[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 78.039414] audit: type=1800 audit(1550503691.087:25): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 78.058677] audit: type=1800 audit(1550503691.087:26): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 78.078155] audit: type=1800 audit(1550503691.087:27): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. 2019/02/18 15:28:25 fuzzer started 2019/02/18 15:28:30 dialing manager at 10.128.0.26:41979 2019/02/18 15:28:30 syscalls: 1 2019/02/18 15:28:30 code coverage: enabled 2019/02/18 15:28:30 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/18 15:28:30 extra coverage: extra coverage is not supported by the kernel 2019/02/18 15:28:30 setuid sandbox: enabled 2019/02/18 15:28:30 namespace sandbox: enabled 2019/02/18 15:28:30 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/18 15:28:30 fault injection: enabled 2019/02/18 15:28:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/18 15:28:30 net packet injection: enabled 2019/02/18 15:28:30 net device setup: enabled 15:30:53 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc008561b, &(0x7f0000000040)={0x0, 0x0, [], @raw_data}) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) prctl$PR_SET_FPEMU(0xa, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) syzkaller login: [ 240.661983] IPVS: ftp: loaded support on port[0] = 21 [ 240.796519] chnl_net:caif_netlink_parms(): no params data found [ 240.861713] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.868308] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.876533] device bridge_slave_0 entered promiscuous mode [ 240.885221] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.891818] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.899833] device bridge_slave_1 entered promiscuous mode [ 240.929744] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.940541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.968801] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.977153] team0: Port device team_slave_0 added [ 240.983947] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.992409] team0: Port device team_slave_1 added [ 240.998449] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.007280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.076111] device hsr_slave_0 entered promiscuous mode [ 241.152217] device hsr_slave_1 entered promiscuous mode [ 241.302897] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 241.310341] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 241.336985] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.343536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.350573] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.357139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.432948] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 241.439079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.452511] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.465438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.476471] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.486166] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.496548] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 241.513475] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 241.519579] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.533956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.542155] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.548739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.563178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.571666] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.578122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.615635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.624779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.634471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.647630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.663449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.675672] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 241.681844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.690565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.718983] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 241.736951] 8021q: adding VLAN 0 to HW filter on device batadv0 15:30:54 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='taskq\x00', 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "73a61debdda3ff79"}, 0x10}}, 0x0) 15:30:55 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) timer_getoverrun(0x0) socket$bt_rfcomm(0x1f, 0x827142e41d804b50, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x102, 0x100001, 0x0, 0x0, 0x400000}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) lstat(&(0x7f0000000580)='./file1\x00', 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x8000}, 0x4) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 242.126186] usb usb3: check_ctrlrecip: process 10483 (syz-executor.0) requesting ep 01 but needs 81 [ 242.136081] usb usb3: usbfs: process 10483 (syz-executor.0) did not claim interface 0 before use [ 242.217183] usb usb3: check_ctrlrecip: process 10482 (syz-executor.0) requesting ep 01 but needs 81 [ 242.227510] usb usb3: usbfs: process 10482 (syz-executor.0) did not claim interface 0 before use [ 242.245768] hrtimer: interrupt took 43866 ns 15:30:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001c00), 0x0) 15:30:56 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0), 0x2d) 15:30:56 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') timer_getoverrun(0x0) socket$bt_rfcomm(0x1f, 0x827142e41d804b50, 0x3) lstat(0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f00000000c0)={0x102, 0x100001}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000480)) lstat(&(0x7f0000000580)='./file1\x00', 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x8000}, 0x4) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:30:56 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x90f6}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0x2000ffffff93}}) 15:30:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000040)=""/11, 0x29c) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='\x00'}, 0x10) syz_execute_func(&(0x7f00000003c0)="3666440f9bf56664402d9f3241c3c4e2c997584240dcb6d33e2c8f3e0f1158101019c461fd5b38cd042902") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r2, r3, r4}, 0xc) r5 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x2, 0x95b7feeca86bbbff) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000400)) [ 243.848778] IPVS: ftp: loaded support on port[0] = 21 [ 243.989771] chnl_net:caif_netlink_parms(): no params data found [ 244.055202] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.061850] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.070037] device bridge_slave_0 entered promiscuous mode [ 244.079160] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.085866] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.094572] device bridge_slave_1 entered promiscuous mode [ 244.127884] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.139305] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.168768] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.177361] team0: Port device team_slave_0 added [ 244.183892] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.192462] team0: Port device team_slave_1 added [ 244.199359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 244.208634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 244.287214] device hsr_slave_0 entered promiscuous mode [ 244.322970] device hsr_slave_1 entered promiscuous mode [ 244.472962] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 244.480687] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 244.511458] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.518022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.525143] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.531672] bridge0: port 1(bridge_slave_0) entered forwarding state 15:30:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0x4b564d04]}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'hsr0\x00', 0x200}) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f00000000c0)) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x427}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'bcsf0\x00', 0x401}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'batadv0\x00', 0x600}) [ 244.628719] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 244.634994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.660403] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.678303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.688097] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.702969] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.715660] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 244.752476] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 244.758610] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.767672] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 244.774880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.790505] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.797015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.849926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.859870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.871214] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 244.888477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.896711] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.903269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.913165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.922183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.930668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.939228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.962614] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 244.983145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.993824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.001754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.179026] usb usb3: check_ctrlrecip: process 10518 (syz-executor.1) requesting ep 01 but needs 81 [ 245.188916] usb usb3: usbfs: process 10518 (syz-executor.1) did not claim interface 0 before use 15:30:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r0, &(0x7f00001cb000)={0x0, 0x0, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0x4) r1 = socket$netlink(0x10, 0x3, 0x1000000000000008) writev(r1, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d001000ea1100000005000000", 0x29}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x28) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r3, 0x37, "dcaaf0dbeb058822169c2e1df214d1799a89eb09e8b1c893a442549b3bb02ce9870230b6909704c6d5006394f0d9a0b761217e50cef8fd"}, &(0x7f0000000140)=0x3f) [ 245.257500] usb usb3: check_ctrlrecip: process 10519 (syz-executor.1) requesting ep 01 but needs 81 [ 245.267368] usb usb3: usbfs: process 10519 (syz-executor.1) did not claim interface 0 before use 15:30:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x40, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000380)={0xfff, 0x3, 0x3, 0x5, 0xff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000340)={r3, 0x1}) read(r2, &(0x7f0000000040)=""/230, 0x20000126) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r4, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=0x0) ptrace$setsig(0x4203, r5, 0xf1, &(0x7f0000000240)={0x34, 0x7ff, 0x634}) 15:30:58 executing program 1: r0 = socket(0x10, 0x80003, 0x9) write(r0, &(0x7f0000000440)="1f0000000104ff00fd4354c007110000f305010008000100020423dcffdf11", 0x1f) 15:30:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000800)="230000002e0007031dfffd946fa2830020200a00ffffffffa61d85680c1ba3a20400ff", 0x23}], 0x1}, 