[ 95.944505] audit: type=1800 audit(1552311703.003:25): pid=10632 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 95.963747] audit: type=1800 audit(1552311703.003:26): pid=10632 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 95.983320] audit: type=1800 audit(1552311703.023:27): pid=10632 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 97.355963] sshd (10697) used greatest stack depth: 54176 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 99.173487] sshd (10768) used greatest stack depth: 53616 bytes left Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. 2019/03/11 13:41:56 fuzzer started 2019/03/11 13:42:01 dialing manager at 10.128.0.26:42131 2019/03/11 13:42:01 syscalls: 1 2019/03/11 13:42:01 code coverage: enabled 2019/03/11 13:42:01 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/11 13:42:01 extra coverage: extra coverage is not supported by the kernel 2019/03/11 13:42:01 setuid sandbox: enabled 2019/03/11 13:42:01 namespace sandbox: enabled 2019/03/11 13:42:01 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/11 13:42:01 fault injection: enabled 2019/03/11 13:42:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/11 13:42:01 net packet injection: enabled 2019/03/11 13:42:01 net device setup: enabled 13:45:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0007f010000000000fca0d9"], 0x60}}, 0x0) [ 301.224129] IPVS: ftp: loaded support on port[0] = 21 [ 301.393412] chnl_net:caif_netlink_parms(): no params data found [ 301.468509] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.475239] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.483864] device bridge_slave_0 entered promiscuous mode [ 301.493860] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.500379] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.508990] device bridge_slave_1 entered promiscuous mode [ 301.545920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 301.558485] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 301.593282] team0: Port device team_slave_0 added [ 301.602445] team0: Port device team_slave_1 added [ 301.787751] device hsr_slave_0 entered promiscuous mode [ 301.953581] device hsr_slave_1 entered promiscuous mode [ 302.119010] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.125658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.132962] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.139506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.235755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.257696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.268313] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.279104] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.289622] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 302.310870] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.328723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.337570] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.344146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.399201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.407944] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.414518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.425158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.434392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.447316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.459682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.468128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.487085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.499931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.509313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.517814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.564372] 8021q: adding VLAN 0 to HW filter on device batadv0 13:45:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0007f010000000000fca0d9"], 0x60}}, 0x0) 13:45:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000000), 0x26c, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="39000000130009006900000000060000ab00804813000000460001070000001419000a000d000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) [ 304.296063] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 13:45:11 executing program 0: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') fchdir(r0) getcwd(0x0, 0xfab2) 13:45:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 13:45:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1}}}}, 0xc0}}, 0x0) 13:45:11 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@empty, @empty, 0x0, 0xa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @rand_addr=0x2ac, @multicast2, @multicast1, @loopback, @loopback]}, 0x38) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @multicast2}, &(0x7f0000000200)=0xc) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000240)=""/96) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x840) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000440)={0x7fff, 0xffffffffffffffaf, 0x9, 0x30000000000000}) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000480)=0x7, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000004c0)=0x1000000) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x10001) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000500)={0x7f, 0x80000001}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000580)={0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000005c0)={r4, 0x2}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000600)=0x210) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000640)=""/122) r5 = accept4(r0, &(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x80, 0x800) execve(&(0x7f0000000780)='./file0\x00', &(0x7f0000000a40)=[&(0x7f00000007c0)='TIPC\x00', &(0x7f0000000800)='\xf7keyring^wlan1vmnet0\\\x00', &(0x7f0000000840)='TIPC\x00', &(0x7f0000000880)='/dev/audio\x00', &(0x7f00000008c0)='broadcast-link\x00', &(0x7f0000000900)='ppp1:-ppp1-#%self\'system^/*\x00', &(0x7f0000000940)='TIPC\x00', &(0x7f0000000980)='TIPC\x00', &(0x7f00000009c0)='/dev/audio\x00', &(0x7f0000000a00)='broadcast-link\x00'], &(0x7f0000000c00)=[&(0x7f0000000ac0)='+%\x00', &(0x7f0000000b00)='TIPC\x00', &(0x7f0000000b40)='em0proc\x91.eth1((^-&&{cpusetwlan1:trusted\x00', &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='/dev/audio\x00']) poll(&(0x7f0000000c40)=[{r5, 0xa010}, {r5, 0x608}, {r5, 0x10}, {r5, 0x80}], 0x4, 0x2) lsetxattr$security_evm(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='security.evm\x00', &(0x7f0000000d00)=@ng={0x4, 0x12, "05b7"}, 0x4, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000d40)={0x0, 0x614}, 0x8) getresgid(&(0x7f0000000d80)=0x0, &(0x7f0000000dc0), &(0x7f0000000e00)) getgroups(0x5, &(0x7f0000000e40)=[0xee00, 0xee01, 0x0, 0xee00, 0xffffffffffffffff]) setregid(r6, r7) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000e80)=@assoc_value={r2, 0x7}, 0x8) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000ec0)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/vfio/vfio\x00', 0x100, 0x0) 13:45:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f}) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 305.028015] input: syz0 as /devices/virtual/input/input5 [ 305.068631] input: syz0 as /devices/virtual/input/input6 13:45:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0xfd) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000080)={@remote, @loopback, @dev}, &(0x7f0000000100)=0xc) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@host}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) munlockall() dup2(r2, r0) 13:45:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x80045440, 0x70a000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='gretap0\x00') [ 305.563649] IPVS: ftp: loaded support on port[0] = 21 13:45:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x8}) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) [ 305.783442] chnl_net:caif_netlink_parms(): no params data found [ 305.857176] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.863807] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.872212] device bridge_slave_0 entered promiscuous mode [ 