179950d2be7d70cd008d2fcbd2680edc895b4ec996f9ba"}, &(0x7f0000000040)=0xcc) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x0, 0xffffffffffffffc1, 0x8}, &(0x7f0000000140)=0x10) 11:29:43 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffff9e9bb533, 0x200000) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x40, 0x607, 0x49, &(0x7f0000000340)="3b0a1e181af48fea5717a20a7e31afb52634dad80bebfd7480df892d0a7479a236a91cdbe59f2b830a48fc9af3972288849be780ebf763ef51685aa7a58e2565bf905b3ca8fb17b951"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SMI(r1, 0xaeb7) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000040)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 169.297946] kernel msg: ebtables bug: please report to author: Wrong len argument 11:29:43 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x20000081, 0x80000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)={r1}) r2 = socket$inet6(0xa, 0x806, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xfffffffffffffd2b, 0x521002) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) 11:29:43 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140)="3c5f0ea383f8e6f5517c56cab94bded0c1cf2a8617769b3f", &(0x7f0000000380)="081c3b25482ef02edee3e1aac9ac4a92f13f354de75b592e611a576fea046a1d8a67740283ee9c536b4b57515cd562e78f5d841e024eb48fb910844299e9570a5226a00ee8d2e5dc82f973b5dbe559527112d57f754e74a37d7487bd410a7352be59d90827c6440addc105cc8ec7335746230ba0d89613", 0x2}, 0x20) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000580)) r3 = gettid() r4 = gettid() ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)) syz_open_procfs$namespace(r3, &(0x7f00000006c0)='ns/user\x00') mount(&(0x7f0000000600)=ANY=[@ANYBLOB="960b53afa8e026481f7f7357460b210cf52f02"], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5e4") ptrace$peekuser(0x3, r4, 0x400) mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2, 0x1000}}, 0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000680)={0x0, 0x3, 0xa7e}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x7, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}], 0x1, 0x40, &(0x7f0000001e80)={0x77359400}) fcntl$getown(r0, 0x9) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="1e0b7eb688804b3200e8893131533f"], &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000001ec0)=""/133, 0x85}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003940)=""/199, 0xc7}], 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) kcmp(r4, r4, 0x1, r1, r2) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./bus\x00', &(0x7f0000000480)='ocfs2_dlmfs\x00', 0x8, 0x0) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) write$binfmt_aout(r2, &(0x7f0000003100)={{0x108, 0x14bd, 0x6, 0x10b, 0x1e3, 0x7, 0x1cf, 0x20}, "17895fb1351a419b91ac7c5ed67a04efccec9135f86d7851b9eae493e9fe0b56e06425590cb998d1a9ccaea854a0f1eeade2e63b7ca29a2f746b90dbb2103526f72776221e9b37ac99985788d9b07313e393cb005951493a1e745cfa9369da270f62d317dc2eb196b0c58259e924018c04abf2220d00639ab07227b359d74b366107c1d46fab9516457a52289d9a33fed0acfad6a6756a1e3539cce9519d9bc984123e1168fe8287581e9ec678eb5583409f90cf032168ead156c151b54d5ac0cd154cddb8424bba3ad63c7de417d673e626dd6563a69e97a2d9c86b48585f166d2707dc92f124acb41bfd8b31624a", [[], [], [], [], [], [], []]}, 0x80f) [ 169.402269] kernel msg: ebtables bug: please report to author: Wrong len argument [ 169.442804] APIC base relocation is unsupported by KVM [ 169.446114] *** Guest State *** [ 169.465011] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 169.476544] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 169.485966] CR3 = 0x0000000000000000 [ 169.489966] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 169.496471] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 169.502703] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 169.510385] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.519909] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.529013] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.545432] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.561403] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.569810] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.580803] GDTR: limit=0x00000000, base=0x0000000000000000 11:29:43 executing program 2: socket$inet6(0xa, 0x807, 0x80000000) r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x9, 0x400000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x401, 0x202c03) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000240)=""/74) fcntl$setflags(r1, 0x2, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) clock_settime(0x0, &(0x7f00000001c0)={0x0, 0x1c9c380}) r5 = fcntl$dupfd(r0, 0x406, r1) r6 = dup(r4) ioctl$BLKROSET(r3, 0x125d, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x800004e20, 0x1, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 11:29:43 executing program 3: syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000300)=ANY=[@ANYBLOB="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"]}, 0x1cd) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0xc4, "ea5a55835109a0bd5bdaa8f87adff316acd7f681406e620e5b9bf18489398a0b809d7b6564cf3a927b625af497cd9b714b4e194d8d0531e9cb5308f5b4e02f7e219d10b660d052c93efedbbc02f0edb20643f272e51e2ec562c5c23e678469f658c01f081b257a358507810bd632205dbe844781a15f9f9c00f96c9f1d479c229bdd1385f6a21f1fd9f5f46a5e30a7e434407aa36a4fcdd0d4b26d24f04cc98f6e37369efa49140fb999a7e2a9179950d2be7d70cd008d2fcbd2680edc895b4ec996f9ba"}, &(0x7f0000000040)=0xcc) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x0, 0xffffffffffffffc1, 0x8}, &(0x7f0000000140)=0x10) 11:29:43 executing program 1: r0 = socket(0x800000000000000a, 0x1, 0x2000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='bond_slave_1\x00', 0x3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe, r1}) [ 169.599866] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.635528] IDTR: limit=0x00000000, base=0x0000000000000000 11:29:43 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140)="3c5f0ea383f8e6f5517c56cab94bded0c1cf2a8617769b3f", &(0x7f0000000380)="081c3b25482ef02edee3e1aac9ac4a92f13f354de75b592e611a576fea046a1d8a67740283ee9c536b4b57515cd562e78f5d841e024eb48fb910844299e9570a5226a00ee8d2e5dc82f973b5dbe559527112d57f754e74a37d7487bd410a7352be59d90827c6440addc105cc8ec7335746230ba0d89613", 0x2}, 0x20) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000580)) r3 = gettid() r4 = gettid() ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)) syz_open_procfs$namespace(r3, &(0x7f00000006c0)='ns/user\x00') mount(&(0x7f0000000600)=ANY=[@ANYBLOB="960b53afa8e026481f7f7357460b210cf52f02"], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5e4") ptrace$peekuser(0x3, r4, 0x400) mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2, 0x1000}}, 0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000680)={0x0, 0x3, 0xa7e}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x7, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}], 0x1, 0x40, &(0x7f0000001e80)={0x77359400}) fcntl$getown(r0, 0x9) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="1e0b7eb688804b3200e8893131533f"], &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000001ec0)=""/133, 0x85}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003940)=""/199, 0xc7}], 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) kcmp(r4, r4, 0x1, r1, r2) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./bus\x00', &(0x7f0000000480)='ocfs2_dlmfs\x00', 0x8, 0x0) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) write$binfmt_aout(r2, &(0x7f0000003100)={{0x108, 0x14bd, 0x6, 0x10b, 0x1e3, 0x7, 0x1cf, 0x20}, "17895fb1351a419b91ac7c5ed67a04efccec9135f86d7851b9eae493e9fe0b56e06425590cb998d1a9ccaea854a0f1eeade2e63b7ca29a2f746b90dbb2103526f72776221e9b37ac99985788d9b07313e393cb005951493a1e745cfa9369da270f62d317dc2eb196b0c58259e924018c04abf2220d00639ab07227b359d74b366107c1d46fab9516457a52289d9a33fed0acfad6a6756a1e3539cce9519d9bc984123e1168fe8287581e9ec678eb5583409f90cf032168ead156c151b54d5ac0cd154cddb8424bba3ad63c7de417d673e626dd6563a69e97a2d9c86b48585f166d2707dc92f124acb41bfd8b31624a", [[], [], [], [], [], [], []]}, 0x80f) 11:29:43 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140)="3c5f0ea383f8e6f5517c56cab94bded0c1cf2a8617769b3f", &(0x7f0000000380)="081c3b25482ef02edee3e1aac9ac4a92f13f354de75b592e611a576fea046a1d8a67740283ee9c536b4b57515cd562e78f5d841e024eb48fb910844299e9570a5226a00ee8d2e5dc82f973b5dbe559527112d57f754e74a37d7487bd410a7352be59d90827c6440addc105cc8ec7335746230ba0d89613", 0x2}, 0x20) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000580)) r3 = gettid() r4 = gettid() ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)) syz_open_procfs$namespace(r3, &(0x7f00000006c0)='ns/user\x00') mount(&(0x7f0000000600)=ANY=[@ANYBLOB="960b53afa8e026481f7f7357460b210cf52f02"], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5e4") ptrace$peekuser(0x3, r4, 0x400) mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2, 0x1000}}, 0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000680)={0x0, 0x3, 0xa7e}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x7, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}], 0x1, 0x40, &(0x7f0000001e80)={0x77359400}) fcntl$getown(r0, 0x9) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="1e0b7eb688804b3200e8893131533f"], &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000001ec0)=""/133, 0x85}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003940)=""/199, 0xc7}], 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) kcmp(r4, r4, 0x1, r1, r2) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./bus\x00', &(0x7f0000000480)='ocfs2_dlmfs\x00', 0x8, 0x0) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) write$binfmt_aout(r2, &(0x7f0000003100)={{0x108, 0x14bd, 0x6, 0x10b, 0x1e3, 0x7, 0x1cf, 0x20}, "17895fb1351a419b91ac7c5ed67a04efccec9135f86d7851b9eae493e9fe0b56e06425590cb998d1a9ccaea854a0f1eeade2e63b7ca29a2f746b90dbb2103526f72776221e9b37ac99985788d9b07313e393cb005951493a1e745cfa9369da270f62d317dc2eb196b0c58259e924018c04abf2220d00639ab07227b359d74b366107c1d46fab9516457a52289d9a33fed0acfad6a6756a1e3539cce9519d9bc984123e1168fe8287581e9ec678eb5583409f90cf032168ead156c151b54d5ac0cd154cddb8424bba3ad63c7de417d673e626dd6563a69e97a2d9c86b48585f166d2707dc92f124acb41bfd8b31624a", [[], [], [], [], [], [], []]}, 0x80f) [ 169.651097] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 169.667174] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 169.673992] kernel msg: ebtables bug: please report to author: Wrong len argument [ 169.684107] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 169.694380] Interruptibility = 00000000 ActivityState = 00000000 [ 169.714497] *** Host State *** [ 169.720906] RIP = 0xffffffff8121198e