0x0) bind(r0, &(0x7f0000000000)=@ethernet={0x306}, 0x80) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10, 0x0, 0x2}, 0x10) 15:30:58 executing program 1: unshare(0x20400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x82, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) socketpair(0x0, 0x6, 0x6, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0xffffffffd2c9d015, 0x8009, 0xf64, 0x20, 0x2, 0x5, 0x1, r3}, 0x20) tee(r0, r1, 0x60, 0x0) 15:30:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f02ff01000088a070") r1 = socket(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x8, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x144}, {&(0x7f00000000c0)=""/85, 0x6f6}, {&(0x7f0000000fc0)=""/4096, 0x10f6}, {&(0x7f0000000400)=""/120, 0x107c}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x15}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f6, 0x6, &(0x7f0000003700)={0x77359400}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x2) recvfrom$unix(r1, &(0x7f0000000180)=""/113, 0x71, 0x40000000, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) socket$vsock_dgram(0x28, 0x2, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000600)={0x18, 0x0, 0x7, {0x280000000000000}}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000300)=0x6) 15:30:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000009d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c498916bdcd6c7b"], 0xb8}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x150, r3, 0x700, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x85}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x25}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x32}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xcf6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x150}, 0x1, 0x0, 0x0, 0x8004}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f0000000040)={@ipv4={[], [], @multicast2}}, 0x20) 15:30:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) 15:30:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4000, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x7, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={r2, 0x9}, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = memfd_create(&(0x7f0000000100)='\x0f\xc5\xd4\xe1?\xd1D\xbb\xf9\xda\xf6p\xef/\xf4,%\x03\xdfv\xb6\xa5\xa8\x12+@\x16K\xa8\x1cx\x12\x00\x00\x00\x10\xcd_\xafk\xa8!t\x17\xe6\x9e\xb7VoX\x1bu\x80\xbe \xc8v\xcb\x0f\xd1\a\xb0m', 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0xf, 0x13, r5, 0x0) clock_adjtime(0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) r6 = fcntl$dupfd(r0, 0x0, r3) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f0000000000)={0x4, 0x5, 0x6, 0x4, 0x9, 0x9b}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:30:59 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/packet\x00') lseek(r1, 0x800000000, 0x0) 15:30:59 executing program 1: open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0xfffffffffffffffa, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$setlease(r0, 0x400, 0x0) 15:30:59 executing program 1: unshare(0x20400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x2, 0x20, 0x96c}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@reserved}) 15:30:59 executing program 1: socket(0x400020000000010, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="1f00000056000d6dfcffff07bc0243030701ff2104173f810000000500004e", 0x4) prctl$PR_SET_PDEATHSIG(0x1, 0x40) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) 15:30:59 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net\x00') socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x1000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x2) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000080)=r0, 0x4) [ 246.695984] Unknown ioctl 1074025828 15:30:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4140, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@int=0x7fff, 0x4) socket(0xfffffffffffffffc, 0x10000000004, 0x3) getsockopt(r1, 0x4, 0x271a, &(0x7f0000000180)=""/13, &(0x7f0000000000)=0xfffffc85) r2 = getegid() getgroups(0x1, &(0x7f0000000100)=[r2]) 15:30:59 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xdf, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000000c0)={0x6, 0x0, [{0xb, 0x9, 0x70, 0x80000000, 0x1f}, {0x6, 0x3, 0x8d8, 0x2, 0x1}, {0x40000001, 0xffffffff, 0x9, 0x2}, {0x4, 0x3, 0x101, 0x57c, 0xf282}, {0x6, 0x2977, 0x8, 0x4e, 0x845}, {0xa, 0xfff, 0x3, 0x400, 0x31}]}) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="48000000150019fcd9e6e9e40013f35a0200db7879efe7155942b2e0d0ac7f09004b01c2445ea7c519f0dea30c5459520274bc9240e10520613057fff70000000000000000000000", 0x48}], 0x1) 15:31:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f0000000240)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) fcntl$setlease(r2, 0x400, 0x0) dup3(r1, r2, 0x0) mq_unlink(&(0x7f0000000040)='eth0\x00') 15:31:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) close(r2) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100)=0x7, 0x4) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000340)=0x70) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x8000000040084, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='veth0\x00'}) 15:31:00 executing program 1: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xfff, 0x8}, 0xc) lseek(r0, 0x1, 0x7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000000680)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, &(0x7f00000005c0)='1\x94\xb5\xac\x80\xda\xf9\x8a*\xeb\x9cG\xbf\xe5AEk\x9c\xce \x0e\x8cnA\xc4QQ`\x92\x1f\xb1,\xd6M\xf50:\x94D\xcc\x15qV\xf0\x98]\x1f\x02`i\xcb\x05\xdf:1z\xdc\xdfE\xf8\x10)5\xa0\xa5\xfb{0#\x81\xff\xf5T\xa0\xfb\xad\xcb\xa1gaB\xce\xfb\x1b\xe8\xb8\xdb\xf3%\xe5\xd730Z\xd7\xa2z\xfbt\xe7\xe2~\xae\xb0z\xa1\xb8-/\x03\xd8\xbc\xe1\xdc\xfe8cG89ak\xc4\x0f\x82#\xe8p\x98\xda\xc6,') chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r1, 0x28007d) sendfile(r1, r1, &(0x7f0000d83ff8), 0x2008000fffffffe) 15:31:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f0000000240)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) fcntl$setlease(r2, 0x400, 0x0) dup3(r1, r2, 0x0) mq_unlink(&(0x7f0000000040)='eth0\x00') 15:31:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f0000000240)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) fcntl$setlease(r2, 0x400, 0x0) dup3(r1, r2, 0x0) mq_unlink(&(0x7f0000000040)='eth0\x00') 15:31:00 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x600, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r1, 0xa}) [ 247.623086] QAT: Invalid ioctl 15:31:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f0000000240)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) fcntl$setlease(r2, 0x400, 0x0) dup3(r1, r2, 0x0) mq_unlink(&(0x7f0000000040)='eth0\x00') 15:31:00 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) bind$can_raw(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/60) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000040)) 15:31:00 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fff, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)={0x0, 0x20, [0x9, 0x18, 0x4, 0x253b, 0x0, 0x401, 0x101, 0x8000]}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x2, 0x4, 0x100000001, 0x8000000001, 0x1}, 0xb) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000)) bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0xfffffdffffffffff, 0x0, 0x0, 0x820000, 0x0, 0xfffffffffffffffc}, 0x2c) 15:31:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f0000000240)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) fcntl$setlease(r2, 0x400, 0x0) dup3(r1, r2, 0x0) 15:31:01 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4, @tid=r0}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x1ff, 0x3ff, 0x10000, 0x6, 0x18, 0x0, 0xfffffffffffffffe, 0x20, 0x7, 0x2, 0x200, 0x2}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x64, 0x400, 0xe952, 0xffffffff, 0xc, 0x8, 0x4, 0x3ff, 0x2, 0x0, 0x0, 0x4}) 15:31:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$setsig(0x4203, r1, 0x800, &(0x7f0000000100)={0x2d, 0x9, 0x101}) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000040)="e56903b7d8b431ee660f524c6a247753f4c8cb8dc6d80d6a22ff28300db7b0a0e89c8f6c50031d4ec8cb2940d78157718cd63c4821d3c96ada4230ac3339099ad21e5f2e7a4e5089877553e51875eaef2c7ec71fb8dd7ff508eaca5dacd058e1e62111bfafbf80b4b6c107937099b5ff551066085a23a4944b3ef750065a559b4263b5bf927d42f807bf1899fac2b2e585ca02") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x202201) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x134, r4, 0x404, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x16}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x18}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80000001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r5 = fcntl$getown(r2, 0x9) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000400)) syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/pid\x00') 15:31:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000240)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) fcntl$setlease(r1, 0x400, 0x0) 15:31:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000240)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x4}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) unshare(0x804000400) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 15:31:01 executing program 1: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x4002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/net/tun\x00', 0x20200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000280)=""/4096, &(0x7f0000000000)=0x1000) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xb) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) getpeername$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001280)=0x1c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x3, 0x80000001, 0x1, 0x4}, 0x8000, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0xbc, 0xc1, 0x80}) [ 248.579655] QAT: Invalid ioctl 15:31:01 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x8) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000040)="9846014d1465d5bd3ab49155417d730d20705a0f53418dd9219859a3f98724c555ce3a589c917dbbfd6d62e87c715856059227e3cd1f8279d397cb8741625297377ce9588df7fe3dbd1cbb95b4f40cd219d78f7b4eb2c211d8b30bbbe0924518c4415123b0959555eff75710ff5fffe989bc2acf63624fdd777e620eb5468b61ff4eab4db2619fe19301c5253b5e8beeb14c54be9cd6930393825fdc5300d5fb9acc292da9cf9e8760e6a91333a550cb9c469c9f3a1263f7e985e7b9cec5ff9e4abd1cf19edf79e9f2054257109d65a6e05502bcba8922", 0xd7) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/182) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000280)={0x57, 0x1a, 0x9, {0x3, 0x7}, {0x1, 0xa}, @period={0x5b, 0x7, 0x2, 0x7d34, 0x3, {0x7, 0x57, 0x20, 0x8}, 0x1, &(0x7f0000000240)=[0x3]}}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000002c0)) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000300)={0x7, 0x80}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x1ff}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r2, 0x8}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000400)="06b5b3367dd9bd1de50a8967c40a48dea46650d6c4ff3eab12363fb9fb91d72b98", &(0x7f0000000440)="634c6ef5c2aee32fbeba0f60c024b55cc592249f4f8936482b5a7b6bee87d043f858b14f8f28ebc90a0cf7a3d124b066390b60b2eb8a15cf1e787754fd07754a99f3c28be9eaec34ceadd4191435ee2c4eed4f2270667fe1fa18e87909ebc9ca29c14ffc3d8a4d0457fdb767bc8401a3428d5a0a9b75ea", 0x5cb7a783ea9d649e}, 0x20) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000500)) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000540)={0x5c26, 0xdc4, 0x8}) getsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0)=0x4) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000680)={@dev={0xfe, 0x80, [], 0x16}, r3}, 0x14) write$FUSE_INTERRUPT(r0, &(0x7f00000006c0)={0x10, 0x0, 