305.903790] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.910346] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.918876] device bridge_slave_1 entered promiscuous mode 13:45:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="f7"], 0x1) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='vboxnet0(/keyring\x00', 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6b6b6b, 0x8012, r0, 0x0) [ 306.017788] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 306.038575] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 306.074523] team0: Port device team_slave_0 added [ 306.083702] team0: Port device team_slave_1 added [ 306.188284] device hsr_slave_0 entered promiscuous mode [ 306.333073] device hsr_slave_1 entered promiscuous mode [ 306.528196] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.534808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.541985] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.548623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.693966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.714836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.725831] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.735270] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.749987] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 306.771599] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.787486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.796679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.805029] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.811522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.874476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.883334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.891443] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.897976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.906991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.916404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.925726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.934696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.943520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.952779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.961523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.970251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.978555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.987187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.999454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.007512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.055705] 8021q: adding VLAN 0 to HW filter on device batadv0 13:45:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='!'], 0x1) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000100)={0x0, 0xfffffffffffffff7, 0x6}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1) dup2(r2, r1) 13:45:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getrusage(0x0, &(0x7f00000000c0)) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x1f, 0x0) readlinkat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200)=""/102, 0x66) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000300)={r3, 0x2}, 0x8) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000080)=0x3be) [ 307.453616] protocol 88fb is buggy, dev hsr_slave_0 [ 307.459301] protocol 88fb is buggy, dev hsr_slave_1 13:45:14 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x1, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000440)={{0x2, 0x7, 0x2, 0x3, 'syz0\x00', 0x80000001}, 0x1, [0x3ff, 0x3, 0x8, 0x40, 0x1000, 0x9, 0x1, 0x10000, 0xfffffffffffffff9, 0x7, 0x80000001, 0xfffffffffffffffb, 0x3, 0x9, 0xc7f, 0x7, 0x8, 0x5, 0x3, 0xfffffffffffffff7, 0x81, 0x2, 0x200, 0x2, 0x80, 0x3, 0x4b58, 0x3, 0xfffffffffffff971, 0x4, 0x4, 0x2, 0x1, 0x5, 0x7, 0xffff, 0x5, 0x100000001, 0x7000000000000, 0x1, 0x33, 0x7, 0x2, 0x7f, 0x8, 0x6e88c10f, 0x8000, 0x7, 0x1, 0x8, 0xffffffff, 0x72f3, 0x3, 0xffffffff, 0xcfda, 0x8, 0x0, 0x0, 0xee3d, 0x5, 0x100000000000, 0x40, 0x7, 0x6, 0xffff, 0x4, 0x4, 0xa335, 0x565, 0x5, 0x80000001, 0xfffffffffffff801, 0x5, 0x4, 0xfff, 0x8000, 0x80000001, 0x9, 0xd36e, 0x6d1, 0x7, 0x6, 0x100, 0x4, 0x3, 0xffffffff, 0x8, 0x1, 0x800, 0x2, 0x0, 0xff, 0x3f, 0x6b, 0x9, 0x40, 0xffff, 0x2, 0x8, 0xfffffffffffffc00, 0x40, 0x9, 0x3, 0x10001, 0x6, 0x5, 0x3, 0x4, 0xd6b, 0x4, 0x4, 0x1000, 0x3, 0x5, 0x3ff, 0x5, 0x8, 0x2, 0x100000000, 0x8, 0x40, 0x1ff, 0x3, 0x0, 0x7, 0x8, 0x2d0, 0xff]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x84000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x1}}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000080)=0xfcb4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r4, 0xb0c, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000000c0)={'caif0\x00', {0x2, 0x4e20, @rand_addr=0x929}}) 13:45:14 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) bind$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0445624, &(0x7f0000000180)={0x980001, 0x0, "25b872b8f79885950ff11a94f326d3d3060eb9e29bfdd0fb92a7f28401964fa2"}) 13:45:14 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x80000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, 0xfffffffffffffffe) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0xc0a85322, &(0x7f0000000480)={0x2000407ff, 0x0, 0x0, 'queue0\x00'}) 13:45:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x8002, @multicast2}]}}}]}, 0x38}}, 0x0) 13:45:14 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000540)={0x0, 0x6}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000002c0)=0x3, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x8) 13:45:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x28040, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0406195826d2d7d52046b1f54fb469f8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 308.063786] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 13:45:15 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x81ff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) fallocate(r0, 0x3, 0x0, 0x80000000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000006000/0x4000)=nil, 0x4000}) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x8) 13:45:15 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x40c2, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', 0x0, 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', 0x0, 0x195, 0x103) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13:45:15 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x10000, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x168, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', '\x00', @remote, [], @link_local, [], 0xa0, 0xa0, 0xd8, [@m802_3={'802_3\x00', 0x8, {{0x0, 0x0, 0x1a62bbed4b27c217}}}]}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast}}}}]}]}, 0x1e0) finit_module(r1, &(0x7f0000000100)='802_3\x00', 0x2) 13:45:15 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) read(r0, &(0x7f00000000c0)=""/117, 0x75) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x200) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)=""/97) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000001c0)=""/4096) 13:45:15 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000002e40)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) acct(0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x802080, &(0x7f0000000140)='*\x00') 13:45:15 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000140)) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/8, 0x5}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x7, 0x7, 0x808000000000000, 0x10001, 0x0, 0x6}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) 13:45:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r1 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x80800) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bpq0\x00', 0x10) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2321202e2f66c60a00000a399882413ffd5b8b0cfd42119cc4e104030000000000000000"], 0x24) 13:45:16 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000280)={0x8, 0x11, 0x8001, 0xfffffffffffffffb, "43f3b57651748b9d561b74d95fc9ad5717c1e364e1de2a1d24158cc0d7edc558"}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xce9, 