RSP = 0xffff880192af7350 [ 169.763842] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 169.795524] FSBase=00007efc8e292700 GSBase=ffff8801dac00000 TRBase=fffffe0000003000 [ 169.848380] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 169.884517] CR0=0000000080050033 CR3=00000001baa39000 CR4=00000000001426f0 [ 169.901979] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 169.925663] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 169.943798] *** Control State *** [ 169.963257] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 169.994387] EntryControls=0000d1ff ExitControls=002fefff [ 170.006746] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 11:29:44 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:44 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x204, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140)="3c5f0ea383f8e6f5517c56cab94bded0c1cf2a8617769b3f", &(0x7f0000000380)="081c3b25482ef02edee3e1aac9ac4a92f13f354de75b592e611a576fea046a1d8a67740283ee9c536b4b57515cd562e78f5d841e024eb48fb910844299e9570a5226a00ee8d2e5dc82f973b5dbe559527112d57f754e74a37d7487bd410a7352be59d90827c6440addc105cc8ec7335746230ba0d89613", 0x2}, 0x20) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000580)) r3 = gettid() r4 = gettid() ptrace(0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)) syz_open_procfs$namespace(r3, &(0x7f00000006c0)='ns/user\x00') mount(&(0x7f0000000600)=ANY=[@ANYBLOB="960b53afa8e026481f7f7357460b210cf52f02"], &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000001d80)="dcd8bdb7ef62f3f700000000000000000000", 0x3080, &(0x7f0000000440)="fa3a51c0858bc666b01dc16b56bb5cb284f8fc67dc7859972aabffff686dc7e71f02bf71b9602a0000b33fd2683a820cbbb4e492b5e4") ptrace$peekuser(0x3, r4, 0x400) mount(&(0x7f0000fb6000), &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2, 0x1000}}, 0x20) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000680)={0x0, 0x3, 0xa7e}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f00000008c0)=@xdp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/44, 0x2c}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/124, 0x7c}, {&(0x7f0000001b00)=""/213, 0xd5}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/105, 0x69}], 0x7, &(0x7f0000001d40)=""/24, 0x18, 0xc59d}, 0x81}], 0x1, 0x40, &(0x7f0000001e80)={0x77359400}) fcntl$getown(r0, 0x9) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="1e0b7eb688804b3200e8893131533f"], &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000001ec0)=""/133, 0x85}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003940)=""/199, 0xc7}], 0x4) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) kcmp(r4, r4, 0x1, r1, r2) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./bus\x00', &(0x7f0000000480)='ocfs2_dlmfs\x00', 0x8, 0x0) futex(&(0x7f0000000000)=0xfffffffffffffffe, 0x400000085, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x4020000002) write$binfmt_aout(r2, &(0x7f0000003100)={{0x108, 0x14bd, 0x6, 0x10b, 0x1e3, 0x7, 0x1cf, 0x20}, "17895fb1351a419b91ac7c5ed67a04efccec9135f86d7851b9eae493e9fe0b56e06425590cb998d1a9ccaea854a0f1eeade2e63b7ca29a2f746b90dbb2103526f72776221e9b37ac99985788d9b07313e393cb005951493a1e745cfa9369da270f62d317dc2eb196b0c58259e924018c04abf2220d00639ab07227b359d74b366107c1d46fab9516457a52289d9a33fed0acfad6a6756a1e3539cce9519d9bc984123e1168fe8287581e9ec678eb5583409f90cf032168ead156c151b54d5ac0cd154cddb8424bba3ad63c7de417d673e626dd6563a69e97a2d9c86b48585f166d2707dc92f124acb41bfd8b31624a", [[], [], [], [], [], [], []]}, 0x80f) 11:29:44 executing program 3: r0 = socket$inet6(0xa, 0x401020000000002, 0x0) ioctl(r0, 0x4008912, &(0x7f0000000280)="153f6234488dd25d766070") capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040), 0x0) fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='coredump_filter\x00') openat$cgroup_type(r3, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)="1f0000000104fffffd3b542407110000f30501000b0002000000d10200cf00", 0x1f) 11:29:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x360}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001004060c000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008000400ffffffff"], 0x3c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000540)={0x1, 0xa0, 0x7, {}, 0x8, 0x89}) [ 170.048727] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 170.086370] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) [ 170.109759] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 170.140112] reason=80000021 qualification=0000000000000000 [ 170.168019] IDTVectoring: info=00000000 errcode=00000000 [ 170.203419] TSC Offset = 0xffffffa2e2abe7fd 11:29:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000015000700000000000000000002ff0006667e27b739a91d7b7f0000017daf4204a00b32eadc2828417f00000135d8960f65b27ee8125f423682a9447015739d53d5000000"], 0x48}}, 0x0) 11:29:44 executing program 3: r0 = socket(0x20002000000010, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) r2 = dup(r0) write(r2, &(0x7f00000000c0), 0x0) write(r2, &(0x7f00000001c0)="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", 0xfc) 11:29:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@mcast2, 0x6, r2}) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6006f5260008112d18d414fc03979736f53622a91e4b0000000000000000000000000000000000ff0200000000000000"], &(0x7f0000775000)) [ 170.229849] TPR Threshold = 0x00 [ 170.233606] EPT pointer = 0x00000001c895601e 11:29:44 executing program 2: r0 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xffffd034}, {0x6}]}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x425}, 0x14}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{0x9, 0x0, 0x2e93, 0xffff}, {0x86, 0x6, 0x0, 0x6}, {0xff, 0x3, 0x2, 0x4355b57e}, {0x0, 0x1, 0x0, 0x20}]}, 0x10) 11:29:44 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) r2 = memfd_create(&(0x7f0000000000)='/*vmnet0ppp1#\'\x00', 0x1) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @loopback}, 0x3, 0x0, 0x4}}, 0x26) 11:29:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xc0000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfd6, @mcast2, 0x1}, {0xa, 0x4e21, 0x400, @mcast1, 0x81}, r2, 0x3}}, 0x48) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) dup3(r3, r0, 0x0) 11:29:44 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000ec0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r1 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0}, &(0x7f0000002200)=0xc) getgroups(0x4, &(0x7f0000002240)=[0xffffffffffffffff, 0x0, 0xee01, 0xee01]) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000002280)=0x0) getresuid(&(0x7f00000022c0), &(0x7f0000002300)=0x0, &(0x7f0000002340)) r6 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000002380)=0x0) r8 = geteuid() lstat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xb, &(0x7f0000002d00)='-security,\x00', 0xffffffffffffffff}, 0x30) r11 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000002e00)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002e40)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000002f40)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getpgid(0x0) stat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000030c0)=0x0, &(0x7f0000003100), &(0x7f0000003140)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003180)=0x0) fstat(0xffffffffffffff9c, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003300)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000003400)=0xe8) lstat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = socket$key(0xf, 0x3, 0x2) r26 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003500)='/dev/sequencer\x00', 0x8002, 0x0) r27 = socket$inet6_udplite(0xa, 0x2, 0x88) r28 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000003540)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000003640)=0xe8) r30 = getegid() r31 = getpid() getresuid(&(0x7f0000003680)=0x0, &(0x7f00000036c0), &(0x7f0000003700)) stat(&(0x7f0000003740)='./file0\x00', &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000003900)=[{&(0x7f0000000f00)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="6f43bed06a049830fb7a9c1d553304571e7278757eb3094f84c2661971bd3d683a8b6a9340171114691caf6f1bd74916ce22c9449e120b772d6a7fc4a306d0c4fb99a8b1e9ec81d89408bc498c65c1e1ac", 0x51}, {&(0x7f0000002000)="9caf12bbd5ee1706a229587458e2e4d662", 0x11}, {&(0x7f0000002040)="f70f33a698a70094667204487ad458deca6f50895046e4ac9fbb2ca54d76f5d25ef22d40", 0x24}, {&(0x7f0000002080)="bad0e2b292188711f021da8ac68f3391e9e325c16b5a885684a47cec608a19e91815dbbefb6d34b230bd1d830f2a4302962db4bb196f8a5f30ebd95eb882708685e0e8e1e402eba2580f0320d12e96ac667878b8980c33dbee381e8942880d5bd438cb274787a00d52c9c02df7779ee582e22904d704341aa8c60346257f0c360492957790a7dea13fd9dfbdd60b9812b4b59dc22d6978f904c1fd9a426f7fd2fc2b1339", 0xa4}], 0x5, &(0x7f0000002480)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x60, 0x80d1}, {&(0x7f0000002500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002580)="3f83990d65f287c9054c811f3f1cd25869143ead02596482a1e75dd6a9e43244b9219b90e312473ee2095ee57341288ae8ca1519ef27c3d2477f495872b2ee344d01e5bcdf2fbf2b260ba19930f70104d74c801ef9069ee5104e64f0ed176accb23cf6243583ad059bd14eabb1ea89e482e0f6f47461dd6a2adbb7d4aaf62e545feb67663d6cf9929b8c262daff9631121bc4da02e06a886ac2ee889c5d8041be994ec34865b0e7dabc499979516e013f920d59eac3b4ae1ea99f170a7fa1c2c5b203f1ead34a732a2a5b3", 0xcb}, {&(0x7f0000002680)="16d44951e17b813ba32b13ee086b85b394a84428e5a1a241920689782e9ffe55ded668d9ad223950b773a11a4e6de6cf45e6a5e128509740adb83516c0ce1bba9c0088890ffecf469fc98317e83032fbf1c17070b6670577b14766774a735bcedc427860ba43917878b9422b83333e510c98db711a5bfe9bc67effedcdbf4e4411e1618dd36b609affa2ddb82429aa2119dc8e9edbb4afe2e9c4a77ca8ed4671bce7b812c7100d4d", 0xa8}, {&(0x7f0000002740)="973e835ee1a7a668910a39f60b8f9226434a4133dae207b2176dd8ecc34de1747f8f11d008096632f3eae34d947f203e453a1c64b31022a52c1cfa8f5b94daa5f24b39a4e8e0a140f09873832f1e73e5c29d258b4fc11f72819f4c54b2c73daa334c921b3a82f692205c7a8e35f041ee4058806589759143869864749e6da63fb9e8cdbe44a183375562830803116e7a3ff9816cbb700f45b1af0c8786248302aa7938ea7468d08ccf06f38388e218523c924c4117d9003454d48fbf80979635ee648b", 0xc3}, {&(0x7f0000002840)="46d4c34ff32de2504e699d06dc4bba77281d2438950e1d282b55e287b0c846105064fa9b385ee86404ef5fd863467d7a82f0cc4bde0d14658bac055351d279b6750954a2aa22558b7b92227db2c5866c8f707dabf961baded7126f9cbdf4220e2f0998d44d07acee73ed1619c009d10ce0b2b311e4e9ec7a906ea3352733cf7fc35e9b51517d3d", 0x87}, {0x0}, {&(0x7f0000002900)="fd232ecd628137e50cd5619a484f9d96481bb9a3200bdae7dcb84d4562cad060fc8c7e4ca4b3dfc08a8036bc9d6fd6c91d5969a55f262fba1ec0831b186ad8517ee49f579aa40cf30ebf52e4fc076cafa07c88e7cb2f85cf5d412fb9c728b52474e10148b2216e4b882e26b4f5065aa71700d5bf1d291af677d05187200f648d63e0c7ebf01f81e58843e455f169b80aedac91a01c0a4575cfd6bcd65e42", 