0x6}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000700)=@assoc_value={r2, 0x3}, &(0x7f0000000740)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000780)={0x6, 0x8}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/loop-control\x00', 0x280041, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000800)={0x2, 0x3, 0x0, 0x7ff, 0x92, 0xa77}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000840)={0x1, [0x3f]}, &(0x7f0000000880)=0x6) r4 = msgget(0x2, 0x8) msgsnd(r4, &(0x7f00000008c0)={0x0, "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"}, 0x1008, 0x800) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000001980)={0x1f, 0x5c, &(0x7f0000001900)="23a43ea2a9576bc0ff1aab2ea5e7f7ca1bed38cb1be4501bb81e697cd5d6d001e17365999c144184fc8404dce228c83600b308b9fe02325c318d541b0f378125dad44de07e01a2d8d70e06117a2a45e9bcdc7826b4c9db7a94b01fd3"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000019c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000001a40)={{0x2, 0x7, 0x10, 0xf4, 'syz0\x00', 0x4}, 0x2, 0x4, 0x800, r5, 0x5, 0x80000000, 'syz1\x00', &(0x7f0000001a00)=['/dev/loop-control\x00', '(--\x00', '/proc/capi/capi20\x00', ')\x9d#mime_type\x00', '^cpuset\x00'], 0x3d, [], [0x7, 0x1ff, 0x0, 0x45]}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001b80)='bridge_slave_0\x00') 15:31:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:01 executing program 1: r0 = socket$inet(0x10, 0x3, 0x800) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000280007081dfffd940101830020200a000900000006000000600000000d00ff7e", 0x24}], 0x1}, 0x0) 15:31:02 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x5, @pix_mp={0x2, 0x6, 0x37303250, 0x7, 0x7, [{0x10000000000000}, {0x20000, 0x4}, {0x7, 0x7}, {0x400, 0xfffffffffffffffe}, {0x0, 0x5}, {0x7, 0x10000000}, {0x554, 0x800}, {0x2, 0x3}], 0x5, 0x2580000000, 0x8, 0x0, 0x2}}) 15:31:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:02 executing program 1: set_mempolicy(0x8000000000000002, &(0x7f0000000040)=0x80000000000003ff, 0x4) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x280) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18, 0x0, 0x6, {0x29f}}, 0x18) init_module(&(0x7f0000000080)='/\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffd, 0x440) socket$can_raw(0x1d, 0x3, 0x1) r2 = dup3(r1, r1, 0x80000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000006c0)=""/222) write$P9_RLOCK(r1, &(0x7f00000007c0)={0x8, 0x35, 0x1}, 0x8) unshare(0x4c060000) 15:31:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:02 executing program 0: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) [ 249.322791] IPVS: ftp: loaded support on port[0] = 21 [ 249.401477] IPVS: ftp: loaded support on port[0] = 21 15:31:02 executing program 0: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) [ 249.566637] IPVS: ftp: loaded support on port[0] = 21 [ 249.567889] chnl_net:caif_netlink_parms(): no params data found 15:31:02 executing program 0: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) [ 249.722044] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.728656] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.736911] device bridge_slave_0 entered promiscuous mode [ 249.770489] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.777096] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.785390] device bridge_slave_1 entered promiscuous mode 15:31:02 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:02 executing program 1: r0 = memfd_create(&(0x7f0000000040)='&lo(#securitylo\x00', 0x8000000004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = getuid() r2 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x4, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xbc, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xd}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20044004}, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x100, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000300)={0x7b, @local, 0x4e23, 0x2, 'wlc\x00', 0x4, 0x81, 0x5f}, 0x2c) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) fchown(r0, r1, r5) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000200)={0xa0, 0x0, 0x5, {{0x6, 0x2, 0x4, 0x2, 0xc7d1, 0x400, {0x2, 0x10000, 0x7ff, 0x2, 0x0, 0x6, 0x8001, 0x9, 0x7fffffff, 0x100, 0x40, r1, r6, 0x8, 0x272}}, {0x0, 0x6}}}, 0xa0) ftruncate(r0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x444000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40106614, &(0x7f0000000340)={0x0, @aes256}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000640)={0xffff, 0x2, 0x9, 0x80000000, 0x0}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f00000006c0)={r9, 0x3}, &(0x7f0000000700)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000180)) lsetxattr$security_ima(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.ima\x00', &(0x7f0000000600)=@ng={0x4, 0x2, "9d16392386e4254d4ff5006df4e6f4d4"}, 0x12, 0x3) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x1, 0x100, 0x6, 0x7}, 0xc) [ 249.845566] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 249.891555] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 249.977066] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 249.985770] team0: Port device team_slave_0 added [ 250.003374] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 250.012106] team0: Port device team_slave_1 added [ 250.019234] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 250.053246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 250.128490] device hsr_slave_0 entered promiscuous mode [ 250.162302] device hsr_slave_1 entered promiscuous mode [ 250.204119] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 250.211859] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 250.248043] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.254610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.261740] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.268222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.344465] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 250.350589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.369424] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 250.381922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.392161] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.400395] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.413812] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 250.432063] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 250.438163] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.459171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.467406] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.473945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.505068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.513505] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.519951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.556872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.566794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.578590] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 250.592073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.601051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.609752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.619457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.649337] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 250.657585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.666072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.691933] 8021q: adding VLAN 0 to HW filter on device batadv0 15:31:04 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=@getlink={0x2c, 0x12, 0x60d, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x4}]}, 0x2c}}, 0x0) 15:31:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipx\x00') getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000000c0)={0x7, 0x6, 0x9, 0x0, 0x20, 0xfffffffffffffff8, 0x40000000000}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb5e7ebdf5c993c72) ioctl$int_out(r1, 0x5460, &(0x7f0000000200)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x1f) ioctl$RTC_PIE_ON(r0, 0x7005) write$cgroup_int(r0, &(0x7f0000000080)=0x10000000000000, 0xc9) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) 15:31:04 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000080)={@loopback, @broadcast}, &(0x7f00000000c0)=0x8) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x400000000000fd, &(0x7f0000000040), &(0x7f0000000100)=0x4) 15:31:04 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:04 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x3, 0x4, 0x0, 0x0, @adapter={0xffffffffffff6858, 0xfffffffffffffe01, 0x7, 0x1}}]}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x40003, 0xc04e27d3b503e3df, 0x0, r1}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000100)=0x4) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) 15:31:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = getpid() mknod(&(0x7f0000000140)='./file0\x00', 0x10001040, 0x0) execve(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) r2 = gettid() kcmp(r2, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) tkill(r1, 0xf) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x20000) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0xffffffffffff0001, 0x4) 15:31:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 15:31:04 executing program 2: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) mmap(&(0x7f0000927000/0x4000)=nil, 0x4000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00') mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 15:31:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x3000, 0x1fff2, &(0x7f0000ffa000/0x3000)=nil) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:pinentry_exec_t:s0\x00', 0x25, 0x3) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) shmat(r2, &(0x7f0000000000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) 15:31:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 15:31:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_mempolicy(0x0, &(0x7f0000000200)=0x10000, 0xffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000040)=0x14) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) r4 = accept(r3, &(0x7f0000000240)=@nl, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x2f61}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000440)={r5, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x6c3e7dde, 0x5d1a, 0x6, 0x3ff, 0x5ce}, &(0x7f0000000500)=0x98) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000001c0)="29d03c9ac2", 0x0}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:31:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x600003, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x81f}, &(0x7f0000000200)=0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x7ffff000) 15:31:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 15:31:05 executing program 1: r0 = add_key(&(0x7f0000001d80)='id_legacy\x00', &(0x7f0000001dc0)={'syz'}, &(0x7f0000001e00)='I', 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000001ec0)='user\x00', &(0x7f0000001f00)={'syz'}, &(0x7f0000001f40)="e9", 0x1, 0xffffffffffffffff) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x258080, 0x0) syz_extract_tcp_res(&(0x7f0000000100), 0x7, 0x9) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x8, 0x2, 0x8, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x4, 0x9, &(0x7f0000000040)=0x3}) keyctl$link(0x8, r0, r0) 15:31:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x0, @multicast2}}) 15:31:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x600003, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x81f}, &(0x7f0000000200)=0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x7ffff000) 15:31:05 executing program 1: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) fchmodat(r0, &(0x7f0000000000)='./bus\x00', 