0x80) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x7, 0x3, [0x73, 0x7ff, 0x6]}, &(0x7f00000000c0)=0xe) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x10b, 0xab0}, &(0x7f0000000140)=0x90) rmdir(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, 0x0) 13:45:16 executing program 1: socketpair$unix(0x1, 0x8000000000006, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x20000000000489) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x482080, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00fba70107ce195e85e5ac35c92315eeb8d342ae876015bd993230f8101dd46604279c0978ee28c48504414fa39c3bb53538ed411635e0ca9faec5348c4f8a261fce3ebbe114d26e1cc61561ba923c05654968dd3eb783bf87ae9e184985bcd10ea7a34af6b184340a2040781455be4f5cb63a3c514235982cc0c4654c1aea12aca8e69c8b68dacc160445e77731b7df52d2755e8077005c6b7f6ca35b6fd756cbc6cf95f0ae1560deedaf5946784d51038fdbd3"], 0xa7, 0x3) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000740)='s', 0x1}], 0x1) socket$inet6(0xa, 0x6, 0x7) fcntl$setflags(r0, 0x2, 0x0) 13:45:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000280)={0x0, 0x3, [{r2, 0x0, 0x1000, 0x4000}, {r2, 0x0, 0x0, 0xfffffffff0000000}, {r2, 0x0, 0x14000, 0xfffff000}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r2, &(0x7f0000000340), 0x10000014c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000340), 0x0) 13:45:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x5319) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x1, 0x0, 0x5, {0x0, 0x0, 0x0, 0xb202}}) 13:45:16 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x101, 0x400400) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x8c, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x3, @mcast2, 0xffffffffffffffff}, @in6={0xa, 0x4e22, 0x81, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000}, @in6={0xa, 0x4e23, 0x10000, @local, 0x10001}, @in6={0xa, 0x4e23, 0xfffffffffffffbff, @empty, 0x7}, @in6={0xa, 0x4e23, 0xb9a, @mcast1}]}, &(0x7f0000000440)=0x10) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={r2, 0x7, 0x6}, 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) socketpair(0x0, 0x20000000008000f, 0x54, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0xd) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) 13:45:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x400, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x2, 0x210, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000130000000000000000007465616d3000000000000000000000006970366772653000000000000000000079b9f73000002000000000000000000062707130000000000000000000000000aaaaaaaaaaaa000000000000ffffffffffff0000000000000000b0000000b0000000e0000000636f6e6e6279746573000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000f9e9ff0001000000ffffffff01000000110000000000000000006e72300000000000000000000000000079616d3000000000000000000000000079616d3000000000000000000000000076657468315f746f5f7465616d000000aaaaaaaaaabb000000000000ffffffffffff00000000000000007000000070000000a0000000415544495400000000000000000000000000000000000000000000000000000008000000000000000000000000000000"]}, 0x288) r4 = dup(r0) write$P9_RGETLOCK(r4, 0x0, 0x0) syncfs(r3) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x800, r4}) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x26}, 0x10000}}, 0x24) 13:45:16 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002980)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0xffffffffffff34ed) ioctl$TCSBRKP(r0, 0x7b9, 0x710003) [ 309.924126] Unknown ioctl -2147199232 [ 309.932157] Unknown ioctl 4708 [ 309.954303] Unknown ioctl -2147199232 [ 309.972662] Unknown ioctl 4708 13:45:17 executing program 1: r0 = getpgrp(0xffffffffffffffff) times(&(0x7f0000000000)) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 13:45:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x1c, @dev={0xfe, 0x80, [], 0x21}, 0x51}}, 0x101, 0x3}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r2, 0x86a}, &(0x7f00000001c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000015c0), &(0x7f00000000c0)=0x4) 13:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', r2}) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x305}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 13:45:17 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') setsockopt$packet_int(r0, 0x107, 0x1b, &(0x7f0000000000)=0x3ff, 0x4) 13:45:17 executing program 1: prctl$PR_SET_TSC(0x1a, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = add_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000340)="f56f8c9a379a934c50cc431886957fd1df58b741cd72ed788b994384aabbfaa42a4c822c834a0f7fca3e1fac238ff8647200c30c861e7caf8e37aed39ae418bbdcf7e5b40d039fe8bef28d1fd8790d5444517ea584ad865521f93889513f7ef05faf9ccee302e6f073303c3056d9c42f1159f4aba62b30009d0dcec67c2654140694a5714c74", 0x86, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r3, 0x2a1, 0xcf4, r4) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) setgid(r5) r6 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x100000000, 0x28000) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000480)=""/232) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x140, 0x0) bind$vsock_stream(r7, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) r8 = gettid() ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000001c0)={0x512c0b32, 0x6, 0x5, 0x2, 0x6, 0x400}) sched_getattr(r8, &(0x7f0000000180), 0x30, 0x0) 13:45:17 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000080)=[@register_looper, @exit_looper, @increfs_done={0x40106308, r1, 0x1}], 0x0, 0x0, &(0x7f00000000c0)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=""/97, 0x61, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r4, 0x4) syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x80000001, 0x80) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) read$eventfd(r0, &(0x7f0000000380), 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, &(0x7f00000003c0)="86fc85353cfcd83598a0771f2c423d40730a9585b191c81b88e8106ba7ad0ede62307b5fc2f422ff868750b8368e01c50aabeab969ec", &(0x7f0000000400)=""/231}, 0x18) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r5, 0x208, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000680)={0x1, 0x0, {0x0, 0x9, 0x1, 0x1}}) connect$netlink(r0, &(0x7f00000006c0)=@unspec, 0xc) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000700)={'security\x00'}, &(0x7f0000000780)=0x54) write$cgroup_type(r0, &(0x7f00000007c0)='threaded\x00', 0x9) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) clock_getres(0x7, &(0x7f0000000800)) r6 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r6, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r0, 0x10, &(0x7f0000000940)={&(0x7f0000000840)=""/234, 0xea, r4}}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000009c0)=0x3) write$sndseq(r0, &(0x7f0000000a80)=[{0x6, 0x6, 0x2, 0x3, @time, {0xeb5, 0xed}, {0x8, 0x3ff}, @note={0x6d00, 0x7ff, 0x3, 0xe7, 0x3}}, {0x4, 0xfff, 0x4, 0x401, @tick=0x1000, {0x5, 0x5}, {0x9, 0x80}, @note={0x7, 0x5, 0x83, 0x6, 0x9}}, {0x1ff, 0x7, 0x3, 0x7, @time={0x0, 0x1c9c380}, {0x81, 0x2000}, {0x0, 0xffffffff00000001}, @ext={0x58, &(0x7f0000000a00)="8db6274eabbb51aa9b6aa8a2fe8420237a3ea218ba7f6ee4bf0f07ea9123a2ab9209ffac9b15582b47ac4a7abfb5f6331dbb6d1e38e891ca81db9f6ba1f9a625dce3182b5ec24ec0d7ceb5f4d047241a463604715591a15a"}}], 0x90) sendto$rxrpc(r0, &(0x7f0000000b40)="c663002bcfc214a0938f8c93827e29ccfaf94ca3c3d6981ec449d420fcd93971ae6acee83a53a04f995d1abdbe1b09d85e2a0014ec9592007c4890f296f9c3ad6ffc62bd3edf1d09ae77879109ff37ed188547fa2b4d055549c1c86e177816dee16ce78263bb8b03ca9f6fc2f4a97b3df20eca958f2eca", 0x77, 0x810, &(0x7f0000000bc0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000c40)={0x34, 0x0, &(0x7f0000000c00)}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000f00)={0x13, 0x10, 0xfa00, {&(0x7f0000000c80), r7, 0x2}}, 0x18) readlink(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)=""/80, 0x50) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001000), 0x4) write$P9_RLCREATE(r0, &(0x7f0000001040)={0x18, 0xf, 0x1, {{0x10, 0x2, 0x3}, 0x5}}, 0x18) 13:45:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x5}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 