0x9e}, {&(0x7f00000029c0)="6b644698da74f86a7ffdb1e81bd8900a5e373eeaf3a7345155bf5ccb02f678ae1faebb2ed5c39734229b0fcea61655bb04d11f48018bd9a9952738dec4df2fea01050370bcdc0335e8064ecc2c123fc3e223ae9a7e8e67c1c6d3b0210d17907b99efb738d526ab5e9f15c624c8ea77fcdecbd435f48b70db1864f3c08c99dfca22fec1563879b2d49f052fb9e25ae2300495e57f989ec20e1fff56fbe2aaf22ed16a", 0xa2}, {&(0x7f0000002a80)="422a4a7a555dc10bb612f567c440988b3c80773ddec5cabea5923bef3da85a4ccfd12410086d64fa744840af63f8dbd27ee8d9be1f67a2365fdb0ca0756702a4c17f6b153df7c6daf8314ca8814b23468205ed8b5552d030623977a81ca0e5ceba52fd56fb3fd809bb4e9c17d335d268e0677cf362150424ad24d1223838733fc836f3d2ec5592ba678260", 0x8b}, {&(0x7f0000002b40)="8ff124b7c41672e9786badf2a1757bfa3c6c3a21e7c7bd538dc04b90f7301256676a5715611d4c0b3e2b057685415da69e67ca6c75d62c5e5c26606962f54f65c08c78d0ceb42b905946459d3c834b5b45b39f85d295f63b062f2856d3ec312dcbee0cc7b9808e791ccffb1aec0211759832aa82acfb9990c59e17d226fe512debe6dc94a788da8508b4a9b336243427c1cf704955d8d826156855edaef5935eb43433ab8a71556b37355b71d4bffc08abba9308680f7abcd779ff7d347645d58d325fe03fee3156629f2c7715eb001cef2f3990c53f70515a3ce003b60090e7d06a9d17932c0fc2678e2e302f9d60865740b469", 0xf4}], 0x9, &(0x7f0000003800)=[@cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @rights={0x20, 0x1, 0x1, [r25, r26, r27]}, @cred={0x20, 0x1, 0x2, r28, r29, r30}, @cred={0x20, 0x1, 0x2, r31, r32, r33}], 0x100, 0x8000}], 0x2, 0x8000) r34 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r34, 0x40087703, 0xfffffffe) r35 = dup3(0xffffffffffffffff, r25, 0x80000) ioctl$GIO_UNISCRNMAP(r35, 0x4b69, &(0x7f0000000280)=""/214) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r34, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r35, 0x84, 0x74, &(0x7f0000000380)=""/40, &(0x7f00000003c0)=0x28) ioctl$UFFDIO_ZEROPAGE(r35, 0xc020aa04, &(0x7f0000000140)={{&(0x7f00006ff000/0x3000)=nil, 0x3000}, 0x1}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) pread64(r34, &(0x7f0000000400)=""/179, 0xb3, 0x0) 11:29:44 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0xfffffffffffffffb, 0x8}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f0000000240)=""/77, 0xfffffffffffffea9) 11:29:44 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0xd1d4fc9fe5753f54}, &(0x7f0000044000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000002640)=""/207, 0xcf, 0x100000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x4a8}, &(0x7f0000000180)=0x8) ioctl$KDSKBLED(r1, 0x4b65, 0x100000001) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) pread64(r3, &(0x7f0000000200)=""/4096, 0x1000, 0x0) 11:29:44 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 11:29:44 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x2}], 0x9d, 0x0, &(0x7f0000000080)="143180b1a34525dd20e19c761eb917edc797ed132dfdfce51ee6ce9ac717661bffea2da1308226333224a230767c1fd71296f2b814725588f2e6598a05b765821525e588816ee480170984ba46d03643e7b4b2c1229b9bdda456071cb420a3993005b13e40ca692a43576644835d9512a66cd027d0e57db760e589317ba60cfb56f7e070a58add758b5043f5b21e007d67b4183e2a8daec7cbd63c3650"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) sendto$unix(r3, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) 11:29:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) r3 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000200), 0xc) close(r4) close(r2) 11:29:44 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="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", 0x4c9, 0xfffffffffffffffd) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000180)) keyctl$read(0xb, r0, &(0x7f0000005340)=""/4096, 0x1000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=@req={0x1, 0x4, 0x100}, 0x10) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) getgroups(0x0, &(0x7f0000001a80)) [ 170.601336] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 11:29:44 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000240)={0x1, r1}) r2 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000300)=0xfffffee3) write$cgroup_pid(r2, &(0x7f00000001c0)=r1, 0x12) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000004c0)=""/175, &(0x7f00000000c0)=0xaf) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f000000b000/0x3000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f00000003c0)=""/242) setsockopt$inet6_int(r0, 0x29, 0xd3, &(0x7f0000000140)=0x5, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = epoll_create1(0x0) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x6a8d) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000cd8ff4)) r7 = epoll_create1(0x0) dup2(r7, r5) ioctl$UFFDIO_UNREGISTER(r3, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 11:29:44 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000100)="2400000058001f00ff0374f900230400b46a000004000100020100020800028000c9a800", 0x24) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) 11:29:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1}, 0xb) sendto$inet6(r2, &(0x7f0000000180)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x98) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) bind$can_raw(r4, &(0x7f00000003c0)={0x1d, r5}, 0x10) 11:29:44 executing program 1: add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffff9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000004c0), 0x4) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'bridge_slave_0\x00'}}) rt_sigsuspend(&(0x7f0000000280), 0x8) getpeername$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000480)=0x1c) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 170.741007] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 170.750341] netlink: 'syz-executor1': attribute type 1 has an invalid length. 11:29:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xf, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611860000000000000000000000000009500000000000000098b2ec4308b08ebe72de93bbb203a0ebbbf612bf52c192f6964a2cbc5340058f174cafd154a2e09bab16d3d643f47a1fd4afc39e0ef5d21b68bebddfe06"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) 11:29:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000180)={[{@nfs_export_on='nfs_export=on'}, {@default_permissions='default_permissions'}, {@nfs_export_off='nfs_export=off'}, {@metacopy_off='metacopy=off'}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x6, 0xffffffffffffffff, &(0x7f0000000100)={0x2000}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) 11:29:45 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x1000, 0x400000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x27a) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000003c0)="c83630b610836e8f05a3ac48abf9c8c8ac5f79d3bc1baded527e13cf23d31fa006af0104d83d8b68da3e2f2b06711eed9d9e303290ee00914f993bffbd0d8f5a6086cc5931677cf560d5dcc9ba291e33f7a38265d9cf341fcc19a20345c3e28901aca988dbb06ff4e7a442dfa322e9cced1d0cfd9f5a97cdb8837c39b005e8c21994a1ae92f24df5939952e90a5b3a089b11e3192c36ec47ee535f627c423a773a437eaf6a51cefc5e0bbd", 0xab, 0xfffffffffffffff9) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000480)) keyctl$negate(0xd, r1, 0x2, r2) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000004c0)={0x5, [0x8001, 0x4, 0x401, 0x0, 0x8]}, 0xe) socketpair(0x11, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000500)) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1931ae0d", @ANYRES16=r4, @ANYBLOB="020025bd7000fbdbdf250b000000140001000800090000000000080006006e71000030000200080005000800000008000800bf0b00000800060006000000140001000000000000000000000000000000000038000300080001000300000008000500e0000002087f00004e24000008000800ff000000147369b8fe848440fc000000000000000000000108000600ffff00005800030008000100010000000800030002000000080001000200000008000500e000000114000200677265300000000000000000000000000800010000000000080007004e20000008000500e0000002080004002e000000"], 0xf0}}, 0x40000) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="014700000000b4369b7a4e3086dd60abe4a700082f00fe80000076000000000000000000ff0f00000000000000f000000000000000aa2c00000000089078"], 0x0) [ 170.903612] overlayfs: missing 'lowerdir' [ 170.923400] overlayfs: missing 'lowerdir' 11:29:47 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0xd1d4fc9fe5753f54}, &(0x7f0000044000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000002640)=""/207, 0xcf, 0x100000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x4a8}, &(0x7f0000000180)=0x8) ioctl$KDSKBLED(r1, 0x4b65, 0x100000001) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) pread64(r3, &(0x7f0000000200)=""/4096, 0x1000, 0x0) 11:29:47 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x50000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x3ff, 0xef4, 0x1000, 0x10, r0, 0x8}, 0x2c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000600)=@ethtool_rxfh={0x25, 0x0, 0x0, 0x0, 0x0, "ad3221"}}) 11:29:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3de, 0x8000000000004, 0xffffffffffffffff}) close(r2) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000080)=0xb29) 11:29:47 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:47 executing program 1: add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffff9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000004c0), 0x4) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @broadcast, 'bridge_slave_0\x00'}}) rt_sigsuspend(&(0x7f0000000280), 0x8) getpeername$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000480)=0x1c) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfbbe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e22, @loopback}}) ioctl$KDMKTONE(r1, 0x4b30, 0x100) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) flistxattr(r0, &(0x7f0000000100)=""/138, 0x8a) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) readv(r3, &(0x7f00000042c0)=[{&(0x7f0000004000)=""/233, 0x25e}, {&(0x7f0000001ac0)=""/21, 0x15}, {&(0x7f0000000000)=""/61, 0xfffffde5}], 0x3) 11:29:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000029002d0800000000000000000100000005b4d453060000007c6eab1a95353d9f89f7f78c67ed24"], 0x1c}}, 0x0) 11:29:47 executing program 3: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000600)={0x1509733a}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000180)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x120000000000, 0x80001) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) creat(&(0x7f0000000900)='./file0/file0\x00', 0x0) [ 173.811935] mmap: syz-executor0 (7117) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 