0x0) 15:31:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x0, @multicast2}}) 15:31:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x0, @multicast2}}) 15:31:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa048b5bdb4cb904e473730e55cff26d1b0e001200000000005e510befccd7", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000003280)={0x0, 0x89, "1e03dabcdd30efc7f5c81d031f7b04768f466a50b9924f9ad83e8207b7bbe7e23021bcfed7dbe143eecdb842cfe9ff1fb16acb43cbe5e05bcc2e8e316e0add3c3e550abe681d0e6ca2973f66f2dd235e5ec0d31480ae9d48ce84695169f67843919c4fb4cc13754a1354791089b78045bcc373735d268f77d8b9a9b283f8dfe4f67f4bef2ef8966c07"}, &(0x7f0000000100)=0x91) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000034c0)={r2, @in6={{0xa, 0x4e22, 0x6, @local, 0x3}}, 0x0, 0x9}, &(0x7f0000000140)=0x90) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000003580)=""/160) recvmsg$kcm(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000001c0)=""/4096, 0xd9ec58fad261657b}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/84, 0xffffffffffffffc1}, {&(0x7f0000002240)=""/4096, 0x1000}], 0x4}, 0x2) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xb6bc, 0x40400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000003380)={0x6, 0x4, 0x6390, 0x0, 0x0, [], [], [], 0x9, 0x1ae}) 15:31:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = mq_open(&(0x7f0000000440)='eth0\x00\x81+\x02\x91Y\x05\x04\xeb\xb9mS[v\xe7n*E\x1e\xc5ix\xa8\x83K\x12\xd5\x96ZO6\xb1\x96RoB\xbcS\x82\"-\xfe\x97XC \x95\x9e\xd3\xa1\xb3\x0e\x05_c\x9b\x11]HG\x02\xf8\x8aI\x94\xbd\xa8X\xc2x\xe6\xd1\xf2\xefZ\xe2\xeapRa\xb6\b\xe9\"\xf0\xca\x18C\r\xb5\x10\xf5va\x1fz\xe4\x9aV8\xdb\x84\xd2p\xc7I8H\xea\xa2\x00kvl+X\xa5T\xa1e\xd4q\x8f\x93\x17|b\x0fch\'T\xf6mr$\xd3\xb2rH\xdc\bH\fAH\xaa~\xc7\x87\xc7\xfd\x9br\xc7\x1e(\x06=\xb2voQ\x05}N\xf0\xbe\x1a\xea\xd7\nN\xa3Z\xdfZ[U\x10m\xfa\xd5\xc2\xfa\xfcKD\xee\\\x12\x85\x01\xf8\x81\xe8\xf6+\xe91\xb46\x9b\x8d\x19\xd3\xf2in\xba0\x9e4v\x8c\x9c\x1a\xd8@y\x9c\x92\x17T+\xf8\x9e\v\xc1\x86\xc5\xbf\x8c\xa1_\xd0\xb5\xe6\xb7@\xb2\xdcL\x18\x0f@', 0x42, 0x0, 0x0) close(r1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x80, {0x40, 0x4, 0x3}, 0x2f, r3, r4, 0xe9, 0x1, 0x6, 0xfffffffffffffffb, 0x4, 0x6dcf, 0x8000, 0x8, 0x100, 0xfa4, 0x4, 0x8, 0x4, 0x1f, 0x4}}, 0xa0) mq_unlink(&(0x7f0000000080)='eth0\x00') 15:31:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000480)=""/28, 0xfffffd01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000400)) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000240), 0x4) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1008000000013) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') 15:31:05 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) [ 252.876141] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.928754] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 15:31:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x1, 0x1, 0x400}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:06 executing program 1: r0 = socket$kcm(0x10, 0x80000000, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e0000002d0081aee4050cecff0e00fa078b5b9b01000000000000007d0200000eb9a607000000b57d45993adb94", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) 15:31:06 executing program 1: r0 = socket(0x1e, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', r1}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x5, 0xffffffffffff0e34, 0x3, 0x9}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") listen(r2, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000180)=0x78) accept4(r2, 0x0, 0x0, 0x0) 15:31:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x8, 0x7, 0x800, 0x7fff}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x20000000000000}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc69o\xe9\xfb\x00', {0x2, 0x4e20, @remote}}) 15:31:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240), &(0x7f00000001c0)=0xfdf5) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfff, 0x20400) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000100)={0x800, 0x2, 0x1, 0x4000000000000000, 0x1f, 0x2}) 15:31:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e21, @multicast2}}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xb6, "d41bc40982c90b80adadfe48b60739b0f97d145842a30bf352d23d4045d319ad9cbcb44560986a1eab1f377fd5ea95c6d57b551c38e8b6efaa9fc7ab27875ea77a4e1d2450c63c79cc5bd37b579ec1cddfc3c1b046dc7347e39d0de3bbc302f7e5304b456fe49fca6cf848195a998c263bd8222bc090292c8e6b4a79d94a86460533ef6b23abcb9aa0104338a27b06349776344c20eab079f44048baf8362d78cab1780fff69b45cc7110585b92a3d364cc653f1177f"}, &(0x7f0000000080)=0xbe) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x9, 0x30, 0x3, 0x14}, &(0x7f0000000200)=0x18) 15:31:06 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xa0040, 0x0) ioctl$TCXONC(r0, 0x540a, 0x6) ioperm(0x7f, 0x8469, 0x6) ioctl$KDMKTONE(r0, 0x4b30, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000280)={0x2c, 0x1, r1, 0x2b, r0}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3c, 0x3f, 0x0, 0x9, 0xf, 0x4, "c5f44ab2c56320f50d600672900091630b7a5eeac2494f59d8ba787e504eaa930781f5f1c4b24a794430acb2e42121cfca126ae290a328a6c9e018ef4bfb34bb", "a3b4cf7d716ab0ea29f6de173fb411871c29d3a85cfc983d62032ffe861fb518f7a74d9a32d4e0a997ddccdab1e85ac22d17f53405afa149ef071e1c3de0f0de", "11ce8d8435d63758746b286256631ba96eb3758b713fe1d362a3a6b9b7ef2274", [0x1ff, 0x5]}) dup3(r0, r3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41240000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400dfff", @ANYRES16=r4, @ANYBLOB="00012bbd7000fedbdf25070000010800050023000000080004000500000008000400c70000000800050001000000080004000900000008000400010000003e9c4e97fcd0bb847b274f71f387d206db452272c6c4930e19f73ef14498b1dec5a3bd0fb02d463c27efc9f125"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 15:31:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00000000001d00000000000000000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x8000, 0xbcd]}, 0x8) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x2) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x1, 0x0, 0x0) shutdown(r0, 0x0) 15:31:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3f, 0x200) r2 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x4, 0x80) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = request_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='tunl0\x00', 0xfffffffffffffffd) r4 = add_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r3, &(0x7f0000000380)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '', 0x20, 0x6, 0x20, [0x39, 0x36, 0x31, 0x35]}, 0x30, r4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000001c0)={0x4, 0x0, 0x10001, 0x8}) write$P9_RSYMLINK(r2, &(0x7f0000000280)={0x14, 0x11, 0x1, {0x42, 0x4, 0x8}}, 0x14) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, r5, 0x10000, 0x7ca0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0x50, &(0x7f0000000100)}, 0x10) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000080)={0x40000000005, r6, 0x0, 0x1}) write$P9_RSYMLINK(r2, &(0x7f0000000240)={0x14, 0x11, 0x1, {0x92, 0x3}}, 0x14) 15:31:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) getsockname$packet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@rand_addr]}, 0x13) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e8, r2, 0x730, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6356}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa839}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9fa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xc8, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3000000000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x106}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x492}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 15:31:07 executing program 1: r0 = socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4c, 0x4) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000013c0)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x104, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0x9, 0x40, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) 15:31:07 executing program 0: socketpair(0x0, 0x0, 0xfe3, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x4, 0x6]}, &(0x7f0000000080)=0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x5, @local, 0x4}, 0x1c) close(r0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:07 executing program 2: r0 = inotify_init() getcwd(&(0x7f0000000180)=""/220, 0xdc) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x20040) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x1, 0x19, 0x0, 0x4, "a664cde55ecf4202b773e49889837c98aa50af2082e4d32a2211e3baf31bed13"}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000008) r3 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000380)={0x1, r3}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000003c0)={0x5c5c74d9, 0x35315258, 0xffffffffffff3e40, 0x0, 0x0, @stepwise={{0x1, 0x3f}, {0x100, 0xffffffff}, {0x80000001, 0x1ff}}}) write$P9_RREADDIR(r2, &(0x7f0000000280)={0xe9, 0x29, 0x2, {0x2, [{{0x6, 0x1, 0x4}, 0x633bf0ae, 0x2, 0x7, './file0'}, {{0x80, 0x2, 0x7}, 0x3, 0x75b, 0x10, './file0/../file0'}, {{0x4, 0x3, 0x7}, 0xe4, 0x3, 0x10, './file0/../file0'}, {{0x4, 0x2, 0x4}, 0xff, 0x0, 0x7, './file0'}, {{0x41, 0x3, 0x5}, 0x6, 0x3ff, 0x10, './file0/../file0'}, {{0x10, 0x4, 0x3}, 0xfc, 0x905da00, 0x10, './file0/../file0'}]}}, 0xe9) inotify_add_watch(r0, &(0x7f00000000c0)='./file0/../file0\x00', 0x28200) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) [ 254.458905] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 15:31:07 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) fcntl$setsig(r0, 0xa, 0x29) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) futimesat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}) r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$binfmt_misc(r2, &(0x7f0000000000)={'syz0', "d861e1de0f"}, 0x9) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000001a40)=""/225, &(0x7f0000001b40)=0xe1) 15:31:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'team0\x00\x10\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x4c50, 0x4) sendto$inet6(r0, &(0x7f0000000080)="020400000300600000000000fff5", 0xe, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) 15:31:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5c, 0x28300) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80009}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40801) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000001c0)={0x2, "d02c"}, 0x3) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4624, @local}}) 15:31:08 executing program 1: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x7, 0x1, 0x2, 0x2, 0x1, 0x100000001}, 0x2c) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ftruncate(r3, 0x280081) 15:31:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x5, 0x40000) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:08 executing program 2: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x4, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x9) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x0, 0x0, {0x9, @sliced}}) 15:31:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6f16bb7a, 0x200000) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000040)) ioctl$PPPIOCGL2TPSTATS(r3, 0x80047437, &(0x7f0000000180)) 15:31:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000701000080ae662269e5ae78102532"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0xc0010141]}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x9}}, 0x18) 15:31:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)=0x0) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r4 = getegid() r5 = getegid() r6 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x100000001, 