13:45:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc000, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x20}, {r0, 0x4}, {r0, 0x14}, {r0, 0x4}, {r0, 0x200}, {r0, 0x10}, {r0, 0x80}, {r0}, {r0, 0x90}], 0x9, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x4}, 0x8) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1000013d}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYPTR64, @ANYRES32=r0], @ANYBLOB="0bbd1a4914850a7a47866158a5a8a001980543158fab268879698c1b14cc46802314464132f0437f1ca9c0593b1fd96c790f5ffd8c1f68636ff4778e8575e2f7224873fb65a0623c7dcefa55ef25c3e35a6f985a2fba211d7039ddbcd073ca3ec0fa7c2fc710d19567a4ecc41834c3dd7caa1234b283f3e412df1066d54a61f6373c5bd82bf898cafb09a05303b13cc38f286729605ffea16d73545d2fe2d9453dd55e16ba17ad8281f37d914b21f35452493b3f16e49b", @ANYRESOCT=r0, @ANYBLOB="ef8e4bbe9888a0238eee7644a81743a87a8cbc8b3b27cee2ad7f2401342da2cb0dfb8c72d177b52cb01307dd88047f9f23ffda2d59bf9a0b9274f6d93f21b6655da35d89020a5582e2c89b8ab83385d9920fef9768a13e8412a5b2e219aea871ebb8872e8414f4e7636756eb5705a6ad10cb2adf0feb6b7f736f0367b83f247a3e86900908c46f8de275ea8e70261cbc24b69106602fd85c861649816ee214e1b2e2bbd47dec9e8139c7a21ebf33decaac549000786d8e77ad9f786a8adc384871f433556e42450c789e8b3e0f1104e21827735d9170dfbf9d091770d45447bf1a22ec0251fa699b7dbdb1bd8d2fa8cab1ddc4db", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="c0de7b603a41d22b6f8c72d30a481aa1e202828183d77a7bd53859b358ff7fc5089fdc512b1cba8f76f966a5023ca8a3563e0da150bb095c97657c419e68baa5af4d2b4fe3430e73d7c501abc2e5297f05d6ff0d33e469095d182e6bd0da0f066894c504fe4d9d1760c05989333db977648403e3a21a13e571fcf8918e64cc0a4bb0417fbc09ff1d022bc503a71a7d4725f37593647937aaaa5927b977f7a3641e4659dd77742f73ac5075b5e3d7ce9dabd9138bb4e34be7fee90c97c40ab2302e39d3ff244acf69d741ab5dd2f7ca4939c4c6fb11b4ea049353fa61ae70e89202cc9586e6d93a6f", @ANYBLOB="1141fb1ad811c6c4790ba27491845c80b58bb8edf68e795da3730971d8400a4a5779d28b91d584f6b02418be7c3da43ef5c6ee5bf9b149d7cce27a0eb7d6ae64514c23fb89655ca28e8deeace3f79f5ac5a3a4a91cf7b36def7b96f9debbad1f94ef20e9ae2340994d42379657ae17dbe546515482ba815ef3fdc13028a1e6b852f9be5153af7fd76d7e8b092953878e3b36b261baac9227cff19ea685b6e9b22442a26caa924f30e0a3bbe32c76c1c5d0951b11568646aadbf107d6c1acb5afaa9b3f932e1d51cb326f8763c7dc4d8ff9c78889b0b6598185776d6a796c13def4fb2b619d8833e08110ef74af78c3ac2ad141fb3102"]]], 0x22) 13:45:18 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvfrom$unix(r0, 0x0, 0x29b, 0x60, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x931cfaa3) [ 311.498671] IPVS: ftp: loaded support on port[0] = 21 [ 311.568239] Bluetooth: Error in BCSP hdr checksum 13:45:18 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'veth1_to_team\x00', {0x2, 0x4e22, @multicast2}}) mlock(&(0x7f0000683000/0x4000)=nil, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f00005ff000/0x3000)=nil, 0x0, 0x0, 0x40, &(0x7f0000399000/0x2000)=nil, 0x27d}) mbind(&(0x7f000023b000/0x600000)=nil, 0x600000, 0x200, 0x0, 0x5b0, 0x2) mlock(&(0x7f0000a3f000/0x1000)=nil, 0x1000) [ 311.753340] chnl_net:caif_netlink_parms(): no params data found [ 311.828649] Bluetooth: Error in BCSP hdr checksum 13:45:18 executing program 1: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80800, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x98) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x310) [ 311.856995] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.863607] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.871771] device bridge_slave_0 entered promiscuous mode [ 311.900501] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.907137] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.915457] device bridge_slave_1 entered promiscuous mode [ 311.952078] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 311.973000] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 312.011837] team0: Port device team_slave_0 added [ 312.021150] team0: Port device team_slave_1 added [ 312.083749] Bluetooth: Error in BCSP hdr checksum [ 312.107410] device hsr_slave_0 entered promiscuous mode [ 312.243065] device hsr_slave_1 entered promiscuous mode [ 312.343254] Bluetooth: Error in BCSP hdr checksum [ 312.523221] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.529766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.537075] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.543682] bridge0: port 1(bridge_slave_0) entered forwarding state 13:45:19 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a070c1dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@rand_addr, @dev}, &(0x7f00000002c0)=0xc) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x1, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x10200, 0x2, 0x0, 0x1000, &(0x7f0000ffa000/0x1000)=nil}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) socket$inet(0x2, 0x1, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x400}], 0x2c) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @ioapic={0x13001, 0x1, 0x10000, 0x8, 0x0, [{0x5, 0x200000000000, 0x5, [], 0x1000}, {0x5c4d, 0x200, 0x7, [], 0x8}, {0x8, 0x100000000, 0x2, [], 0x8}, {0x80000000, 0x0, 0x3bfa2d96, [], 0xce8}, {0x6, 0x80000000, 0x4, [], 0x9}, {0x81, 0x0, 0xfff, [], 0x5}, {0x8, 0x5, 0xf10, [], 0x3}, {0x1f, 0x5, 0xfffffffffffffbff, [], 0x1000}, {0x9, 0x7, 0x592a, [], 0x7}, {0x10000, 0xfffffffffffff3c9, 0x5a6, [], 0x9}, {0x36f0, 0x1f, 0x0, [], 0x2}, {0x3, 0x7d, 0x4, [], 0x5}, {0x0, 0x41ec8062, 0x9, [], 0x4}, {0x5, 0xf800000000000000, 0x0, [], 0x5}, {0x46da, 0x4, 0x7ff, [], 0x6}, {0x100000000, 0x3ff, 0x80000001, [], 0x200}, {0x0, 0xe0000000, 0x8, [], 0xfffffffffffffe00}, {0x821, 0x5, 0x10000, [], 0x400}, {0x800, 0x100000001, 0x2, [], 0x63}, {0xa8, 0x2, 0xeea, [], 0x8}, {0x7, 0x8, 0xfffffffffffffff6, [], 0x6}, {0x100, 0x2, 0x81, [], 0xffffffff7fffffff}, {0x1, 0x80000000, 0x81, [], 0x5}, {0x2, 0x200, 0xc8, [], 0x6}]}}) [ 312.603916] Bluetooth: Error in BCSP hdr checksum [ 312.724197] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.734741] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.780922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.804094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.812211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.829130] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.845110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.854007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.862175] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.868740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.880459] Bluetooth: Error in BCSP hdr checksum [ 312.942026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.952023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.968572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.977259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.985554] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.992047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.999769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.009103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.018462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.027526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 13:45:20 executing program 1: setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f0000000100)=':\x00', 0x2, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x100) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x5c70, 0x0, 0x7fff, 0x3ff, 0x0, 0x8, 0x7fffffff, 0xc9, 0x71b11303, 0x401, 0x566}, 0xb) r2 = socket(0xa, 0x6, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000001c0)={0x6}) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) [ 313.036335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.045348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.054233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.062672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.071502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.080037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.095711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.103873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.124165] Bluetooth: Error in BCSP hdr checksum 13:45:20 executing program 1: clone(0x207ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1b) tkill(r0, 