11:29:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x3d, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="98000000000000008f01000055190000a854cf3782746d88182fd91acca8e6196a8a337b1f8bc9be6a1ecf8f9c918e451d1cbba712d795850ba2d12b9d95a0ddba075ba51abc9001aa1bdc6dfc2f388c0a972923971d525c584956e67da4d6e6c38674aca1f29078f130c1c0d7fb4ff18fc364988284e955e7c37d2185cfd12f968e6c567b81080fc7b02e6c7defb6de06b83d0f88000000280000000000000018010000feffffff6d09d1272c2ef27e4dab625e2770227fd7d1b4f0dbc86500"], 0xc0}}], 0x1, 0x0) [ 173.868163] 9pnet: Insufficient options for proto=fd [ 173.874813] 9pnet: Insufficient options for proto=fd [ 173.885051] 9pnet: Insufficient options for proto=fd [ 173.901816] 9pnet: Insufficient options for proto=fd 11:29:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) uselib(&(0x7f0000000100)='./file0\x00') r1 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x5, 0x101000) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="ac641800020085cb0000109500020000000000000000000000f7308d42a66cbf57d06bc53a3fb904bb3241e4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x2ec, &(0x7f0000000180)=""/206}, 0x48) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000280)=0x9, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x65, &(0x7f0000000400)="bd4105ea3b3f00dfce8262aa361e", &(0x7f0000000380)=""/101}, 0x28) 11:29:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000200)=[@free_buffer={0x40086303, r2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)=[@flat={0x776a2a85, 0xa, r3, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat={0x776a2a85, 0x10a, r4, 0x2}], &(0x7f00000001c0)=[0x18, 0x58, 0x40]}, 0x40}}, @increfs={0x40046304, 0x4}], 0xb0, 0x0, &(0x7f0000000440)="0ed1773493fb2f2108855a7cc5199874c005b7519d4925891841c5a43168f2dd3f8f69fa7d0b768d8a7588ef3d518596999b45f244ff6f6b6906de4eaa6be110b67edaed7c62b128ba21200e7b1efb54c0d84611ee2be5e6d413f8b3995ee7ef21a39dcd7191472b6cb612c4a5952e90f0ee50d01698b935b063bf0602ea9ff4e65194150fc3bef31a9c6aa660c9c1ccf1206eb51904c15b97eb7a8f98078d0b54f2ea39c4b93e0acc7a9f32efde8586"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYBLOB="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"], 0x0, 0x0, &(0x7f0000fedffe)}) 11:29:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x159, &(0x7f0000000100)=0x2) getdents(r0, &(0x7f00000002c0)=""/143, 0xcb81) getdents(r0, &(0x7f0000000180)=""/182, 0xfffffffffffffff6) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xfffffffffffffff7, 0x400) [ 174.044088] binder: 7142:7143 BC_FREE_BUFFER u0000000000000000 no match [ 174.080998] binder: 7142:7143 got reply transaction with no transaction stack [ 174.108836] binder: 7142:7143 transaction failed 29201/-71, size 72-24 line 2762 [ 174.109520] binder_alloc: 7142: binder_alloc_buf, no vma [ 174.163946] binder: 7142:7146 transaction failed 29189/-3, size 0-0 line 2970 [ 174.213460] binder: BINDER_SET_CONTEXT_MGR already set [ 174.214940] binder: 7142:7152 BC_FREE_BUFFER u0000000000000000 no match [ 174.220232] binder: 7142:7143 ioctl 40046207 0 returned -16 [ 174.226081] binder: 7142:7152 got reply transaction with no transaction stack [ 174.239005] binder: 7142:7152 transaction failed 29201/-71, size 72-24 line 2762 [ 174.246970] binder: 7142:7143 transaction failed 29189/-22, size 0-0 line 2855 [ 174.247040] binder: undelivered TRANSACTION_ERROR: 29189 [ 174.260785] binder: undelivered TRANSACTION_ERROR: 29189 11:29:51 executing program 5: socket$inet6_sctp(0xa, 0x1, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:51 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) r1 = epoll_create1(0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000040)={0x844}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000019ff4)) write$sndseq(r0, &(0x7f000000a000)=[{0x40081, 0x80000008, 0x0, 0x0, @time={0x77359400}, {}, {}, @time}], 0x11b) 11:29:51 executing program 2: clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='[\\&:selinuxnodevsecurityem0trusted/+*\x00', 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000001c0)=0x17ac705c, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc0505405) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x181000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) fdatasync(r2) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r3, 0x11}}, 0x10) 11:29:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="ff7f000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000000340)}) 11:29:51 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) mount(&(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x0, 0xffffffffffffffff, @local}, {0xa, 0x4e21, 0x3, @mcast2, 0x5}, 0x748, [0x0, 0x1, 0x0, 0x6de, 0x0, 0xc43e, 0x8001, 0x3ff]}, 0x5c) r2 = getpgid(0x0) r3 = dup3(r0, r0, 0x80000) ioctl$RTC_PIE_OFF(r3, 0x7006) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r0, &(0x7f0000000780)={0xffffffffffffffff, r1}) getpgid(r2) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x3) accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) connect(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000140)={0x7, 0xc29}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x0, 0x5}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000004000), 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000040), 0x10, &(0x7f00000017c0)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {0x0, 0x7530}, {0x20000}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}}, 0x0) semget$private(0x0, 0x3, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000380)=[0x0, 0xff, 0x7, 0xfc6, 0xfc]) 11:29:51 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:51 executing program 3: r0 = socket$inet6(0xa, 0x8000000000000003, 0x4) fcntl$getown(0xffffffffffffffff, 0x9) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x100, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x1) sched_setscheduler(r1, 0x5, &(0x7f0000000140)) getsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff40) 11:29:51 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:51 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0x10000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x1, 0x8, 0x0, 0x9, 0x7, 0x2, 0x5, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x2, 0xfff, 0x2}, &(0x7f0000000180)=0x10) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) dup2(r3, r2) [ 177.059036] binder: 7159:7161 got transaction with invalid offset (0, min 0 max 24) or object. [ 177.088713] binder: 7159:7161 transaction failed 29201/-22, size 24-8 line 3033 [ 177.148158] binder_alloc: binder_alloc_mmap_handler: 7159 20001000-20004000 already mapped failed -16 [ 177.191821] binder: BINDER_SET_CONTEXT_MGR already set [ 177.197448] binder: 7159:7161 ioctl 40046207 0 returned -16 [ 177.233217] binder_alloc: 7159: binder_alloc_buf, no vma [ 177.263390] binder: 7159:7195 transaction failed 29189/-3, size 24-8 line 2970 11:29:51 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0xfffffffffffffffb}) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = creat(&(0x7f00000012c0)='./file0\x00', 0x6) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000001300)=0x4, 0x1) 11:29:51 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) [ 177.286199] binder: undelivered TRANSACTION_ERROR: 29189 [ 177.292322] binder: undelivered TRANSACTION_ERROR: 29201 11:29:51 executing program 0: socket$inet6(0xa, 0x0, 0x0) unshare(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x6) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x100fff, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000002c0)=0x4) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000300)) semtimedop(0x0, &(0x7f00000001c0)=[{0x0, 0xfffffffffffffc00, 0x7fc}], 0x1, &(0x7f00000000c0)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x6, 0x400, 0x7, 0x7f, 0x1}) unshare(0x8000200) signalfd4(r1, &(0x7f0000000280)={0x8}, 0x8, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) restart_syscall() syz_emit_ethernet(0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)) r3 = socket$rds(0x15, 0x5, 0x0) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) [ 177.492299] Unknown ioctl 44548 [ 177.586975] Unknown ioctl 44548 11:29:51 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0xfffffffffffffffb}) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = creat(&(0x7f00000012c0)='./file0\x00', 0x6) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000001300)=0x4, 0x1) 11:29:51 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:51 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0xfffffffffffffffb}) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = creat(&(0x7f00000012c0)='./file0\x00', 0x6) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000001300)=0x4, 0x1) 11:29:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f0000000600)=@ipv6_newroute={0x24, 0x18, 0xf69c2533c4ba3403, 0x0, 0x0, {0xa, 0x30}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) ioctl$UI_DEV_DESTROY(r1, 0x5502) 11:29:51 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:51 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:51 executing program 0: setrlimit(0x400000000000007, &(0x7f0000000000)={0x4, 0x4}) r0 = syz_init_net_socket$llc(0x1a, 0xfffffffffffffffd, 0x0) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x15, 0x0, 0x3ff, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xee, "8a9d5af14c0a0dffba7a9c5d315221538c67f0be230122ea0dae7cf721de10ca5e2fb2c534b862690dd9b3bba4fec45c6aa835fbcdc5a1208c41e3f38f2352f42120f16247de3f5f512f97238d38dd0dded86a0e2acee420bf7c2d7cf1bae9ddfc88a898205f7401e715608392d09b1369a65168342986d58c5d0e36c8e1954b20fbee70b7f71768f0f56e9a5252fc878fbddb6c0f415df67cf50bf0763b3574bafce21face9e48fe5901d56188ddddd888a38d4ddcc29decd81fe0c262c0bfd995c31c3bed89f242df7b61fa63b07324b7d0f5422296c382f2b134995ba1147fedde366597e153f290da85e76a6"}, &(0x7f0000000200)=0xf6) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r2, 0x4d, "7dd81cb3a80d4ea9d6067bbaf2b51ac94b45172b99346a4a03e2eadf54510ff95373f60d66a5eb35093565be5d754677a0b477610cee64ade16cd6a7656ed3980023975643608017ad3e61bd21"}, &(0x7f00000002c0)=0x55) 11:29:51 executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:52 executing program 1: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:52 executing program 5: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:52 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x73, 0x4, &(0x7f0000000300)=[{&(0x7f0000000140)="d38a33a3361b6f0b23d53a29dd87241aac6d338249d631d292bae47991c7b91724e1bcb1290ec233bd1e2edfeca59ee7042aca302fec9fc5041c6f9ff1627a8fb77617f9b91e433a16023070a7", 0x4d, 0x3}, {&(0x7f00000001c0)="2800649ba0ed385ca1cbe6a32fa07e56bc5dee1e6d42d5b1a5ba93c93d772cda96917a4bbcb0632202c2d5", 0x2b, 0x2}, {&(0x7f0000000200)="3770dc0ed243955c528b4f75f097f95a2998049b6cdc578b189d8b3a3fd79f49d407d21e8e5961de9f631b951cf996f4402d3184a8c83d308756f1000bb446106253dc45ccd3770758026ac0c99d17c0dbd9148dbb1291f4e2518bd995c46290bdbbc2e5e59a97ad818f2a00e6c3b4a099e9a65e5b93cfc5b8ae9486d4b98a4c", 0x80, 0x400}, {&(0x7f0000000280)="436dc4ed7b82767ac03bbaf9c862bb9402f2177c5e502df7f04fbf36d5337aa5b59fcc7add109e10aa481da1c0af88b9088d5692ff59b6c22c231252378187ad9a8aa5e6cef1d186332f849c82c2a4f556ca9787536c86f6e090abdeae98d63fa0a012c02b3fa0ed", 0x68}], 0x800, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'macgaelic'}}, {@show_sys_files_no='show_sys_files=no'}, {@show_sys_files_no='show_sys_files=no'}]}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000080)}}, {{&(0x7f0000000a80)=@in={0x2, 0x2, @rand_addr}, 0x10, &(0x7f0000001bc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1033aa36320000080100000024000000"], 0x10}}], 0x2, 0x0) 11:29:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:52 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 178.267416] ntfs: (device loop0): parse_options(): Unrecognized mount option . 