0x234580) getsockname$netlink(r6, &(0x7f00000002c0), &(0x7f0000000300)=0xc) getgroups(0x5, &(0x7f0000000240)=[r1, r2, r3, r4, r5]) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x2}, 0x14) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x9) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', r2}) r3 = gettid() write$P9_RGETLOCK(r1, &(0x7f0000000280)={0x24, 0x37, 0x1, {0x0, 0x8, 0xf4, r3, 0x6, 'tunl0\x00'}}, 0x24) set_thread_area(&(0x7f0000000080)={0x80, 0x20001000, 0x1000, 0xfcfb, 0x0, 0x6, 0xe045, 0x10001, 0x2, 0x1}) 15:31:08 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0xfffffffffffffffb}, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) gettid() ioctl$KVM_RUN(r0, 0xae80, 0x0) 15:31:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x1000) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) 15:31:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x200000000000077, 0x0, [0x12]}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:08 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fe0000000000, 0x50000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r2, 0x1, 0xb6, &(0x7f00000000c0)="3aebe00a9a2fb5fc86be8c548c2df4545a5cba38a573c4e169cbcc5c74555bb669cb0cb2fedb6a93e13b1299e3911751fd456e74d33c39c4b41ec2af1504e92940be5fb1d5caae3dd91a3cf592c6b3fdbb9a5ee00c3906dec77e8b23225b7950d46d7f8a454a95301fdc6f159efab8cc8b2ba28323c0daf4406b0ee1bbf51360d095d4ad5554aaf95ab1b10534d8733bd73ed78d5e9cda64a2abb8f1bef5a89ef69d573a8646f5c0a6b352521ec55791b03a3f7cade7", 0x4, 0x9, 0x51db, 0x80000000, 0x5, 0x3, 0x9, 'syz0\x00'}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f00000001c0)=0x157) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) close(0xffffffffffffffff) 15:31:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x420040) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc74}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r2) close(r1) 15:31:09 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ers\xe9\x98\x96d\x90\x1c\x0e\x04\x00\x00+\x00', {0x2, 0x4e22, @local}}) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x101) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x0, 0x0, {0xffff, 0x800, 0x301f, 0x6, 0x5, 0x0, 0x0, 0x7}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'hwsim0\x00', 0x3000}) 15:31:09 executing program 1: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x2}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000500)=""/237, 0xed, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x40, 0x4) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/225}], 0x101) 15:31:09 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x801, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xeb, @local, 0x10000}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0xd}}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffffffff7fff}, 0x8) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) accept(r1, 0x0, &(0x7f0000000080)) close(r1) close(r2) 15:31:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x32314247}}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x8, 0xfffffffffffffff9}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={r3, 0x9, 0x4, 0x4}, &(0x7f0000000280)=0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15:31:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0xfff, 0x7, 0x1000, 0x2, 0x8, 0x3, 0x0, 0x8000000000000, 0x25f, 0x40, 0x357, 0x10, 0x1, 0x38, 0x9, 0x3, 0x487}, [{0x3, 0xfff, 0x4, 0x7, 0x3, 0x5ed, 0x7, 0x2}, {0x7474e557, 0x100, 0x10000, 0x200, 0xfffffffffffffffc, 0xf75, 0x4, 0x1}], "faf714ae5bbcee47688f228f26f45e1f1ef85b0c8397", [[], [], [], [], [], [], [], [], [], []]}, 0xac6) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100)) 15:31:09 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x1) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) recvfrom$rxrpc(r0, &(0x7f0000000080)=""/202, 0xca, 0x20, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xffffffffa86ac8d9, @local, 0xfffffffffffffff8}}, 0x24) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x6, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1, 0x8, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e23, @rand_addr=0x3}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x490) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000680)=0x100, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000006c0)=0x1, 0x4) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) geteuid() ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000700)=0x6) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000740)=0x1, 0x4) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000780)) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000007c0)={{0x80000001, 0x10000, 0x1, 0x800, 0x7fff, 0x9c80000000}}) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x80) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000840)='memory.max\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000ac0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000b40)={0x5, 0x10, 0xfa00, {&(0x7f00000008c0), r5, 0x2}}, 0x18) open_by_handle_at(r3, &(0x7f0000000b80)={0x1e, 0x10001, "720bb7be824c6791063e44c68ff9327fcad8ad9b5d0f"}, 0x800) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000bc0)=0x8, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000c00)={0x11f0, 0xfea, 0x2, 0x101, 0x100000}, 0x14) clock_gettime(0x0, &(0x7f0000000c80)={0x0, 0x0}) futex(&(0x7f0000000c40)=0x1, 0x8b, 0x0, &(0x7f0000000cc0)={r6, r7+10000000}, &(0x7f0000000d00)=0x1, 0x0) accept$inet(r4, &(0x7f0000000d40)={0x2, 0x0, @initdev}, &(0x7f0000000d80)=0x10) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000dc0)={0x0, 0x1, {0xb, 0xe, 0x14, 0x1, 0x1, 0x2, 0x2, 0xd0, 0xffffffffffffffff}}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000e00)={0x0, @reserved}) syz_emit_ethernet(0x58, &(0x7f0000000ec0)={@empty, @remote, [{[{0x9100, 0x9, 0x8, 0x1}], {0x8100, 0x7ff, 0x3, 0x2}}], {@generic={0xaaef, "d0b41b6f8e7523478ada4c48aa861f460ca9a4e5b5cdb53f1b6b009aa7c825943df1d076397fe0a80187627b790cc54c38f9c18b6dd4ffe166cb6cb6c4c0a61d45ba"}}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000f40)={'filter\x00', 0x69, "216d1cf0189bd13affc465866a23da52df561b77ebe1d9ba63b23a43fc6ad8334d222657b4ac17519172160d3da487c1133f838ff4564c1b46e09f856b2a9e888f0e74eb253291b5e1071dec7dc191c82e4fe3c80947e15715ff26589c11f197e5c690f9a6d72cfb11"}, &(0x7f0000001000)=0x8d) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x8010, r0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000001040)={0x7, 0x8, 0xfa00, {r5, 0xffff}}, 0x10) 15:31:09 executing program 0: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x8002, 0xffffffffffff8fe7, 0x100000000000008, 0x80}) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x5, 0x9, 0x8, 0x8, 0x6}) socket$l2tp(0x18, 0x1, 0x1) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x1, r1, 0x2b, r0}, 0xa) 15:31:09 executing program 1: r0 = socket$inet(0x10, 0x4, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x15a, &(0x7f0000024000), 0x1, 0x0, 0xffffffca}, 0x0) 15:31:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x80000) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000240), &(0x7f00000002c0)=0x5a) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\x00\x00\x00\x00\xadU3\x94D\x17\xf9\x13\xf0\xfd\n\x8d\x9f\x96\xf3H\xfe\xefi\xfb\x12W\xbd\xb2\x91[\xb3\xb5-H\x01\x18\xf2x\xc9QM\x9b;w\x00\xf6\xd7\x190\x000xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x7, 0x7f7c, 0x3, 0x6, 0x7ff, 0x400}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$isdn(0x22, 0x3, 0x37) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e0000001b56500fba3a23cdc20efb600000000000000000a00000000320306e266ea812bba5da0d5b1b25a55307ad39b1b9345b7b6df9f2fe366d111a9aa9578e88b125778b1d963cc6c9667249466ecd7585356ad018cb6f51244e573db366c7070796fa72f790584253c32555a9f70e6df6918d2ae24000000001a8c84656ea2acd3ae4cd17f2e2dfc428a6a3146945b479b0800000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400), 0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200002, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000280)=0x10) [ 257.077968] IPVS: ftp: loaded support on port[0] = 21 15:31:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:10 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x0, 0x0) bind(r0, &(0x7f0000000280)=@l2={0x1f, 0x2a, {0xfd0e, 0x190000, 0x6, 0x9, 0x7ff, 0x6}, 0x2, 0x6}, 0x80) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000240)=0x1, 0x276) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7fffffff) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x20) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4000, 0x0) bind(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x4, 0x1}}, 0xfffffffffffffc6a) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r1, &(0x7f0000000180), 0x400000000000370, 0x0, &(0x7f0000000100)={0x77359400}) 15:31:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa49d, 0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x3ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={r2, 0x1, 0x9, 0x2, 0xaf, 0x5, 0xffff, 0x8, {r3, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x80, 0x5, 0x6, 0x0, 0x5}}, &(0x7f0000000180)=0xb0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r4, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "e8128318f13ad16a"}) mremap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 15:31:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xce, @mcast1, 0x9}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100)=0x8, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x4}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) [ 257.322960] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 257.455308] chnl_net:caif_netlink_parms(): no params data found 15:31:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) socket$inet6_udplite(0xa, 0x2, 0x88) [ 257.521128] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.527828] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.535891] device bridge_slave_0 entered promiscuous mode [ 257.548454] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.555174] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.563485] device bridge_slave_1 entered promiscuous mode [ 257.613473] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.627930] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 257.681792] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.690127] team0: Port device team_slave_0 added [ 257.719015] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.727441] team0: Port device team_slave_1 added [ 257.754295] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 257.777690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 257.956142] device hsr_slave_0 entered promiscuous mode [ 257.992660] device hsr_slave_1 entered promiscuous mode [ 258.112968] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 258.120771] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 258.170209] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.176768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.183895] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.190372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.333470] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 258.339611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.354400] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 258.367278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.377999] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.386915] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.399238] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 258.420026] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 258.426217] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.443189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 