0x1e) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x101801, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x3e, "716d9f340b67240068ce60efd881ac87e04276b590149ef09519254bd89b6795d579b4c1174e58a73609f19f3c58fb4fad8c17a90f34b31b63852099a6d9"}, &(0x7f0000000140)=0x46) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000200)=0x10) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x6, 0x0, 0x400, 0xce91, 0x0, 0xfb, 0x0, 0xd, 0x7, 0x2, 0x401, 0x3, 0x3f, 0x5, 0x6, 0x0, 0xfffffffffffffff9, 0x8, 0x3, 0x10001, 0x400, 0x7ff, 0x5, 0x6, 0x10000, 0x9, 0x64, 0x100, 0x101, 0x9, 0x8d, 0xfffffffffffffffd, 0xe8, 0xc54, 0x445c, 0x1ff, 0x0, 0x800, 0x1, @perf_config_ext={0x1, 0x7fff}, 0x0, 0x7, 0x3, 0x1, 0xc5a7, 0xffffffff, 0x4}, r0, 0x8, r1, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) [ 313.170274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.282577] Bluetooth: hci0: command 0x1003 tx timeout [ 313.288137] Bluetooth: hci0: sending frame failed (-49) [ 313.362992] Bluetooth: hci1: command 0x1003 tx timeout [ 313.370879] Bluetooth: Error in BCSP hdr checksum 13:45:20 executing program 1: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) r2 = dup2(r1, r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}, 0x78) 13:45:20 executing program 2: unshare(0x20400) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000180)={0x1, 0x0, 0x2080, {0x6000, 0x2000, 0x2}, [], "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", "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"}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002200)={0x0, 0x8}, &(0x7f0000002240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000002280)=r2, 0x4) write$P9_RATTACH(r1, &(0x7f00000022c0)={0x14, 0x69, 0x2, {0x20, 0x3}}, 0x14) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 313.529821] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 313.564148] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 313.627736] Bluetooth: Error in BCSP hdr checksum 13:45:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {0x0, r1, 0x3}}, 0x18) r2 = open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0xe4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x40, 0x0, 0x1, 0x82, 0x7f, 0x8, 0x3, 0x9, r3}, &(0x7f0000000200)=0x20) symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file1\x00') 13:45:20 executing program 2: socketpair$unix(0x1, 0x4000000000005, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xc1b, 0x9, 0x6, 0x3ff, 0x0, 0x400, 0x582, 0x0, 0x2, 0xc23e, 0x1, 0x6, 0x80, 0x40, 0x8, 0xffffffffffff255e, 0x6, 0x5, 0x0, 0xc3, 0x5000000000000, 0x8ee6, 0x80000001, 0x2, 0x2, 0x7, 0xfffffffffffffffe, 0xf55, 0x2, 0xbc7a, 0xce, 0x9, 0x10000, 0x0, 0xfff00000, 0x3, 0x0, 0x80000000, 0x2, @perf_config_ext={0x7, 0x7d}, 0x660, 0x2, 0x80, 0x7, 0x1000, 0x824, 0x3f}, 0x0, 0x8, 0xffffffffffffff9c, 0x9) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x80000004001fd) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_smack_entry(r0, &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='/dev/dlm_plock\x00', 0xf, 0x1) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000040)={0x18}, 0xfc71) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x18, 0x0) [ 313.883279] Bluetooth: Error in BCSP hdr checksum [ 314.143157] Bluetooth: Error in BCSP hdr checksum [ 314.403225] Bluetooth: Error in BCSP hdr checksum [ 314.663258] Bluetooth: Error in BCSP hdr checksum [ 314.923199] Bluetooth: Error in BCSP hdr checksum [ 315.183916] Bluetooth: Error in BCSP hdr checksum [ 315.363265] Bluetooth: hci0: command 0x1001 tx timeout [ 315.368791] Bluetooth: hci0: sending frame failed (-49) [ 315.443167] Bluetooth: hci1: command 0x1001 tx timeout [ 315.449699] Bluetooth: Error in BCSP hdr checksum [ 315.454844] Bluetooth: Error in BCSP hdr checksum [ 315.703563] Bluetooth: Error in BCSP hdr checksum [ 315.708552] Bluetooth: Error in BCSP hdr checksum [ 315.963879] Bluetooth: Error in BCSP hdr checksum [ 315.968866] Bluetooth: Error in BCSP hdr checksum [ 316.223333] Bluetooth: Error in BCSP hdr checksum [ 316.228317] Bluetooth: Error in BCSP hdr checksum [ 316.483403] Bluetooth: Error in BCSP hdr checksum [ 316.488384] Bluetooth: Error in BCSP hdr checksum [ 316.743622] Bluetooth: Error in BCSP hdr checksum [ 316.748598] Bluetooth: Error in BCSP hdr checksum [ 317.003419] Bluetooth: Error in BCSP hdr checksum [ 317.008379] Bluetooth: Error in BCSP hdr checksum [ 317.263525] Bluetooth: Error in BCSP hdr checksum [ 317.268493] Bluetooth: Error in BCSP hdr checksum [ 317.442854] Bluetooth: hci0: command 0x1009 tx timeout [ 317.523070] Bluetooth: hci1: command 0x1009 tx timeout [ 317.529456] Bluetooth: Error in BCSP hdr checksum [ 317.534565] Bluetooth: Error in BCSP hdr checksum [ 317.783584] Bluetooth: Error in BCSP hdr checksum [ 317.788568] Bluetooth: Error in BCSP hdr checksum [ 318.043494] Bluetooth: Error in BCSP hdr checksum [ 318.048482] Bluetooth: Error in BCSP hdr checksum [ 318.303480] Bluetooth: Error in BCSP hdr checksum [ 318.308462] Bluetooth: Error in BCSP hdr checksum [ 318.563396] Bluetooth: Error in BCSP hdr checksum [ 318.568374] Bluetooth: Error in BCSP hdr checksum [ 318.823442] Bluetooth: Error in BCSP hdr checksum [ 318.828422] Bluetooth: Error in BCSP hdr checksum [ 319.083581] Bluetooth: Error in BCSP hdr checksum [ 319.088617] Bluetooth: Error in BCSP hdr checksum [ 319.343323] Bluetooth: Error in BCSP hdr checksum [ 319.348290] Bluetooth: Error in BCSP hdr checksum [ 319.603506] Bluetooth: Error in BCSP hdr checksum [ 319.608499] Bluetooth: Error in BCSP hdr checksum [ 319.863725] Bluetooth: Error in BCSP hdr checksum [ 319.868722] Bluetooth: Error in BCSP hdr checksum [ 320.123674] Bluetooth: Error in BCSP hdr checksum [ 320.128649] Bluetooth: Error in BCSP hdr checksum [ 320.383657] Bluetooth: Error in BCSP hdr checksum [ 320.388631] Bluetooth: Error in BCSP hdr checksum [ 320.643827] Bluetooth: Error in BCSP hdr checksum [ 320.648807] Bluetooth: Error in BCSP hdr checksum [ 320.903062] Bluetooth: Error in BCSP hdr checksum [ 320.907981] Bluetooth: Error in BCSP hdr checksum [ 321.163367] Bluetooth: Error in BCSP hdr checksum [ 321.168338] Bluetooth: Error in BCSP hdr checksum [ 321.423391] Bluetooth: Error in BCSP hdr checksum [ 321.428340] Bluetooth: Error in BCSP hdr checksum [ 321.685275] Bluetooth: Error in BCSP hdr checksum [ 321.690337] Bluetooth: Error in BCSP hdr checksum 13:45:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000040)=0x4c000000, 0x10a000d04) 13:45:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x40980914}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f00000001c0)={{0x3, @addr=0x6}, "44e5b6a43467f855072943b8ce2b41373ddf675ec3d7328f3db1f68ba4f46bbc"}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x0, @reserved}) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x400) 13:45:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x4, 0x8, 0xc8, 0x9b2, 0xe08, 0x1, 0x200, 0x10000, 0x22e17f80, 0x44, 0x2, 0x2, 0x3}, {0x6, 0x1e, 0x8, 0x2, 0xff, 0x9, 0xf, 0x0, 0x80000000, 0x4, 0x4, 0x40, 0x9995}, {0x5, 0x10000, 0x5, 0x3e4a, 0x1, 0x5, 0x9, 0x1, 0x401, 0x80000000, 0x10f, 0x7ff, 0x7f}], 0x7f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x81a0ae8c, &(0x7f0000000fc0)) 13:45:28 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x9, 0xf30, 0x4, 0xa2}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x5, 0x610ddc4b, 0x8, 0x6a6, 0x0, 0x20, 0x9b1}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x45, "58201b0e2c0ae54902b9949c5a30f9f1e5754f16b6adf70d71e8566a5b35de2336f0e567dad331817ba0524776b8ed487449b63a6e4fc9b0bf8098163d3f5b2f891527b8c0"}, &(0x7f0000000140)=0x4d) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r1, 0x7f}, 0x8) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="f3e00cbaf80c66b891a2228266efbafc0cb000eebaf80c66b8df71278766efbafc0cec2ed30aba430066ed260f01cb0f01d10fc76d5b660fd9e7b801008ec8", 0x3f}], 0x1, 0x4c, &(0x7f0000000240)=[@cstype0={0x4, 0xa}], 0x1) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000280)={0x0, 0x100000000, 0x7, 0x3, &(0x7f0000ffd000/0x2000)=nil, 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e23, @multicast1}, {0x6, @remote}, 