11:29:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:52 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x200, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0xff, 0x4) r1 = socket$bt_rfcomm(0x1f, 0x7fffffffffffffff, 0x3) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)={0x0, @aes128, 0x3, "f112666e777350fd"}) recvmmsg(r1, &(0x7f00000038c0)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/37, 0x25}, {&(0x7f00000006c0)=""/13, 0xd}, {&(0x7f0000000700)=""/26, 0x1a}], 0x8, 0x0, 0x0, 0x3}, 0x9}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/136, 0x88}, {&(0x7f0000000880)=""/6, 0x6}], 0x2, &(0x7f0000000900)=""/47, 0x2f, 0x7}, 0x6}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000000ac0)=""/175, 0xaf}], 0x3, &(0x7f0000000bc0)=""/189, 0xbd, 0xffffffffffffff7f}, 0x435}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)=""/84, 0x54}], 0x1, &(0x7f0000000e40)=""/63, 0x3f}, 0x7}, {{&(0x7f0000000f40)=@sco, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000fc0)=""/157, 0x9d, 0x9}}, {{&(0x7f00000012c0)=@l2, 0x80, &(0x7f0000001340)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x6}, 0xfffffffffffffffa}, {{&(0x7f00000023c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/186, 0xba}, {&(0x7f0000002540)=""/88, 0x58}], 0x2, &(0x7f0000002600)=""/4096, 0x1000, 0x400}, 0x4}, {{&(0x7f0000003600)=@l2, 0x80, &(0x7f0000003780)=[{&(0x7f0000003680)=""/152, 0x98}], 0x1, &(0x7f00000037c0)=""/220, 0xdc, 0x100}, 0xb}], 0x8, 0x102, &(0x7f0000003b00)) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5c3d, 0x1) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54db", 0xf) write$binfmt_misc(r2, &(0x7f0000000d00)=ANY=[@ANYBLOB="73797a3197423a4e0716b292597da5af328d57e3708208a1f5af34e5dd55b89cffb306e40aa2131e749fae715ce7c4c3eb094ff511d8298648e0cbe879d1676c484160fab02218ae"], 0x46) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x400, @local, 0xffff}}}, 0x84) getsockopt$inet_dccp_int(r2, 0x21, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = accept$alg(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)=0x1) recvmmsg(r4, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:29:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xb7, 0x7f8, 0x401, "11aedd95c8116c9f3c0db79a9c354776fbc8d8a1e5884128fac1c357d1d472d3052a62815b3f05787c12f0fed875d23a6df624544e12693515000cc4bdb9c507bb607a9f06b6a7fac428a846a058850ec7149812e5e8d0d76aa0a0f77677e100ef18bc21dce9c0c112acbb85746793a06b21a956d38891a859dd52273ee137873f36c2624de88462b08abcf961d8416020daaa8b1ca701d71c1a5e235c66ab7e7b75dc914d8b4eaf478c3ce7fd11c6fa6f2c8c85c63596"}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000200)={{0x7, 0x7f}, 0x6}, 0x10) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x4, 0x10031, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000cc0)={0x2, 0x0, @multicast2}, 0x20000cd0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r1, 0x5501) 11:29:52 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cgroup\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xc5, 0x30}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r1, 0x9bca, 0x33a}, &(0x7f0000000380)=0xc) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2000000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u='version=9p2000.u'}, {@posixacl='posixacl'}]}}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000003c0)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sched_setscheduler(r2, 0x5, &(0x7f0000000000)) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x800c00, 0x0) 11:29:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) [ 178.648073] UBIFS error (pid: 7292): cannot open "/dev/full", error -22 [ 178.651435] UBIFS error (pid: 7292): cannot open "/dev/full", error -22 11:29:52 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1110c0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x1, "db"}, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r1, &(0x7f0000008040)=[{{0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000008c0)}}, {{&(0x7f0000003f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005600), 0x0, &(0x7f00000056c0)=ANY=[@ANYBLOB="10000000005b25329ea91cdbecd847"], 0x10}}], 0x2, 0x0) membarrier(0x12, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0xe, 0xffffffffffffffff, 0x4, "c87807000000f2d62ec8b80cec6abb4a38eea31cf3730ae0791b3ebfbfaaa901000000aba3d48025be491c6960dcaa086aae7af7e3bea1c3fe19d12a9d59899b", "7651ed63825dc3ea3a02d4aaf1dd6a8593dd699b451ea67bf6468574643c59afecc89c78e4e825de028e96bb679804d5e545a94bb84b89f21425003346fc7486", "02b7fac55df744d3f640ea2c21bf93b014fddd7404cb278abd3f3a2a8de658a4", [0xffffffffffffff40, 0x8001]}) getpeername$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) 11:29:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x6c00, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', r2}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0x40000010]}) 11:29:52 executing program 5: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000240)=0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x0, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x28d, 0x0, &(0x7f0000004dc0)={0x77359400}) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x82000) shutdown(r1, 0x0) setresuid(0x0, r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) 11:29:52 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap='mmap'}]}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 11:29:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:53 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:53 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x315) r1 = syz_open_dev$vcsn(&(0x7f0000000880)='/dev/vcs#\x00', 0x80000001, 0x10000) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x100}}}, &(0x7f00000006c0)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x9, 0x80}, &(0x7f00000007c0)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xc00, 0xffffffffffffffff, 0x2}, 0x14) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000500)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)) setsockopt$inet6_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000540)="3287174da1d0d32a12fd30222ae30fdb3058fa0401f43b3b535625f85d59ec3fa7be05bcb31c1e59503e53851f3c06e5f545140c2ddd8bdc77ee7c60d4cc4bd8c1bcbab514da0e0bc6a242e28d14f93dabd5eacfc92073d9ff71c88df2f56371c49e4f56cbe8c8d3dcc38bd499c3030debcbbf2713fe8476ce530eb7e0aa3838d3b77935e00471485bcb8a7c9a2717d17a", 0x91) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000ac0)) listen(r2, 0x18) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local, [0x4000, 0x300000000000000]}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000300)=0x8) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000008c0)={@in={0x2, 0x4e24, @multicast1}, {&(0x7f0000000b00)=""/4096, 0x1000}, &(0x7f00000004c0), 0x40}, 0xa0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e24, 0x1}}}, &(0x7f0000000480)=0x84) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) fanotify_mark(0xffffffffffffffff, 0x30, 0x30028, r4, &(0x7f0000000840)='./file0\x00') 11:29:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x0, r1}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) [ 178.977035] tls_set_device_offload_rx: netdev lo with no TLS offload 11:29:53 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000180)=""/165, 0x40f}], 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x4, {0xa, 0x4e22, 0x1f, @ipv4={[], [], @local}, 0x6}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0), r0}}, 0x18) getpid() 11:29:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x0, r1}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:53 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x2534}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) 11:29:53 executing program 5: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000240)=0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x0, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x28d, 0x0, &(0x7f0000004dc0)={0x77359400}) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x82000) shutdown(r1, 0x0) setresuid(0x0, r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) 11:29:53 executing program 3: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000240)=0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x0, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x28d, 0x0, &(0x7f0000004dc0)={0x77359400}) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x82000) shutdown(r1, 0x0) setresuid(0x0, r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) 11:29:53 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x315) r1 = syz_open_dev$vcsn(&(0x7f0000000880)='/dev/vcs#\x00', 0x80000001, 0x10000) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x100}}}, &(0x7f00000006c0)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x9, 0x80}, &(0x7f00000007c0)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xc00, 0xffffffffffffffff, 0x2}, 0x14) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000500)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)) setsockopt$inet6_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000540)="3287174da1d0d32a12fd30222ae30fdb3058fa0401f43b3b535625f85d59ec3fa7be05bcb31c1e59503e53851f3c06e5f545140c2ddd8bdc77ee7c60d4cc4bd8c1bcbab514da0e0bc6a242e28d14f93dabd5eacfc92073d9ff71c88df2f56371c49e4f56cbe8c8d3dcc38bd499c3030debcbbf2713fe8476ce530eb7e0aa3838d3b77935e00471485bcb8a7c9a2717d17a", 0x91) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000ac0)) listen(r2, 0x18) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local, [0x4000, 0x300000000000000]}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000300)=0x8) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000008c0)={@in={0x2, 0x4e24, @multicast1}, {&(0x7f0000000b00)=""/4096, 0x1000}, &(0x7f00000004c0), 0x40}, 0xa0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e24, 