258.450485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.459156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.468262] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.474771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.497662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 258.506568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.516243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.524467] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.530917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.546871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 258.562201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 258.574501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 258.585304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.594483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.603709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.612516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.624635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.636441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 258.643525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.652482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.668753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 258.675713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.684117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.699128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 258.706374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.714548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.727437] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 258.734087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.758319] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 258.776547] 8021q: adding VLAN 0 to HW filter on device batadv0 15:31:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x2c, 0x43, 0x2, 0x70bd2c, 0x25dfdbff, {0x2}, [@NDTA_NAME={0x8, 0x1, '\x00'}, @NDTA_THRESH2={0x8, 0x3, 0xa61a}, @NDTA_THRESH1={0x8, 0x2, 0x9}]}, 0x2c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8, 0x22}]}}}]}, 0x44}}, 0x0) prctl$PR_GET_FP_MODE(0x2e) 15:31:11 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa49d, 0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x3ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={r2, 0x1, 0x9, 0x2, 0xaf, 0x5, 0xffff, 0x8, {r3, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x80, 0x5, 0x6, 0x0, 0x5}}, &(0x7f0000000180)=0xb0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r4, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)={0x0, @speck128, 0x0, "e8128318f13ad16a"}) mremap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 15:31:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x8000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x121700000000000, 0x6, 0x4, 0x1, 0x10001, 0x80, 0x800, 0x400, 0x2, 0x9, 0x9, 0x5, 0x80000001, 0x0, 0x4]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r2, 0xffffffff, 0x30, 0x4}, &(0x7f0000000200)=0x18) r3 = msgget$private(0x0, 0x40) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000240)=""/60) 15:31:11 executing program 2: setitimer(0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x20040) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) [ 258.956162] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 15:31:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$pptp(0x18, 0x1, 0x2) kcmp(r0, r1, 0x0, r2, r3) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="f979185faafa164ed3418b37f91c2b00c20be085a0a3d7f6c61fba8c76"], 0x0, 0x0, 0x5010, 0x0) mount$fuseblk(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 15:31:12 executing program 2: r0 = eventfd2(0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4800, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000040)={0x1, 0x0, [{}]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10404000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r2, 0x104, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfa}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x7c}}, 0x4) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141046, 0x0) ftruncate(r3, 0x280080) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd000200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) sendfile(r0, r3, 0x0, 0x10001) 15:31:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a001005fdc37a5ce9349c2675a9a00b09b786f4b717665734627717fca339b28c33ba6124a437dab02bfb6d862683e3a33f963c229fe8a0c99ef4274351594640b4d76e6c6ff1497c9e99b97ac17da554bd9b636ad26bc6e9e71a8cc05c6a98b67aecadcf05e9269b25b9139e99ad4d1634b77fb93e97b5ed0f9b959d7518ac9273cfac2651b1ae129b5080aab7a86399768be21cd1b6e1a916a15b64750f00600000000000000ffef000000000000000000000000", @ANYRES16=r2, @ANYBLOB="24022cbd7000fbdbdf2506000000100007000c0004000100008000000000040101003400020008000300080000000800040004000000080004000080000008000400ff030000080001001f000000080001000000000038000400200001000a004e2300000002000000000000000000000000000000007f0000001400020002004e20e0000002000000000000000054000200080001000e000000080001001600000008000300ffff00000800030004000000080004000200000008000100160000000800020000000000080001000300000008000200ffff0000080002000100000038000400200001000a004e220000ec95fe80000000000000000000000000000c010000001400020002004e2000000004000000000000000008000300ac0100002c00050008000100657468000c00020008000100120000000c000200080002007ce562590800010069620000340002000400040008000100ffff0000080002000100000008000200000000000400040008000100050000000800010004000000180004001400070008000300060000000800030000000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 15:31:12 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000280)={0x0, 0x7fff}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x141000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x3, 0x1, &(0x7f00000000c0)=""/41, &(0x7f0000000100)=""/11, &(0x7f0000000140)=""/139, 0x10001}) [ 259.328581] QAT: Invalid ioctl 15:31:12 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x40000, 0x0) fsync(r0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000180)={0x9, 0x101}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f00000003c0), 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x9) getsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 15:31:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x2) 15:31:12 executing program 1: socketpair$unix(0x1, 0x100000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfff) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x14, &(0x7f0000caaffb), &(0x7f0000000440)=0xfe4a) 15:31:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000981ff8)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) r2 = epoll_create(0x948) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000984ff4)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)) 15:31:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000000)=@hopopts={0x8f, 0x3, [], [@jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x10, {0x1, 0x2, 0x3ff, 0x3, [0x4]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x28) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x8}}, 0x18) 15:31:12 executing program 3: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000001240)="47d4bf0c0bce0a116fbdb0a36061ea2663d7bbd35345ccfa80b4a2906fdae0cbec05e58fa8fa048bd21f9b8f13136e2952ffa66f2573c574abc6e6022766ff27739ea4c470e39a4d344408a394a78b7dcc6811ec3fe94f68c0ee0f7fe99b8f7bbbf7237505f962ebc2795be6284c6bfcf7e38cd0a6879bc32aac8c0faa2234e0ea336fa1a6d182c2dfb4267d5bda8a2a1380c56580a7e40274092f54088cc5895b71cb8d4cab74d2c479a84e05c706a2b0d897c6fb57c5ab41aa0d8362f4d82bb6df3e468d80d1a34ed30a449ed42d4c1ae2b2788d85e15f696d5b70f1e231b836aa7a8e5edecdeed28d4f539a73aca68d97c84783c42355394ac00b8dc309cc0e64ca75509b12ebe2ae3a5e080fa894786682f022a753d6b19159f7b4733bae9e13d399390d9370efa24edd3f551cc16b311290ed7bcb5446d7b3a4cde49ef0a28fe219c3355e28788b3ffc8e4f795a4fa2af656b4c50f294bd0fb07d8539474f129457a7d2e471aa9a7da7478233884408cd8be721fdb03e91ad6366ec538abe95c08359bb2b07fde18cab036e9d919bb54d56430874266c2c6a6623ef109e098f8c44375c982d70507c6a81423010526ff223f0207d6d264a3719c26be18693161fe5a36b182155f62a66d004abbb5b3509bb221c8e5cc12d327a74981b2234b42a9d384c4de9096b5563b47c4787bad54d13d3b86f75e59f4ecadcb775748472ac909e5408fb1469d69b08fa44b183efaf9a1ca92037ab9b7ee776aa40185a21cbc4f20862debbfa9138f9501d7d46211ccdaed2d71cdb17928b7b9b99f88b71de1e8ca32a6fa41e19f995873aee660a9c194a3f723ea9f8bed660e3b2c12f0eafbb34765dbfaf45606f1168ab9d1f0ae5e79d73cd65254c2aed82284e208d29987585ebadcfcfd921c076d515a58a6504e5f61e30d6cee4e3b4120395112f3f7abe39dd55a86a75d0fe0dae6ddc071b7ccb2e86c4591c7fcf650510beec0775e5f71d520c40e781315f662d68d86a20e7c56d3f2e42cee205d58804e596eecbd7b08ca5df6e11e7ab8e55fec32ea2f919aa441d4ec2f338bf5ef07a06a2f986639abe478a33ef8eed5392e35a254c1c38a7e863ff49a521ed398fe126fa91c1363d1bed4c6e0bb6e01cbba4f75afa0d99584ad368cc4b176a831a2a085328c0af7aab7bc1a9a92a6a2cff2741279054b962e2b0f963ba642aa7bc9f5449523080ecb55c2a55ede356c7e608772a28b1ffd162874d0f51093c15e24c164ab0f2a41ef430e4bc0773296a429feaba52a0ba85f05140f3a7837eeea515c6b8356d7fc81a5546a9610de172048b5ee5b3dfa5e50a89cfea667a254d8346f6bcee9b73239e12f76ff3992717e8399802f4d400cc191a024ad194e5974cb9b8276d2aa3408198462c235b8d08442596804c3c211bb801cb4c9a7c4dce7d669dccbd2e3d5007dd4bbf1270a241a0218a5812ebaa53ba3cb5b17e26a7b0bf7369ed3c6b02dc130085553fd087bd3e3a9c82309a7d595aaa4a0e9c3d3055b4d6c62b0e25aad2a597bd7237a17a1fff62b1c32975d483321af1a749f7f447e4749cc6993ce457b7eaab0dcd91ff33a10150d73902cb9c96d693d6f16bcacd712621d24bf376f1dac566080ae241356500ca5d6cccc052f1cb4dbfd499ffa406dc98762b30be46291bc1e412c07c1375e0032cc3d187c9088d94f0a120e44155b64d8df3629ad95b68497f30c6e937b52fe315c6d48310976b771cbb1e86aa3f3659262c8c4986b8c6ead224f2555c6d625f438c72109a5fb16f1510070f9f0cd936c6c0c6fa5af80eaa36c16a7a5b7dea42a5e839fa6bd6cc36673fe1d5a8525f0d92cef7e3c7a6c67d9c33af860ddd274cd30d23316f1b4242543845a50fc223d18b4d084b09fe39185bf548cb86537704692428d0eef0f35ab1aaf7ff6b990605ab4a8c0f92cbbd4ee035364b862a3e9ae8e3d2e4ccbbb734512ebbca8f14c7fce199703fe789e3449f8dd287857168811cdfe54cc0c54391b11f75655c5f6e54f21e1b476bcdb375f7e93ec6fecc470328cae493a1f6227f7b483c6739b2c92a565d43bd3c2633e381d3f7e7ca49cde0753ff334fc61a8789a886cdccc84cc7a94086af377417b287e90e588c9492af0abc7e6123ad7f8b99156a2e1fa71331a94b10b3b2af0a65ad122f17a132b6bbfeaa565ab05e4c8f910b0e7b8fea173a731415c5d987ece3b2a0166f8bee2ea620266cfc3fce2a9114f311847d3c7964eb9feb164b208626e65afc64de93558a41dc76e23030bc986b2d7431749ecf144c2986278d7cb3bb36c214d38a08c245e1797f4e0cacf806ecc07dde60bfa942bd754e5aef8cc410c7421b67809cab1492c7c16c99a92d3f1e1dcbd273c5c3794904189b7f15883b5c9529a9465bf11327d68f29f7986be5abeeede86aa73680e9d65ae3c4a8ca2304d0d4870083a03a1635929df5412ba0ad4ec9dc459f16b9f2c69b5e50fc1c8b1827dcaa242cd4e2ae661c8bde5438f3afc188f8a8ea5e1a01cdc862d3b5599ddcb51d2b656da7460dd6638d543b88496fbf10733cfca79f8b24d403f076e2e4829d79a1f6d2e85886d06c46df504f5eaf748871038f43b118e8eb0557cc3cc7b36428674b53526dadb2c0e4cc36477777f6dbf655ac36c1e65e3c2c91c12b5ff481c529e94332f962cfc92ce4fa302a2f24ef7f68aff9ab62d0e7bbc86914c1da27c8eeac432466739fa8655ca3a0e9544b9c7c63a2c9b3d9735c71fc7d3aa2fe72aa8447ab361a1b8b81278a7e4b23460c152062e6cc4bd7c0a78856a37d49f90f53a65b1e80d51f26f4a7bf701c0f35f08d7d884d036e43ad399116937575997a6742335c273877f11b575aa52537ad1f8e32702b121414802a8338b99b986243bdf8d56d6a90a6a017027245ed5142608b80c682004cabe212375fb769b0569f3d9d17d9daaef37a5813ca1b0e6c9d095b467a33aa81990d8fa3cae702c747bdcd1505a62e5e7d975a0eb2d747d5dd2d82380e5e94fbb8be767393d69bf489a70e7d391c58257c4cb8fc7aee50bc6b030d5514007da61d789592b4c1ddf2ca35947b5d875629c1cfcd2779e2fa29b4ebac361b25b810065eb5f385d2ca874440b07b0fb92d1b8050658cb2b91595d072a41f1306cf824391b31e944e2981f56aef9f29352cbdb5471ea4254eba5a1a66ddc45604514e4a5d71e4247380e35141580e0a2361a6361509d33a