0x6, {0x2, 0x4e23, @multicast1}, 'vxcan1\x00'}) syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x5, 0x80) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000440)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x9, @mcast2}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @empty}], 0x5c) getpeername$unix(r0, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x400, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000640)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000680)) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f00000006c0)=0x1, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000700)=0x3, 0x4) readlinkat(r0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=""/4096, 0x1000) read(r2, &(0x7f0000001780)=""/83, 0x53) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000001800)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000001840)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000001880), &(0x7f00000018c0)=0x8) setsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000001900)="05eb32794e12006c7b3920616dec28a49214d955a4d681097e6986b408339682bb3736f460b419bc89dfdf2e12e87e9ca121ba7dbf22ba109d9c2f85daed45a8ea765de558c264bc30", 0x49) open(&(0x7f0000001980)='./file0\x00', 0x200, 0x2) pivot_root(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='./file0\x00') openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001a40)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$getflags(r0, 0x40a) 13:45:28 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1, 0x10}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/10) ioctl$NBD_SET_SOCK(r0, 0xab00, r0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'team_slave_1\x00', 0xfffffffffffffffe}) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) ftruncate(r0, 0x3) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000001c0)=0x4) write$P9_RAUTH(r0, &(0x7f0000000200)={0x14, 0x67, 0x2, {0x1, 0x3, 0x4}}, 0x14) ftruncate(r0, 0x3d50899a) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000280), 0x4) uselib(&(0x7f00000002c0)='./file0\x00') write$apparmor_exec(r0, &(0x7f0000000300)={'stack ', '/dev/null\x00'}, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x32, 0x202000) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000380)={0xe, 0x9, 0x1a, 0x3, 0x4a, "d0cd61a4973b2d952c071b11097aa1cabb3cc94b740f234b6ebcdaf2f6f1379a0a41ed8d2e3a23f3377fcf1e64973e5009fea693b9d9d499e00b35c67e3a2708590d9e1de5ea210a7a6a"}, 0x56) tee(r3, r2, 0xdc000000000000, 0x8) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000400)={0xa00000000000000, 0x1f, 0x0, 0x3, 0x7, 0x6, 0x4, 0x4, 0x4, 0x0, 0xff, 0x3}) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000440)=0x1ff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000480)=""/74) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000540)=0x101, 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000580)={0x0, 0x0, [], {0x0, @bt={0x8001, 0x0, 0x0, 0x1, 0x7, 0x4, 0x200, 0x100000001, 0x2, 0x3ff, 0xa3, 0x401, 0x8001, 0xd, 0x0, 0x4}}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000640), &(0x7f0000000680)=0x4) umount2(&(0x7f00000006c0)='./file0\x00', 0xb) write$FUSE_WRITE(r3, &(0x7f0000000700)={0x18, 0xfffffffffffffffe, 0x2, {0xd4e}}, 0x18) syz_open_dev$binder(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x800) 13:45:28 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffb, 0x24600) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x3c, @remote, 0x4e23, 0x0, 'sh\x00', 0x20, 0x3, 0x77}, 0x2c) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e20, @multicast2}, {0x307, @broadcast}, 0x24, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, 'nr0\x00'}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000100)) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000140)) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000180)) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000240)={0x0, "3af73548e2f70f3d1e44b64bbaf9c0c716f365016e81c47f423e8f55b8209492", 0x1, 0x1, 0x100000001, 0x0, 0x6}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000002c0)) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x4, 0xf, 0x3, "93441d482d78f3421bed6f25340db1d0a665a101d639067c5096c55501ca4306", 0x384c4150}) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000340)={0xf, @vbi={0x1, 0x10000, 0x2, 0x42323151, [0x100000001], [0x4, 0x1f], 0x13b}}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000440)={0x5, {0x8, 0x9, 0x3, 0x2}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000480)={0x6, 0x0, 0x1, "82e466bb1072c2bc89a48ddc918dacf28b0a120182ae3412aeb51c3ad6cf6236", 0x7971777f}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000004c0), 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000500)=0x5, 0x4) syz_open_dev$binder(&(0x7f0000000540)='/dev/binder#\x00', 0x0, 0x800) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mixer\x00', 0xa00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x80000) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000600)='/dev/video37\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x26, &(0x7f0000000640)=0x8, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x40010, r2, 0x0) r4 = fcntl$getown(r2, 0x9) sched_getattr(r4, &(0x7f0000000680), 0x30, 0x0) accept$inet6(r3, &(0x7f00000006c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000700)=0x1c) 13:45:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 13:45:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f000000c080)=[{{0x0, 0x0, &(0x7f0000007e80)=[{&(0x7f0000005b80)=""/16, 0x10}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007e00), 0x400000d, 0x0) 13:45:29 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r1 = socket(0xa, 0x1, 0x0) sched_getaffinity(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000007, 0x4050, r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00'}, 0x18) ioctl(r1, 0x8916, &(0x7f0000000000)) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x48c80, 0x8) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1) rt_sigprocmask(0x3, &(0x7f0000000040), &(0x7f0000000080), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = gettid() r5 = getpid() write(0xffffffffffffffff, 0x0, 0x0) ptrace(0xffffffffffffffff, r4) tkill(r5, 0x26) 13:45:29 executing program 0: r0 = open(0x0, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffcb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000027000/0x18000)=nil, 0x0, 0x0, 0x40000, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:45:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 13:45:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020b00044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) 13:45:29 executing program 1: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x8}) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) pwritev(r0, &(0x7f0000002480)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 323.012822] IPVS: ftp: loaded support on port[0] = 21 [ 323.098438] IPVS: ftp: loaded support on port[0] = 21 [ 323.199363] IPVS: ftp: loaded support on port[0] = 21 13:45:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) [ 323.402080] chnl_net:caif_netlink_parms(): no params data found [ 323.745651] chnl_net:caif_netlink_parms(): no params data found [ 323.839349] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.846298] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.854854] device bridge_slave_0 entered promiscuous mode 13:45:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x2, 0x3, 0x19) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000100), 0x4) [ 324.365901] chnl_net:caif_netlink_parms(): no params data found [ 324.377291] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.384173] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.392487] device bridge_slave_1 entered promiscuous mode [ 324.588148] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.594980] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.603235] device bridge_slave_0 entered promiscuous mode [ 324.617507] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 324.643536] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.650044] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.658406] device