0x1}}}, &(0x7f0000000480)=0x84) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) fanotify_mark(0xffffffffffffffff, 0x30, 0x30028, r4, &(0x7f0000000840)='./file0\x00') 11:29:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x0, r1}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) [ 179.302752] tls_set_device_offload_rx: netdev lo with no TLS offload 11:29:53 executing program 1: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000240)=0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x0, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x28d, 0x0, &(0x7f0000004dc0)={0x77359400}) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x82000) shutdown(r1, 0x0) setresuid(0x0, r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) 11:29:53 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 179.381888] tls_set_device_offload_rx: netdev lo with no TLS offload 11:29:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:53 executing program 0: socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000240)=0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgid() fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x0, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x28d, 0x0, &(0x7f0000004dc0)={0x77359400}) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x82000) shutdown(r1, 0x0) setresuid(0x0, r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) 11:29:53 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/current\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f00000003c0)='9p\x00', 0x3000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x80, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1, 0x44, r3}) mkdir(&(0x7f00000004c0)='./file0\x00', 0x3) exit_group(0x6) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) [ 179.531135] tls_set_device_offload_rx: netdev lo with no TLS offload 11:29:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4004e23, 0x0, @ipv4}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") listen(r0, 0x10005) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x80000000, @mcast1, 0x101}}, [0x5, 0x9, 0x3, 0x1, 0x1, 0x60, 0x1800000000000000, 0xfffffffffffffff9, 0x7, 0x2, 0x5b, 0xd8, 0x500, 0x8247, 0x5]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x7fffffff, 0xc39f, 0x8008, 0x4, 0x7f, 0x6, 0x100000001, 0x10000, r3}, 0x20) sendto$inet6(r0, &(0x7f0000000400)="ba", 0x1, 0x0, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x98) 11:29:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002f3be2748871b6ed32ff030000000000000000000300000018000000140001000400000007000f000000000000000001"], 0x2c}}, 0x0) [ 179.573796] tls_set_device_offload_rx: netdev lo with no TLS offload 11:29:53 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:53 executing program 3: r0 = memfd_create(&(0x7f0000000080)="7b10", 0x3) fcntl$addseals(r0, 0x409, 0xd) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="e5", 0x1}]) 11:29:53 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000180)={0xb, 0x77, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000940)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREAD(r1, &(0x7f0000000440)={0x18, 0x75, 0x1, {0xd, "6da9c5a38d8a44f8ac32e38ecc"}}, 0x18) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1}, 0x14) write$P9_RREAD(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="0b02000075010000000000"], 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) r3 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) write$FUSE_LSEEK(r3, &(0x7f0000000400)={0x18}, 0x18) write$P9_RWRITE(r3, &(0x7f0000000340)={0xb}, 0xff69) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 11:29:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="23010200ff"]) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x1) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/72) rename(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) stat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000780)=0xe8) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000880)=[0xee00, 0xee00, 0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff]) getgroups(0x5, &(0x7f00000008c0)=[0xee01, 0x0, 0xee01, 0xee01, 0x0]) getgroups(0x7, &(0x7f0000000900)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, 0x0]) r11 = getgid() getresgid(&(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0)) getgroups(0x4, &(0x7f0000000a00)=[0x0, 0xee00, 0xee00, 0xee01]) getresgid(&(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) getgroups(0x3, &(0x7f0000000b00)=[0xee00, 0xffffffffffffffff, 0x0]) getgroups(0x4, &(0x7f0000000b40)=[0xee01, 0xee00, 0xffffffffffffffff, 0x0]) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000b80)={{}, {0x1, 0x5}, [{0x2, 0x1, r2}, {0x2, 0x6, r3}, {0x2, 0x4, r4}, {0x2, 0x0, r5}, {0x2, 0x3, r6}], {0x4, 0x2}, [{0x8, 0x2, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x4, r11}, {0x8, 0x4, r12}, {0x8, 0x4, r13}, {0x8, 0x4, r14}, {0x8, 0x6, r15}, {0x8, 0x3, r16}], {0x10, 0x3}, {0x20, 0x7}}, 0x9c, 0x0) 11:29:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x8001, 0x420000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r1, 0x80000001}, &(0x7f00000002c0)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x40) ioctl$KDADDIO(r3, 0x4b34, 0x200) 11:29:53 executing program 0: syz_emit_ethernet(0x22, &(0x7f0000000040)={@remote, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @multicast1, @remote}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x4, 0x80000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x1f, 0x1f, 0x9, 'queue1\x00', 0xdf13}) [ 179.835850] vhci_hcd: invalid port number 255 [ 179.854312] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 179.882938] vhci_hcd: invalid port number 255 [ 179.904799] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 11:29:54 executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:29:54 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) 11:29:54 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xb23, 0x80) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x2, 0x0) waitid(0x1, 0x0, &(0x7f00000001c0), 0x8, &(0x7f0000000240)) 11:29:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x8001, 0x420000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r1, 0x80000001}, &(0x7f00000002c0)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x40) ioctl$KDADDIO(r3, 0x4b34, 0x200) 11:29:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x40) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001080)='/dev/autofs\x00', 0x81, 0x0) connect$vsock_stream(r1, &(0x7f0000001100), 0x10) read(r0, &(0x7f0000000040)=""/4096, 0x1000) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001040)) accept4$inet(r1, 0x0, &(0x7f0000001140), 0x80800) syz_open_dev$sndtimer(&(0x7f00000011c0)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffe) 11:29:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000040)) syz_read_part_table(0x0, 0x0, &(0x7f0000000380)) 11:29:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x40) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001080)='/dev/autofs\x00', 0x81, 0x0) connect$vsock_stream(r1, &(0x7f0000001100), 0x10) read(r0, &(0x7f0000000040)=""/4096, 0x1000) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001040)) accept4$inet(r1, 0x0, &(0x7f0000001140), 0x80800) syz_open_dev$sndtimer(&(0x7f00000011c0)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffe) 11:29:54 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1}) [ 328.865624] INFO: task syz-executor5:7416 blocked for more than 140 seconds. [ 328.873319] Not tainted 4.19.0-rc5+ #253 [ 328.878406] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.886422] syz-executor5 D26456 7416 5247 0x00000004 [ 328.892198] Call Trace: [ 328.894780] __schedule+0x86c/0x1ed0 [ 328.898533] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 328.903277] ? __sched_text_start+0x8/0x8 [ 328.907440] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 328.912186] ? trace_hardirqs_off+0x310/0x310 [ 328.916776] ? graph_lock+0x170/0x170 [ 328.920564] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 328.925545] ? find_held_lock+0x36/0x1c0 [ 328.929608] schedule+0xfe/0x460 [ 328.933089] ? __mutex_lock+0xbe2/0x1700 [ 328.937184] ? __schedule+0x1ed0/0x1ed0 [ 328.941150] ? kasan_check_read+0x11/0x20 [ 328.945281] ? do_raw_spin_unlock+0xa7/0x2f0 [ 328.949728] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 328.954294] ? __ww_mutex_add_waiter.part.15+0x120/0x120 [ 328.959782] ? mutex_destroy+0x200/0x200 [ 328.963827] ? do_raw_spin_lock+0xc1/0x200 [ 328.968086] schedule_preempt_disabled+0x13/0x20 [ 328.972819] __mutex_lock+0xbe7/0x1700 [ 328.976721] ? __fdget_pos+0x1bb/0x200 [ 328.980592] ? mutex_trylock+0x2b0/0x2b0 [ 328.984638] ? __fget+0x4d1/0x740 [ 328.988115] ? ksys_dup3+0x680/0x680 [ 328.992028] ? graph_lock+0x170/0x170 [ 328.995882] ? find_held_lock+0x36/0x1c0 [ 328.999931] ? __fget_light+0x2e9/0x430 [ 329.003885] ? fget_raw+0x20/0x20 [ 329.007861] ? lock_release+0x970/0x970 [ 329.011823] ? arch_local_save_flags+0x40/0x40 [ 329.016585] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 329.022019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.027582] mutex_lock_nested+0x16/0x20 [ 329.031624] ? mutex_lock_nested+0x16/0x20 [ 329.035885] __fdget_pos+0x1bb/0x200 [ 329.039580] ? __fdget_raw+0x20/0x20 [ 329.043405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 329.048978] ? put_timespec64+0x10f/0x1b0 [ 329.053109] ? finish_task_switch+0x1f5/0x900 [ 329.057646] ksys_write+0x7f/0x260 [ 329.061171] ? lockdep_hardirqs_on+0x421/0x5c0 [ 329.065799] ? __ia32_sys_read+0xb0/0xb0 [ 329.069854] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.075206] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 329.080698] __x64_sys_write+0x73/0xb0 [ 329.084608] do_syscall_64+0x1b9/0x820 [ 329.088559] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 329.094052] ? syscall_return_slowpath+0x5e0/0x5e0 [ 329.099151] ? trace_hardirqs_on_caller+0x310/0x310 [ 329.104150] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 329.109182] ? recalc_sigpending_tsk+0x180/0x180 [ 329.113915] ? kasan_check_write+0x14/0x20 [ 329.118187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.123153] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.128394] RIP: 0033:0x457579 [ 329.131593] Code: 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d ca 90 07 01 87 01 8b 05 c2 90 07 01 83 f8 01 0f 85 8a 00 <00> 00 b8 01 00 00 00 88 05 fe 95 07 01 84 c0 74 72 b8 01 00 00 00 [ 329.151501] RSP: 002b:00007efc8e270c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.159246] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 329.166523] RDX: 000000000000ff69 RSI: 0000000020000340 RDI: 0000000000000006 [ 