33d29393555cdb0806d5604c909c8a6ce2e081dcc6c8c49e613e39ea93ba122b94af4787503c18901bfe5466f193dbab4c78e22216f79c1476bc16823e8007888b58070f207b732c3e83dd758ec8b90fe6a6269479b37f634f2658e7b5896df803eab298d0a6660f63c0202c35fa3dc40c65249afa48f795b5a492d21c4bcabf2c100ba3aa1a4b79d0abe35a4040b9635dc2d349d4a4f4280c69048679cf64e2f4208d6752b6a80a91387f12bcd514f3b6babd8ddd52f7896d8355c2d7438229dd5a427e10470627468b1379bc7cf74dee091a27a59c9d6245f032520cbe9808d46858a6d4da484f22d09f8eacf2d71d4a009481d3458a178a7ac4edf2b2de87c56cd53eedbdbba0d3d73b198297065064e6c1063dd994864e20e0fbddb81708b816269de1f72bbb5aad15fa922c00c598de9846eaf6972720e10d7b5b99435bc74baed2af947fe927e50fb3cbcf969afe00e1716672bedf5366fbce80d6235e352e433612bc339a75533ae90238c217939c4d0646c98bd379f466d033387c83a15db785168b1f89a6025084e453ab8218dc76aae1373215448f9f5db2641ad471ca6fec951b1f27d28e0212162d8a5bf5cb783b2467cc4e28ffa6066ccb87fc4b8c97db100551562e694c14494ad768c5c1e3f98c8d70227f7bf76022b8f7e5ae9a741d24fab0addffc1daae7af7369e6c7229e3b5027cfa54ca26f4bd47cca1763c5802e1960afcf9a7123a3e648b1525cb125ef68cd74ddff678b7f1f49bf760ab743ba5cecab55c06482aeec4c65323a0b817d811050d808625d1946415f8ff2e8ff24af5c9b787f3b6afd4fcdc6dcaaacf03aadae934ade1b14bd9ef9da7d91a446ce417ab5b4b3a39c6b1b43163ec6fb19fee74aa4d8bf4ddea3245456b6db139d326f6997c1ce5b68741ee3b8fc838fde7cb2af8645bc848f14fbec36da2feba7165463609911f52e266b74017a985ed990147e5e5e3b75b79b74158e36a85458d19a77301e592bec00aa8f94616017822407ab170ab14b686003f9f388c1758e13c80740de52c647b0dc2c55a871d448c21922bd06e482876a4c92678a642e8554d35ac908145f5f3460c82374d4f192d325a2de33256d58772610160ba4cad17cf580140ff16923f8766d37c880226ce047bf32ab8812614136f520cd9ad0e05bc5c0333167870f5fe0539b501474cc44beb6d7064d5d3e2ddbd78333b1e99abde65e827a75e7adbbc3ff6eb14e97e22062d7c8d6a5af71448223fb2c6564ed012a92a541eeb9dffaa3f9fd354f220e93d9969a88df49b701c76aab04ab562f62ec9bc76b4570405eab96ea47cba15219d533b6d794e0860459c9a92fbdce7185d3bef3b1891487f05d9bb91a73beab226d7de12475395f247d3e20f218e53e1d438141195b462fcc0b8612dfff7c56c545dd4bd07db078abcba09e10185e7953d141054b18f698a4e4988833029f52fd112183b8be2acc1abc5d03b00cb001a8348bc1378f39a6a34e8ee5e7ff9e576eed180f8007518bdcf05c0bc23cad575790f59f3eb9230a10b490dbf7f0291c308395658fd3c6d2e3ccaa7aff15a4a2d5a55e86718770f114768d29efe4e7c8f37b6b3c71e20166bd057365797882523f1d0e2d994b285e6d90e7563527f6d26e117b7abdb44bc3164bf379e02e4e46ade0651f09c43a46f6cf9e4755a19b90cd118fd695866a2def5886047bec126f93948ae87a8b214b91476008702ac7cd58d07887b2ff67b7ac54b442843e00e10a9c054fbf8fedad7e08363ab471f761e0bcc9c70d9dea5b1ba8426032bba682bb38b6766dc59be6e41fdd1b267ef1fe8dd23f9f30b0c0921cca72cf30876b70fd64413fdce4aa2b76aa40ce63c79ee419434b868272e799baad4217b75d8db21f663df662464f1267f946047d96756f608a4e0c73c1409d46a32c2b3016757def8b4c9d89df330b33abf02f5ff0b887c8787391abeedfe827349c98debac654ce839f7b2ddb05f9ed1a3d4be5abd56299ee4fa9a5bbac698562b1a4e1160852a83e54bce244c39bb379d7539e54ea92f564c77b6c56f26812ce52c1f94f3c49772b940a5c8d2415f1dec7374313ce32d26b5d618e2a0c75cdc5429c6dd517c8e7eb85ca766cdf526ba641e991a63c94ca91269e1ef936ef64d8b34ad61a916a5e7c84351c7dee3906a2828a2be40db067eeff9e1b5e4b9030adc90cc8f4e087d23cd5e1285538b0ffa8738d32ef228dee6b5575b51633cea8a4cb32d75905ac27aa8454d1c8a2b3a540b0120723a442f7fca21e6412cefade0897661cdc1fd940b19f89157a59e581ef2b5f3ddf79729f110f055ba49b5db790bfb02c000250bc4439bb20d5957336b61a74887d022541e6831f728f66e2fa4915ff7892f33cf39f7d8e52d8b5bd2e263ea9a51a2248d63d93d490b917a7686df4d6793307c04853eb48f2dd5816de9ff842b6e1183fc4e25805ec5df3e11b6", 0xfd1, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/184, 0xfffffd12, 0x0, &(0x7f0000000200)) 15:31:12 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x400000, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xc, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "817ea432"}, 0x0, 0x0, @planes=0x0, 0x4}) 15:31:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) 15:31:12 executing program 0: setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0x8}, 0x28, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc4f, 0x40000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000240)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000200)={r2, 0x3}) 15:31:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x200000000) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xfffffffffbfffa14, 0x3a8) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) getegid() getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @loopback, 0x0}, &(0x7f0000000180)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@remote, @in=@empty, 0x4e20, 0x9, 0x4e22, 0x2, 0xa, 0x80, 0x20, 0x33, r1, r2}, {0x8, 0xfffffffffffffff9, 0x10001, 0x9, 0x2, 0x0, 0x6, 0x1}, {0x200, 0x640, 0x0, 0x400}, 0x1, 0x6e6bb9, 0x0, 0x1, 0x3, 0x3}, {{@in=@local, 0x4d2, 0x3b}, 0x2, @in=@remote, 0x0, 0x1, 0x1, 0xb5c9, 0x40, 0x0, 0x7}}, 0xe8) 15:31:13 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x40040) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x44030, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f00000000c0)={0x3, 0x6}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) r4 = getpgrp(r3) rt_tgsigqueueinfo(r3, r4, 0x40, &(0x7f0000000140)={0x31, 0x400, 0x80}) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x7, 0x0, 0x0) 15:31:13 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000380)='/dev/capi20\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4bcd, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x200, 0x39be, 0x5, 0x8ca0, 0xffff, 0x3932}) r2 = dup2(r0, r0) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f0000000000)) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x6, r1, 0x1}) 15:31:13 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386105, &(0x7f0000000300)) 15:31:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'tunl0\x00', {0x2, 0x4e21, @rand_addr=0x8}}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, [0x7, 0x9, 0x7, 0x7fff]}) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0xffffffff, 0x200040) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000280)={0xa, 0x4, [{0x1, 0x0, 0xfffffffffffffff8}, {0x1, 0x0, 0x14f3}, {0x0, 0x0, 0x100000000}, {0x41, 0x0, 0x4}, {0x3d59, 0x0, 0xff}, {0x9, 0x0, 0x7}, {0x7fffffff, 0x0, 0x7f}, {0x2, 0x0, 0xe355}, {0xc59}, {0x78b, 0x0, 0x9}]}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="200125bd7000fbdbdf251000000014000100100001007564703a73797a3200000000b000050008000100696200002c00020008000100000000000800030080000000080003000100000008000300030000000800040001010000080001007564700008000100756470003c0002000800030005000000080002000800000008000100050000000800040003000000080001001200000008000200ff0300000800020002000000240002000800020008000000080004000002000008000400010000000800040000010000696200009e231bf4b302a649be03109c6e38ac978cead9fd873deff95758fa5549276fe4c7ba2ce73a8c59b2b2fb8e009c97589694a777d7f67550280aba1c87de6c9c654232a8ee235434c1b4ebe64bccb05ce564a2c4eb4883a809db0a29a01a0a43c0528558d9cda11b8d653b6a4d7f6361e6e01654f76461b767c07073cf298a5375e41f9bc6e26f91956dbb7b039c2261be9e2041f135133b4cff69ef79d47b1f6681372604"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 15:31:13 executing program 2: getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000080)=0xaf5a) 15:31:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x400200) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200500, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x500000000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x9, @pid}]}, 0x1c}}, 0x0) 15:31:13 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="240000002400075e010000006fa2830020200a0009000000000001a0ff7f255dc111dd7e", 0x24}], 0x3d1, 0x0, 0x231}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000001880)='eth1\x00', 0xffffffffffffffff}, 0x30) r3 = getuid() r4 = getegid() fcntl$getownex(r0, 0x10, &(0x7f0000001900)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001940)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000001a40)=0xe8) lstat(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r8, &(0x7f0000000140)=""/224, 0xe0) sendmsg$unix(r1, &(0x7f0000001b80)={&(0x7f0000001680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001700)="90c891119fc143e9e55dd7a6bd6f1f1c48eee31d1bd95f97ab095e7ceccc6fcc9d229c29a2cb93b990bd5b6fb294c4c1556991a634b79addb8b6025528a8f89360f8a58e438eff86a89fd37dd1c3d665d2388725bbd5e97995e52dacb5324355adb06fe6f5b1a0f37b373ef050b1b124c23f92bd47835656040d52de430d9b6a239f98f84405fe63d296c63a296e7ae73b38e98d85d78327dec66b559416478702402013a779c34adf7c991ba79e9f13a9d8365c3f19b98847bc524b428e8b456de848e52b16db69326628a2f7bcadd0e1a085cccda10ba9df7bce37c9710635a735737870df49692dfb1dff4340414d1c630165dea2", 0xf6}, {&(0x7f0000001800)="dd4a1aa2abcf2d266b5eb5f59505fd2660e62a85ac8c24f7405a8c6c4008ebaa7df571233848116fb4c7230bdbb6fa5fe39e36009c4c23967c69884bd8", 0x3d}], 0x2, &(0x7f0000001b40)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x40, 0x4}, 0x4000001) 15:31:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x13) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x80) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000180)=0x3fc) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:13 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x7fff, 0x327) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@remote, @dev={0xfe, 0x80, [], 0x2a}, @remote, 0x1f, 0x9, 0x3, 0x100, 0x100000001, 0x400000, r1}) r2 = accept4(r0, 0x0, &(0x7f0000000240), 0x80000) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000280)="12024b01a24b3ca6dae59ae7c712f3cd0c85", 0x12) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f00000069c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:31:13 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x105000, 0x1) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000680)=""/4096) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000240)='\xa9\xb2%`\vXE)\xb5\xed\x12\x9d\xd9\x95\xe6\xcc\x99\xbe\xb3t[\xd8\xc7\xec\xd2\x97b\xf3\xee/\x92h\xadL\xe6\x12y\xea\xabf\x05\x97T\xe1\x00\x15\xb8\xf2\xcb\xe4\xb2\xcc\xdd\xab\xe5\xcf~\vC\x13\xb9\xfc\x93\x13\xde\xd0\xe0\xdf\b\x81-2\xed\xbc(5\xdc\xb2\xc6`?\x9c]~\xeb\x90`\xf3\xf78\xb0\xa5\xf8_\x8b.