bridge_slave_0 entered promiscuous mode [ 324.671312] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 324.679651] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.686272] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.694456] device bridge_slave_1 entered promiscuous mode [ 324.714025] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.720529] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.728818] device bridge_slave_1 entered promiscuous mode [ 324.778156] team0: Port device team_slave_0 added [ 324.799660] team0: Port device team_slave_1 added [ 324.821244] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 324.845831] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 324.857647] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 324.869286] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 324.967793] device hsr_slave_0 entered promiscuous mode [ 325.005573] device hsr_slave_1 entered promiscuous mode [ 325.055792] team0: Port device team_slave_0 added [ 325.064720] team0: Port device team_slave_0 added [ 325.073394] team0: Port device team_slave_1 added [ 325.081621] team0: Port device team_slave_1 added [ 325.155319] device hsr_slave_0 entered promiscuous mode [ 325.192697] device hsr_slave_1 entered promiscuous mode [ 325.315181] device hsr_slave_0 entered promiscuous mode [ 325.372639] device hsr_slave_1 entered promiscuous mode [ 325.616244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.648750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.657190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.677950] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.696038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.704938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.714217] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.720718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.743493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.751293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.760046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.769552] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.776070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.790131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.828341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.838857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.865385] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.874671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.882562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.896140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.904167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.918617] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.929664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.966380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.975367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.986260] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.992859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.000787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.010033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.019028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.028015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.036789] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.043361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.051094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.060248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.068873] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.075679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.126414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.134939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.143676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.151593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.160111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.168515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.177330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.186070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.194289] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.200723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.208426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.217078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.226036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.234585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.243577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.251731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.275805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.284273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.292768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.301086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.310115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.323382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.346063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.354847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.369338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.400678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.413776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.434840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.444071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.453147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.461880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.470851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.480046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.496139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.504585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.512989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.542766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.551402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.573574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.618009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.629578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.683861] 8021q: adding VLAN 0 to HW filter on device batadv0 13:45:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) gettid() r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getresuid(&(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80)) lstat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)) getgroups(0x1, &(0x7f0000001f40)=[0xffffffffffffffff]) sendmsg$unix(r1, &(0x7f0000002000)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="1c751476e8ef4163a4221603b4f7b42285827580d004829c32934236e288139e860c6d1607004c3afdd29ef5957f9c47619a41203403142a623480d053201906d6f6def6b0fa6d0eb245eff117a75955f4d09119121360b29bb0", 0x5a}], 0x1, 0x0, 0x0, 0x1}, 0xc005) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) gettid() syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000200), 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:45:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000100)=@md5={0x1, "203dfc090b7d41c2f22c9dc8903d68b5"}, 0x11, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x101}}) [ 327.142809] hrtimer: interrupt took 33465 ns 13:45:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 13:45:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000000), 0x26c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:34 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0aea170a8bc81a896aa8f4446b7", 0x0}, 0x28) 13:45:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000180)="0adc1f123c123f3188b070") r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x8180) dup2(r0, r1) 13:45:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800040c004500a, &(0x7f0000000040)=0x80000002) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) 13:45:34 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0030054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) 13:45:34 executing program 2: r0 = memfd_create(&(0x7f0000000080)=']@&^wlan1{([\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06w=\xea\x8f\xe2\xa4\xe3\x85!M\xeb&') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendfile(r0, r1, 