329.173771] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 329.181205] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc8e2716d4 [ 329.188501] R13: 00000000004c5295 R14: 00000000004d8900 R15: 00000000ffffffff [ 329.195800] INFO: task syz-executor5:7455 blocked for more than 140 seconds. [ 329.202960] Not tainted 4.19.0-rc5+ #253 [ 329.207553] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.215786] syz-executor5 D24632 7455 5247 0x00000004 [ 329.221401] Call Trace: [ 329.223985] __schedule+0x86c/0x1ed0 [ 329.227720] ? mark_held_locks+0x130/0x130 [ 329.232109] ? __sched_text_start+0x8/0x8 [ 329.236587] ? futex_wait+0x5ec/0xa50 [ 329.240694] ? graph_lock+0x170/0x170 [ 329.244723] ? graph_lock+0x170/0x170 [ 329.248573] ? print_usage_bug+0xc0/0xc0 [ 329.252625] ? futex_wait_setup+0x3e0/0x3e0 [ 329.257002] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 329.262178] ? find_held_lock+0x36/0x1c0 [ 329.266268] schedule+0xfe/0x460 [ 329.269621] ? __mutex_lock+0xbe2/0x1700 [ 329.273681] ? __schedule+0x1ed0/0x1ed0 [ 329.278442] ? kasan_check_read+0x11/0x20 [ 329.282583] ? do_raw_spin_unlock+0xa7/0x2f0 [ 329.287022] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 329.291598] ? __ww_mutex_add_waiter.part.15+0x120/0x120 [ 329.297066] ? mutex_destroy+0x200/0x200 [ 329.301113] ? do_raw_spin_lock+0xc1/0x200 [ 329.305382] schedule_preempt_disabled+0x13/0x20 [ 329.310125] __mutex_lock+0xbe7/0x1700 [ 329.313993] ? __fdget_pos+0x1bb/0x200 [ 329.317903] ? mutex_trylock+0x2b0/0x2b0 [ 329.321959] ? __fget+0x4d1/0x740 [ 329.325436] ? ksys_dup3+0x680/0x680 [ 329.329138] ? graph_lock+0x170/0x170 [ 329.332916] ? unwind_get_return_address+0x61/0xa0 [ 329.337869] ? __save_stack_trace+0x8d/0xf0 [ 329.342187] ? find_held_lock+0x36/0x1c0 [ 329.346353] ? __fget_light+0x2e9/0x430 [ 329.350322] ? fget_raw+0x20/0x20 [ 329.353751] ? lock_release+0x970/0x970 [ 329.357747] ? arch_local_save_flags+0x40/0x40 [ 329.362324] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 329.367965] mutex_lock_nested+0x16/0x20 [ 329.372016] ? mutex_lock_nested+0x16/0x20 [ 329.376274] __fdget_pos+0x1bb/0x200 [ 329.379982] ? __fdget_raw+0x20/0x20 [ 329.383671] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 329.389243] ? put_timespec64+0x10f/0x1b0 [ 329.393385] ksys_write+0x7f/0x260 [ 329.396945] ? lockdep_hardirqs_on+0x421/0x5c0 [ 329.401515] ? __ia32_sys_read+0xb0/0xb0 [ 329.406144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.411487] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 329.416960] __x64_sys_write+0x73/0xb0 [ 329.420836] do_syscall_64+0x1b9/0x820 [ 329.424699] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 329.430156] ? syscall_return_slowpath+0x5e0/0x5e0 [ 329.435259] ? trace_hardirqs_on_caller+0x310/0x310 [ 329.440317] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 329.445355] ? recalc_sigpending_tsk+0x180/0x180 [ 329.450090] ? kasan_check_write+0x14/0x20 [ 329.454306] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.459336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.464517] RIP: 0033:0x457579 [ 329.467732] Code: 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d ca 90 07 01 87 01 8b 05 c2 90 07 01 83 f8 01 0f 85 8a 00 <00> 00 b8 01 00 00 00 88 05 fe 95 07 01 84 c0 74 72 b8 01 00 00 00 [ 329.486656] RSP: 002b:00007efc8e22ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.494342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 329.501638] RDX: 0000000000000018 RSI: 0000000020000400 RDI: 0000000000000006 [ 329.508929] RBP: 000000000072c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 329.516218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc8e22f6d4 [ 329.523476] R13: 00000000004c4f9a R14: 00000000004d8510 R15: 00000000ffffffff [ 329.530786] INFO: task syz-executor5:7456 blocked for more than 140 seconds. [ 329.538561] Not tainted 4.19.0-rc5+ #253 [ 329.543115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.551097] syz-executor5 D25992 7456 5247 0x00000004 [ 329.556754] Call Trace: [ 329.559321] __schedule+0x86c/0x1ed0 [ 329.563010] ? mark_held_locks+0x130/0x130 [ 329.567265] ? __sched_text_start+0x8/0x8 [ 329.571408] ? futex_wait+0x5ec/0xa50 [ 329.575185] ? graph_lock+0x170/0x170 [ 329.579002] ? graph_lock+0x170/0x170 [ 329.582798] ? print_usage_bug+0xc0/0xc0 [ 329.586974] ? futex_wait_setup+0x3e0/0x3e0 [ 329.591292] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 329.596509] ? find_held_lock+0x36/0x1c0 [ 329.600561] schedule+0xfe/0x460 [ 329.603899] ? __mutex_lock+0xbe2/0x1700 [ 329.607979] ? __schedule+0x1ed0/0x1ed0 [ 329.611953] ? kasan_check_read+0x11/0x20 [ 329.616119] ? do_raw_spin_unlock+0xa7/0x2f0 [ 329.620515] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 329.625088] ? __ww_mutex_add_waiter.part.15+0x120/0x120 [ 329.630583] ? mutex_destroy+0x200/0x200 [ 329.634632] ? do_raw_spin_lock+0xc1/0x200 [ 329.638893] schedule_preempt_disabled+0x13/0x20 [ 329.643635] __mutex_lock+0xbe7/0x1700 [ 329.647549] ? __fdget_pos+0x1bb/0x200 [ 329.651428] ? mutex_trylock+0x2b0/0x2b0 [ 329.655542] ? __fget+0x4d1/0x740 [ 329.658990] ? ksys_dup3+0x680/0x680 [ 329.662676] ? graph_lock+0x170/0x170 [ 329.667074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.672593] ? check_preemption_disabled+0x48/0x200 [ 329.677649] ? find_held_lock+0x36/0x1c0 [ 329.681708] ? __fget_light+0x2e9/0x430 [ 329.685901] ? fget_raw+0x20/0x20 [ 329.689347] ? lock_release+0x970/0x970 [ 329.693299] ? arch_local_save_flags+0x40/0x40 [ 329.697903] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 329.703364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 329.708935] mutex_lock_nested+0x16/0x20 [ 329.712987] ? mutex_lock_nested+0x16/0x20 [ 329.718573] __fdget_pos+0x1bb/0x200 [ 329.722283] ? __fdget_raw+0x20/0x20 [ 329.726019] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 329.731553] ? put_timespec64+0x10f/0x1b0 [ 329.735739] ksys_write+0x7f/0x260 [ 329.739275] ? lockdep_hardirqs_on+0x421/0x5c0 [ 329.743833] ? __ia32_sys_read+0xb0/0xb0 [ 329.747933] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.753440] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 329.758939] __x64_sys_write+0x73/0xb0 [ 329.762826] do_syscall_64+0x1b9/0x820 [ 329.766738] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 329.772092] ? syscall_return_slowpath+0x5e0/0x5e0 [ 329.777068] ? trace_hardirqs_on_caller+0x310/0x310 [ 329.782073] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 329.787244] ? recalc_sigpending_tsk+0x180/0x180 [ 329.792106] ? kasan_check_write+0x14/0x20 [ 329.797065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.801897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 329.807183] RIP: 0033:0x457579 [ 329.810374] Code: 24 08 48 89 01 e8 d7 2d fc ff e8 22 7a fc ff b8 02 00 00 00 48 8d 0d ca 90 07 01 87 01 8b 05 c2 90 07 01 83 f8 01 0f 85 8a 00 <00> 00 b8 01 00 00 00 88 05 fe 95 07 01 84 c0 74 72 b8 01 00 00 00 [ 329.829459] RSP: 002b:00007efc8e20dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.837186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 329.844438] RDX: 000000000000ff69 RSI: 0000000020000340 RDI: 0000000000000006 [ 329.851760] RBP: 000000000072c180 R08: 0000000000000000 R09: 0000000000000000 [ 329.859193] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc8e20e6d4 [ 329.866483] R13: 00000000004c5295 R14: 00000000004d8900 R15: 00000000ffffffff [ 329.873751] [ 329.873751] Showing all locks held in the system: [ 329.880118] 3 locks held by kworker/u4:1/23: [ 329.884626] #0: 000000000665e2fe ((wq_completion)"writeback"){+.+.}, at: process_one_work+0xb43/0x1b90 [ 329.894213] #1: 00000000a065f771 ((work_completion)(&(&wb->dwork)->work)){+.+.}, at: process_one_work+0xb9a/0x1b90 [ 329.904982] #2: 00000000901e7cf6 (&type->s_umount_key#51){++++}, at: trylock_super+0x22/0x110 [ 329.913931] 1 lock held by khungtaskd/987: [ 329.918190] #0: 0000000043781a66 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 329.927594] 1 lock held by rsyslogd/5110: [ 329.931721] #0: 00000000b532a9ec (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 329.939737] 2 locks held by getty/5200: [ 329.943695] #0: 000000004ce96739 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 329.952085] #1: 00000000f6bf82db (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 329.960967] 2 locks held by getty/5201: [ 329.964914] #0: 00000000f5b85e60 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 329.973173] #1: 000000001b250027 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 329.982057] 2 locks held by getty/5202: [ 329.986291] #0: 0000000007d20333 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 329.994580] #1: 00000000b267a52a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 330.003471] 2 locks held by getty/5203: [ 330.007443] #0: 000000001084deff (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 330.015744] #1: 00000000e5479244 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 330.024719] 2 locks held by getty/5204: [ 330.028723] #0: 000000002dbfffb0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 330.037010] #1: 0000000065e4687c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 330.046220] 2 locks held by getty/5205: [ 330.050188] #0: 0000000042a37f92 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 330.059010] #1: 000000002c782c4b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 330.067897] 2 locks held by getty/5206: [ 330.071984] #0: 0000000000b29f1e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 330.080263] #1: 00000000bb0d5726 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 330.089162] 3 locks held by syz-executor5/7406: [ 330.093803] #0: 00000000fb5929ca (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 330.101810] #1: 000000001afe373f (sb_writers#15){.+.+}, at: vfs_write+0x42a/0x560 [ 330.109594] #2: 00000000f1e9f883 (&sb->s_type->i_mutex_key#21){+.+.}, at: generic_file_write_iter+0xed/0x870 [ 330.119832] 1 lock held by syz-executor5/7416: [ 330.124436] #0: 00000000fb5929ca (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 330.132457] 2 locks held by syz-executor5/7419: [ 330.137130] #0: 000000001afe373f (sb_writers#15){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 330.145097] #1: 000000001d2ac740 (&sb->s_type->i_mutex_key#21){+.+.