\x89Wbx\x80C\xd1\xd2\xeb\x85') preadv(r2, &(0x7f0000000000), 0x10000000000002bc, 0x0) 15:31:13 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000004, 0x40) unshare(0x2000400) preadv(r0, &(0x7f0000001480), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x9) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 15:31:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x1) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000aa000000000000000000000000007d004000000000000000000000000000000000000000000000000000e8ff012f000000000000000000000000000000000000e3ffffff19000000000000000000000000000000000000000000000000000000005fc54b65000040df1de64c2a14fb9622dfa7e33734f55a7ccb6d5d0f7153bcd7746abe66ba6863dd543a9ec4a5dee3228f6000a7a61d463d6033527ed3aa93cebae918b66abcf4b9b448a052e22f23a34d922a5d9ee86a"], 0x78) ioctl$int_in(r0, 0x800020c0045002, &(0x7f0000000080)=0x10001) ioctl$int_in(r0, 0x800040c0045006, &(0x7f0000000040)=0x70) 15:31:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'tunl0\x00\x00\x00\x00\x00\x02\x00', {0x2, 0x4e21, @multicast2}}) 15:31:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="b0d96c", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getegid() getgroups(0x1, &(0x7f0000000040)=[0x0]) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() r5 = getegid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0xd67, 0x40000) ioctl$KDGETMODE(r7, 0x4b3b, &(0x7f0000000400)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xffffffffffffffff]) setgroups(0x9, &(0x7f0000000380)=[r1, r2, r3, r4, r5, r6, r8, r9, r10]) 15:31:14 executing program 3: unshare(0x400) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) signalfd(r0, &(0x7f0000000080)={0x3ff}, 0x8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ftruncate(r0, 0x0) 15:31:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000100)=""/229) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x10000, 0x2000) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000300)={0xf8, &(0x7f00000001c0)=""/248}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000140)={r4, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:31:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x1) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0xc0000100, 0x4000000000000000]}) 15:31:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @multicast1}], 0x40) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x1d) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'veth0_to_bond\x00', {0x2, 0x4e21, @multicast2}}) getpeername$inet6(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000000}) write$P9_RLERROR(r0, &(0x7f0000000080)={0x23, 0x7, 0x1, {0x1a, 'posix_acl_access*:keyring\\'}}, 0x23) 15:31:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="b0d96c", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getegid() getgroups(0x1, &(0x7f0000000040)=[0x0]) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() r5 = getegid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0xd67, 0x40000) ioctl$KDGETMODE(r7, 0x4b3b, &(0x7f0000000400)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() getgroups(0x2, &(0x7f0000000340)=[0xee00, 0xffffffffffffffff]) setgroups(0x9, &(0x7f0000000380)=[r1, r2, r3, r4, r5, r6, r8, r9, r10]) 15:31:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="06000000", @ANYRES16=r2, @ANYBLOB="00002bbd7000fcdbdf25060000000c00020008000100000000801c0002000800010001000000080001000100000008000200040000005400070008000100090000000c0003007f000000000000000c00030001000080000000000c00040007000000000000000c00030000000000000000000c000400e6010000000000000c0004000104000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'tunl0\x00', {0x2, 0x4e21, @empty}}) 15:31:14 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x2}, 0x80, &(0x7f0000000000), 0x159, &(0x7f00000002c0)}, 0x0) 15:31:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0xfffffffffffffffc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x501000) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8995, 0x800) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000080)={0xbb80000000000000, 0x7000, 0x6, 0x1, 0x6}) ioctl$TIOCEXCL(r2, 0x540c) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0x4) ioctl$sock_TIOCOUTQ(r1, 0x894b, &(0x7f0000000180)) 15:31:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) syz_genetlink_get_family_id$ipvs(0x0) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x2bb, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c00000000000090ffac141a00ac1414bb1200907800000000952974c58ceb4491e89a469ee573c6fedc70164cd859c34953a7d309fbdf23b77ddb132e537b6fec00e9cbf08ea239c76b891716687a7420a723cd26aa69297200c3ac81e9a5a2cfde35aeec9088f383fef753b80820bcedd1728dae90d17147912f0f4d40f17611f95ee15c83d49d01fb834a235175927b83f48e85f59245d3899a4d179cb8ba6a6030505f328ed0ca4e68e2132b89252de6183027e0"], 0x0) 15:31:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0x7, 0x0, [{0xbfe, 0x0, 0x2}, {0xfff}, {0x954, 0x0, 0x2}, {0x3f1, 0x0, 0x9}, {0xafe, 0x0, 0x100}, {0x880, 0x0, 0x6}, {0x0, 0x0, 0xfff}]}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) 15:31:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x200000000000000, @mcast2, 0x5}, 0x1c) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@local}]}, 0x38}}, 0x0) 15:31:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x802) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x8, 0x2, 0x3}, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x9d) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e21, @multicast2}}) [ 262.015144] ================================================================== [ 262.022633] BUG: KMSAN: uninit-value in gre_rcv+0x11a8/0x1920 [ 262.028667] CPU: 1 PID: 11174 Comm: syz-executor.2 Not tainted 5.0.0-rc1+ #9 [ 262.035856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.045214] Call Trace: [ 262.047807] [ 262.050025] dump_stack+0x173/0x1d0 [ 262.053683] kmsan_report+0x12e/0x2a0 [ 262.057501] __msan_warning+0x82/0xf0 [ 262.061319] gre_rcv+0x11a8/0x1920 [ 262.064867] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 262.070072] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 262.075468] ? erspan_xmit+0x3890/0x3890 [ 262.079536] gre_rcv+0x2dd/0x3c0 [ 262.082914] ? gre_parse_header+0x1370/0x1370 [ 262.087576] ip_protocol_deliver_rcu+0x584/0xba0 [ 262.092351] ip_local_deliver+0x624/0x7b0 [ 262.096523] ? ip_local_deliver+0x7b0/0x7b0 [ 262.100852] ? ip_protocol_deliver_rcu+0xba0/0xba0 [ 262.105787] ip_rcv+0x6b6/0x740 [ 262.109094] ? ip_rcv_core+0x11c0/0x11c0 [ 262.113211] process_backlog+0x756/0x10e0 [ 262.117418] ? pfifo_fast_enqueue+0x760/0x760 [ 262.122465] ? ip_local_deliver_finish+0x320/0x320 [ 262.127405] ? rps_trigger_softirq+0x2e0/0x2e0 [ 262.131989] net_rx_action+0x78b/0x1a60 [ 262.135994] ? net_tx_action+0xca0/0xca0 [ 262.140136] __do_softirq+0x53f/0x93a [ 262.143958] do_softirq_own_stack+0x49/0x80 [ 262.148276] [ 262.150518] __local_bh_enable_ip+0x16f/0x1a0 [ 262.155080] local_bh_enable+0x36/0x40 [ 262.158973] ip6_finish_output2+0x1d64/0x25f0 [ 262.163507] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 262.168709] ip6_finish_output+0xae4/0xbc0 [ 262.172973] ip6_output+0x5ca/0x710 [ 262.176617] ? ip6_output+0x710/0x710 [ 262.180425] ? ac6_seq_show+0x200/0x200 [ 262.184443] rawv6_sendmsg+0x5153/0x58a0 [ 262.188559] ? raw6_getfrag+0x590/0x590 [ 262.192552] ? compat_rawv6_ioctl+0x100/0x100 [ 262.197071] inet_sendmsg+0x54a/0x720 [ 262.200884] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 262.206134] ___sys_sendmsg+0xdb9/0x11b0 [ 262.210211] ? inet_getname+0x490/0x490 [ 262.214202] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 262.219398] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 262.224775] ? __fget_light+0x6e1/0x750 [ 262.228769] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 262.233974] __se_sys_sendmsg+0x305/0x460 [ 262.238149] __x64_sys_sendmsg+0x4a/0x70 [ 262.242213] do_syscall_64+0xbc/0xf0 [ 262.245944] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 262.251139] RIP: 0033:0x457e29 [ 262.254331] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.273237] RSP: 002b:00007f2fd5aecc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.280954] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 262.288222] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 262.295497] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 262.302784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2fd5aed6d4 [ 262.310051] R13: 00000000004c5403 R14: 00000000004d9220 R15: 00000000ffffffff [ 262.317333] [ 262.318955] Uninit was stored to memory at: [ 262.323293] kmsan_internal_chain_origin+0x134/0x230 [ 262.328401] kmsan_memcpy_memmove_metadata+0xcf2/0xf10 [ 262.333676] kmsan_memcpy_metadata+0xb/0x10 [ 262.337999] __msan_memcpy+0x58/0x70 [ 262.341712] pskb_expand_head+0x34c/0x18f0 [ 262.345962] ip_tunnel_xmit+0x32e4/0x3980 [ 262.350109] erspan_xmit+0x2798/0x3890 [ 262.354047] dev_hard_start_xmit+0x604/0xc40 [ 262.358458] sch_direct_xmit+0x58a/0x880 [ 262.362521] __qdisc_run+0x1cb7/0x34d0 [ 262.366412] __dev_queue_xmit+0x215c/0x3b80 [ 262.370746] dev_queue_xmit+0x4b/0x60 [ 262.374545] neigh_resolve_output+0xab7/0xb40 [ 262.379042] ip6_finish_output2+0x1d4e/0x25f0 [ 262.383537] ip6_finish_output+0xae4/0xbc0 [ 262.387780] ip6_output+0x5ca/0x710 [ 262.391405] rawv6_sendmsg+0x5153/0x58a0 [ 262.395467] inet_sendmsg+0x54a/0x720 [ 262.399269] ___sys_sendmsg+0xdb9/0x11b0 [ 262.403327] __se_sys_sendmsg+0x305/0x460 [ 262.407473] __x64_sys_sendmsg+0x4a/0x70 [ 262.411532] do_syscall_64+0xbc/0xf0 [ 262.415255] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 262.420432] [ 262.422054] Uninit was created at: [ 262.425595] kmsan_internal_poison_shadow+0x92/0x150 [ 262.430698] kmsan_kmalloc+0xa6/0x130 [ 262.434500] kmsan_slab_alloc+0xe/0x10 [ 262.438389] __kmalloc_node_track_caller+0xe9e/0xff0 [ 262.443496] __alloc_skb+0x309/0xa20 [ 262.447218] alloc_skb_with_frags+0x1c7/0xac0 [ 262.451721] sock_alloc_send_pskb+0xafd/0x10a0 [ 262.456308] sock_alloc_send_skb+0xca/0xe0 [ 262.460546] rawv6_sendmsg+0x2abb/0x58a0 [ 262.464606] inet_sendmsg+0x54a/0x720 [ 262.468407] ___sys_sendmsg+0xdb9/0x11b0 [ 262.472555] __se_sys_sendmsg+0x305/0x460 [ 262.476706] __x64_sys_sendmsg+0x4a/0x70 [ 262.480775] do_syscall_64+0xbc/0xf0 [ 262.484495] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 262.489674] ================================================================== [ 262.497026] Disabling lock debugging due to kernel taint [ 262.502472] Kernel panic - not syncing: panic_on_warn set ... [ 262.508361] CPU: 1 PID: 11174 Comm: syz-executor.2 Tainted: G B 5.0.0-rc1+ #9 [ 262.516931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.526283] Call Trace: [ 262.528863] [ 262.531026] dump_stack+0x173/0x1d0 [ 262.534668] panic+0x3d1/0xb01 [ 262.537897] kmsan_report+0x293/0x2a0 [ 262.541711] __msan_warning+0x82/0xf0 [ 262.545527] gre_rcv+0x11a8/0x1920 [ 262.549074] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 262.554361] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 262.559752] ? erspan_xmit+0x3890/0x3890 [ 262.563820] gre_rcv+0x2dd/0x3c0 [ 262.567194] ? gre_parse_header+0x1370/0x1370 [ 262.571694] ip_protocol_deliver_rcu+0x584/0xba0 [ 262.576469] ip_local_deliver+0x624/0x7b0 [ 262.580634] ? ip_local_deliver+0x7b0/0x7b0 [ 262.584961] ? ip_protocol_deliver_rcu+0xba0/0xba0 [ 262.589981] ip_rcv+0x6b6/0x740 [ 262.593278] ? ip_rcv_core+0x11c0/0x11c0 [ 262.597350] process_backlog+0x756/0x10e0 [ 262.601508] ? pfifo_fast_enqueue+0x760/0x760 [ 262.606022] ? ip_local_deliver_finish+0x320/0x320 [ 262.610959] ? rps_trigger_softirq+0x2e0/0x2e0 [ 262.615544] net_rx_action+0x78b/0x1a60 [ 262.619539] ? net_tx_action+0xca0/0xca0 [ 262.623608] __do_softirq+0x53f/0x93a [ 262.627428] do_softirq_own_stack+0x49/0x80 [ 262.631752] [ 262.633993] __local_bh_enable_ip+0x16f/0x1a0 [ 262.638500] local_bh_enable+0x36/0x40 [ 262.642400] ip6_finish_output2+0x1d64/0x25f0 [ 262.646926] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 262.652129] ip6_finish_output+0xae4/0xbc0 [ 262.656384] ip6_output+0x5ca/0x710 [ 262.660026] ? ip6_output+0x710/0x710 [ 262.663842] ? ac6_seq_show+0x200/0x200 [ 262.667818] rawv6_sendmsg+0x5153/0x58a0 [ 262.671933] ? raw6_getfrag+0x590/0x590 [ 262.675921] ? compat_rawv6_ioctl+0x100/0x100 [ 262.680423] inet_sendmsg+0x54a/0x720 [ 262.684236] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 262.689449] ___sys_sendmsg+0xdb9/0x11b0 [ 262.693523] ? inet_getname+0x490/0x490 [ 262.697509] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 262.702712] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 262.708088] ? __fget_light+0x6e1/0x750 [ 262.712082] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 262.717287] __se_sys_sendmsg+0x305/0x460 [ 262.721459] __x64_sys_sendmsg+0x4a/0x70 [ 262.725526] do_syscall_64+0xbc/0xf0 [ 262.729257] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 262.734445] RIP: 0033:0x457e29 [ 262.737638] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.756542] RSP: 002b:00007f2fd5aecc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.764276] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 262.771546] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 262.778817] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 262.786171] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2fd5aed6d4 [ 262.793441] R13: 00000000004c5403 R14: 00000000004d9220 R15: 00000000ffffffff [ 262.802037] Kernel Offset: disabled [ 262.805666] Rebooting in 86400 seconds..