}, at: path_openat+0x15c7/0x5160 [ 330.154409] 1 lock held by syz-executor5/7455: [ 330.158997] #0: 00000000fb5929ca (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 330.167184] 1 lock held by syz-executor5/7456: [ 330.171889] #0: 00000000fb5929ca (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 330.179905] [ 330.181517] ============================================= [ 330.181517] [ 330.189113] NMI backtrace for cpu 0 [ 330.192872] CPU: 0 PID: 987 Comm: khungtaskd Not tainted 4.19.0-rc5+ #253 [ 330.199793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.209124] Call Trace: [ 330.211688] dump_stack+0x1c4/0x2b4 [ 330.215397] ? dump_stack_print_info.cold.2+0x52/0x52 [ 330.220577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.226265] nmi_cpu_backtrace.cold.3+0x63/0xa2 [ 330.230931] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 330.236113] nmi_trigger_cpumask_backtrace+0x1b3/0x1ed [ 330.241425] arch_trigger_cpumask_backtrace+0x14/0x20 [ 330.246719] watchdog+0xb3e/0x1050 [ 330.250264] ? reset_hung_task_detector+0xd0/0xd0 [ 330.255089] ? __kthread_parkme+0xce/0x1a0 [ 330.259309] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 330.264394] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 330.269489] ? lockdep_hardirqs_on+0x421/0x5c0 [ 330.274052] ? trace_hardirqs_on+0xbd/0x310 [ 330.278594] ? kasan_check_read+0x11/0x20 [ 330.282732] ? __kthread_parkme+0xce/0x1a0 [ 330.286946] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 330.292432] ? kasan_check_write+0x14/0x20 [ 330.296779] ? do_raw_spin_lock+0xc1/0x200 [ 330.301193] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 330.306284] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.311798] ? __kthread_parkme+0xfb/0x1a0 [ 330.316165] kthread+0x35a/0x420 [ 330.319516] ? reset_hung_task_detector+0xd0/0xd0 [ 330.324387] ? kthread_bind+0x40/0x40 [ 330.328179] ret_from_fork+0x3a/0x50 [ 330.332036] Sending NMI from CPU 0 to CPUs 1: [ 330.337945] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.094 msecs [ 330.338568] NMI backtrace for cpu 1 [ 330.338573] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.19.0-rc5+ #253 [ 330.338579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.338583] RIP: 0010:__lock_acquire+0x2a8/0x4ec0 [ 330.338594] Code: 08 48 85 db 0f 84 27 ff ff ff 48 8d bb 38 01 00 00 be 04 00 00 00 44 89 84 24 88 00 00 00 e8 df a2 61 00 f0 ff 83 38 01 00 00 <49> 8d 86 78 08 00 00 44 8b 84 24 88 00 00 00 48 89 c2 48 89 44 24 [ 330.338598] RSP: 0018:ffff8801dad06ea0 EFLAGS: 00000006 [ 330.338606] RAX: fffffbfff15dba12 RBX: ffffffff8aedcf50 RCX: ffffffff816098d1 [ 330.338611] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8aedd088 [ 330.338616] RBP: ffff8801dad07230 R08: fffffbfff15dba12 R09: fffffbfff15dba11 [ 330.338621] R10: fffffbfff15dba11 R11: ffffffff8aedd08b R12: 0000000000000001 [ 330.338626] R13: ffff8801dad2cb58 R14: ffff8801d9b1a3c0 R15: 0000000000000000 [ 330.338631] FS: 0000000000000000(0000) GS:ffff8801dad00000(0000) knlGS:0000000000000000 [ 330.338636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.338641] CR2: ffffffffff600400 CR3: 00000001c310b000 CR4: 00000000001406e0 [ 330.338646] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.338651] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.338653] Call Trace: [ 330.338656] [ 330.338660] ? mark_held_locks+0x130/0x130 [ 330.338663] ? __lock_acquire+0x7ec/0x4ec0 [ 330.338667] ? __update_load_avg_blocked_se+0x730/0x730 [ 330.338671] ? mark_held_locks+0x130/0x130 [ 330.338675] ? update_load_avg+0x387/0x2470 [ 330.338679] ? attach_entity_load_avg+0x860/0x860 [ 330.338682] ? cpumask_next_and+0x49/0x50 [ 330.338686] ? update_sd_lb_stats+0x46c/0x2a40 [ 330.338689] ? graph_lock+0x170/0x170 [ 330.338693] ? rb_erase+0x3710/0x3710 [ 330.338696] ? mark_held_locks+0x130/0x130 [ 330.338700] ? trace_hardirqs_on+0x310/0x310 [ 330.338703] ? graph_lock+0x170/0x170 [ 330.338707] ? find_held_lock+0x36/0x1c0 [ 330.338710] ? cpuacct_charge+0x265/0x440 [ 330.338714] ? find_held_lock+0x36/0x1c0 [ 330.338717] lock_acquire+0x1ed/0x520 [ 330.338721] ? update_blocked_averages+0x156/0x1e00 [ 330.338724] ? lock_release+0x970/0x970 [ 330.338728] ? trace_hardirqs_off+0xb8/0x310 [ 330.338732] ? update_blocked_averages+0x156/0x1e00 [ 330.338736] ? trace_hardirqs_on+0x310/0x310 [ 330.338739] _raw_spin_lock_irqsave+0x99/0xd0 [ 330.338743] ? update_blocked_averages+0x156/0x1e00 [ 330.338747] update_blocked_averages+0x156/0x1e00 [ 330.338751] ? __account_cfs_rq_runtime+0x790/0x790 [ 330.338755] ? lock_downgrade+0x900/0x900 [ 330.338759] ? check_preemption_disabled+0x48/0x200 [ 330.338762] ? graph_lock+0x170/0x170 [ 330.338766] ? account_entity_enqueue+0x3a3/0x660 [ 330.338770] ? rq_online_fair+0x4d0/0x4d0 [ 330.338773] ? __enqueue_entity+0x10d/0x1f0 [ 330.338777] ? __lock_is_held+0xb5/0x140 [ 330.338780] ? put_prev_task_fair+0x80/0x80 [ 330.338784] ? update_curr+0x344/0xbe0 [ 330.338787] ? graph_lock+0x170/0x170 [ 330.338791] ? find_first_bit+0xbe/0x100 [ 330.338794] ? print_usage_bug+0xc0/0xc0 [ 330.338797] ? __lock_acquire+0x7ec/0x4ec0 [ 330.338801] ? print_usage_bug+0xc0/0xc0 [ 330.338805] ? __lock_is_held+0xb5/0x140 [ 330.338809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.338812] ? __lock_acquire+0x7ec/0x4ec0 [ 330.338816] ? graph_lock+0x170/0x170 [ 330.338819] ? __lock_acquire+0x7ec/0x4ec0 [ 330.338823] ? graph_lock+0x170/0x170 [ 330.338827] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 330.338830] ? find_next_bit+0x104/0x130 [ 330.338834] _nohz_idle_balance+0x5ba/0x7a0 [ 330.338837] ? try_to_wake_up+0x10a/0x12f0 [ 330.338841] ? rebalance_domains+0xdc0/0xdc0 [ 330.338845] ? mark_held_locks+0x130/0x130 [ 330.338848] ? kasan_check_read+0x11/0x20 [ 330.338852] ? do_raw_spin_unlock+0xa7/0x2f0 [ 330.338855] ? trace_hardirqs_on+0x310/0x310 [ 330.338859] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 330.338863] ? graph_lock+0x170/0x170 [ 330.338867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.338871] ? check_preemption_disabled+0x48/0x200 [ 330.338875] run_rebalance_domains+0x2ec/0x500 [ 330.338878] ? _nohz_idle_balance+0x7a0/0x7a0 [ 330.338882] ? rcu_pm_notify+0xc0/0xc0 [ 330.338885] __do_softirq+0x30b/0xad8 [ 330.338889] ? __irqentry_text_end+0x1f9618/0x1f9618 [ 330.338893] ? pvclock_read_flags+0x160/0x160 [ 330.338897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.338901] ? check_preemption_disabled+0x48/0x200 [ 330.338904] ? kvm_clock_read+0x18/0x30 [ 330.338908] ? kvm_sched_clock_read+0x9/0x20 [ 330.338912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.338916] ? check_preemption_disabled+0x48/0x200 [ 330.338919] irq_exit+0x17f/0x1c0 [ 330.338923] scheduler_ipi+0x55a/0xad0 [ 330.338926] ? migration_cpu_stop+0x6a0/0x6a0 [ 330.338931] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.338935] ? check_preemption_disabled+0x48/0x200 [ 330.338938] ? rcu_nmi_exit+0xdb/0x280 [ 330.338941] ? rcu_idle_enter+0x4b0/0x4b0 [ 330.338945] ? kvm_clock_read+0x18/0x30 [ 330.338949] ? kvm_sched_clock_read+0x9/0x20 [ 330.338953] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.338957] ? check_preemption_disabled+0x48/0x200 [ 330.338961] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.338965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.338969] ? check_preemption_disabled+0x48/0x200 [ 330.338973] smp_reschedule_interrupt+0x109/0x650 [ 330.338977] ? smp_thermal_interrupt+0x850/0x850 [ 330.338980] ? interrupt_entry+0xb5/0xf0 [ 330.338985] ? trace_hardirqs_off_caller+0xbb/0x310 [ 330.338989] ? trace_hardirqs_off_caller+0xbb/0x310 [ 330.338993] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.338997] ? trace_hardirqs_on_caller+0x310/0x310 [ 330.339001] ? trace_hardirqs_on_caller+0x310/0x310 [ 330.339005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.339009] ? check_preemption_disabled+0x48/0x200 [ 330.339013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.339016] reschedule_interrupt+0xf/0x20 [ 330.339019] [ 330.339022] RIP: 0010:native_safe_halt+0x6/0x10 [ 330.339033] Code: e9 2c ff ff ff 48 89 c7 48 89 45 d8 e8 23 8d 02 fa 48 8b 45 d8 e9 ca fe ff ff 48 89 df e8 12 8d 02 fa eb 82 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 [ 330.339037] RSP: 0018:ffff8801d9b2fbf0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02 [ 330.339046] RAX: dffffc0000000000 RBX: 1ffff1003b365f82 RCX: 0000000000000000 [ 330.339050] RDX: 1ffffffff12a475c RSI: 0000000000000001 RDI: ffffffff89523ae0 [ 330.339055] RBP: ffff8801d9b2fbf0 R08: ffff8801d9b1a3c0 R09: 0000000000000000 [ 330.339060] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d9b2fcb0 [ 330.339065] R13: ffffffff8a315fa0 R14: 0000000000000000 R15: 0000000000000001 [ 330.339069] default_idle+0xbf/0x490 [ 330.339073] ? rcu_dynticks_eqs_enter+0x4c/0x70 [ 330.339076] ? __sched_text_end+0x1/0x1 [ 330.339080] ? rcu_idle_enter+0x329/0x4b0 [ 330.339083] ? rcu_eqs_special_set+0x1b0/0x1b0 [ 330.339087] ? tsc_verify_tsc_adjust+0x137/0x460 [ 330.339091] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 330.339096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.339100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.339104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.339107] arch_cpu_idle+0x10/0x20 [ 330.339111] default_idle_call+0x6d/0x90 [ 330.339115] do_idle+0x3db/0x5b0 [ 330.339118] ? retint_kernel+0x2d/0x2d [ 330.339122] ? arch_cpu_idle_exit+0x70/0x70 [ 330.339126] cpu_startup_entry+0x10c/0x120 [ 330.339129] ? cpu_in_idle+0x20/0x20 [ 330.339133] start_secondary+0x523/0x750 [ 330.339136] ? set_cpu_sibling_map+0x1860/0x1860 [ 330.339140] secondary_startup_64+0xa4/0xb0 [ 330.339821] Kernel panic - not syncing: hung_task: blocked tasks [ 331.073969] CPU: 0 PID: 987 Comm: khungtaskd Not tainted 4.19.0-rc5+ #253 [ 331.080981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.090321] Call Trace: [ 331.092915] dump_stack+0x1c4/0x2b4 [ 331.096525] ? dump_stack_print_info.cold.2+0x52/0x52 [ 331.101706] panic+0x238/0x4e7 [ 331.104880] ? add_taint.cold.5+0x16/0x16 [ 331.109012] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 331.114446] ? nmi_trigger_cpumask_backtrace+0x1c4/0x1ed [ 331.119877] ? nmi_trigger_cpumask_backtrace+0x173/0x1ed [ 331.125315] ? nmi_trigger_cpumask_backtrace+0x16a/0x1ed [ 331.130757] watchdog+0xb4f/0x1050 [ 331.134286] ? reset_hung_task_detector+0xd0/0xd0 [ 331.139113] ? __kthread_parkme+0xce/0x1a0 [ 331.143331] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 331.148416] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 331.153502] ? lockdep_hardirqs_on+0x421/0x5c0 [ 331.158066] ? trace_hardirqs_on+0xbd/0x310 [ 331.162371] ? kasan_check_read+0x11/0x20 [ 331.166501] ? __kthread_parkme+0xce/0x1a0 [ 331.170720] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 331.176154] ? kasan_check_write+0x14/0x20 [ 331.180380] ? do_raw_spin_lock+0xc1/0x200 [ 331.184599] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 331.189684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 331.195211] ? __kthread_parkme+0xfb/0x1a0 [ 331.199449] kthread+0x35a/0x420 [ 331.202798] ? reset_hung_task_detector+0xd0/0xd0 [ 331.207622] ? kthread_bind+0x40/0x40 [ 331.211404] ret_from_fork+0x3a/0x50 [ 331.216428] Kernel Offset: disabled [ 331.220051] Rebooting in 86400 seconds..