0x0, 0x40000000009) 13:45:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:34 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:35 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) write$P9_ROPEN(r0, &(0x7f0000000100)={0x18}, 0x18) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x5, @raw_data="fc2f3fb44a6925d1eb9df1a57676a0fe952bce097c8828f4782602c4abac636d9e34307d72824351955902c81cb24e195527475983b07d34cff8bfb812ac80e51c91da581e7f98c88f13ff54aa67f19db6ce46c1322b555442734ef04000ff2a1ef9e752334fe26168a75c2942e34105c70b014b9efa763212b08dc558673b30ed52abac9fa42d2db8c759dd5b8560705dabc6f726f6ca22a871a77f908e0f96d24c7283ee5545e6542330ba2ed9fcddb5cfb9a7985a46319bf91301fb264aca656686f9b64313a3"}) 13:45:35 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x5, @raw_data="fc2f3fb44a6925d1eb9df1a57676a0fe952bce097c8828f4782602c4abac636d9e34307d72824351955902c81cb24e195527475983b07d34cff8bfb812ac80e51c91da581e7f98c88f13ff54aa67f19db6ce46c1322b555442734ef04000ff2a1ef9e752334fe26168a75c2942e34105c70b014b9efa763212b08dc558673b30ed52abac9fa42d2db8c759dd5b8560705dabc6f726f6ca22a871a77f908e0f96d24c7283ee5545e6542330ba2ed9fcddb5cfb9a7985a46319bf91301fb264aca656686f9b64313a3"}) 13:45:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000180)="0adc1f123c123f3188b070") syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x40803) 13:45:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f00000001c0)={0x7f}, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x8}, 0x8}) 13:45:35 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x770a, 0x0) 13:45:35 executing program 0: write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) getitimer(0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$nbd(r1, 0x0, 0x0) 13:45:35 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x7cb, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000580)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe7}}) 13:45:35 executing program 5: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) getrlimit(0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 13:45:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') preadv(r0, &(0x7f0000001a00)=[{&(0x7f00000014c0)=""/48, 0x30}, {&(0x7f0000001500)=""/79, 0x4f}], 0x2, 0x0) 13:45:35 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) 13:45:36 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000005c0)='\x00') [ 328.893568] protocol 88fb is buggy, dev hsr_slave_0 [ 328.899037] protocol 88fb is buggy, dev hsr_slave_1 [ 328.904813] protocol 88fb is buggy, dev hsr_slave_0 [ 328.910226] protocol 88fb is buggy, dev hsr_slave_1 13:45:36 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)=ANY=[@ANYBLOB="000000000000000000000000000000ea"]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x4000000d000, 0x2000, &(0x7f0000004000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 13:45:36 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x81007702, &(0x7f00000005c0)='\x00') 13:45:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00'], 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:45:36 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) 13:45:36 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10a000d00) 13:45:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:36 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x8) getrlimit(0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0xfffe070080890000}) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fallocate(r2, 0x0, 0x0, 0x100000005) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x6, 0x0, 0x800, 0x95, 0x0, 0x0, 0x20, 0x4, 0x0, 0x3f, 0x9, 0x100000001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x94, 0x7f, 0x2, 0x1, 0x80000000, 0x3c, 0x8, 0x0, 0x3f, 0x0, 0x9e9a, 0x1f, 0x0, 0x0, 0x5, 0x8, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x100000001, 0x4, 0x1, 0x1}, 0xffffffffffffff9c, 0x2, 0xffffffffffffffff, 0x0) 13:45:36 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000200)) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) getpgrp(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r2 = getpgrp(r1) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r2, 0x10000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40041, 0x0) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xee00]) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000080)={0x8, 0x0, [], {0x10000000, @reserved}}) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) msgget(0x0, 0x3) r5 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0xffffffffffffffff) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)}, &(0x7f0000000940)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000980)={r7, 0xe5, "4709feef66fb172013c7b2d744134eec56c365f4038346d7977e79d9d691ae20fe2e9a2abc0ff9debeab38ca4464b15bd56bb7b4745cfb983edc5f7b6649a934e30474dc7a4d6cb4ddbd7c6c43ed20ffef1c63102fd219a5060d3e06f96b8788ea9927aa64ff7f45a3442d937dfc3e9f694d1b5326c55149d0f5fb88e895595f9e684e1019250f2f10bf64e2ea686d95b6f6335b765db68819b71dad0bdccc6574b6f985726e29d56cdefb2d67c9c378d3c4e8dd7efd4a9bd80034845364a668ccebf6daa504fbfbbc8bd68960ca01e76b419a0b6f720e1efb479d3b150bc19dedfbeeb4e5"}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x3ff, 0x8200, 0x3, 0x4, 0x57c, 0x9, 0x100, r8}, 0x20) write$UHID_INPUT(r6, &(0x7f0000001880)={0x8, "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", 0x1000}, 0x1006) open(0x0, 0x0, 0x0) finit_module(r6, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f0000000400)='security.capability\xf6', 0x0], &(0x7f0000000ac0)) 13:45:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x40000fffff9, 0x2) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100323}) 13:45:36 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 13:45:36 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffd8a, 0x0}, 0x0) 13:45:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = getpid() bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x20, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x6, 0x4, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0xffff, 0x0, 0xd1d, 0x0, 0x8, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x1d1, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0xff, 0x9}, r2, 0x3, r3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a40)={'veth0_to_be\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x2, 0x4, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1, 0x7, 0x3, 0x65, 0x1, 0x0, 0x100, 0x6, 0x0, 0x6, 0x0, 0x1f, 0x5, 0x7, 0x1, 0x3, 0x2949, 0x0, 0x8, 0x982, 0x5, 0xff, 0x2, 0x39486ff1, 0x7, 0x0, 0x5, 0x0, 0xdd, 0x2, @perf_config_ext={0x81, 0x5}, 0x200, 0x8000, 0x0, 0x0, 0x3f, 0x1, 0x7fffffff}, r2, 0x1, r1, 0x3) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)) write$cgroup_subtree(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="14df77f852e5cae85157a73a321b7708a469aceeadfb3701f5fe55975024dde91f9e6eeef63b1ea705363364be35d789760e220c242c3f016af7dab03bf446238f44d87c473d719825e6d6ec85e7600f059b4d"], 0x53) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xf}, 0x2c) [ 329.866205] vhci_hcd: invalid port number 0 13:45:37 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="cb81050a126b00000100bb030000097e1a39a44c"], 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000280)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 13:45:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 13:45:37 executing program 2: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="04002dee00000000000000000018ffb606dafa2da1340679eb4b6fadf7"]) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x5, 0x1f04) 13:45:37 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000040), 0x4) 13:45:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:37 executing program 0: 13:45:37 executing program 2: 13:45:37 executing program 4: 13:45:37 executing program 5: 13:45:37 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000800)="24000000640007031dfffd946fa2830020200a00ffffffffa61d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 13:45:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) close(r1) 13:45:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:38 executing program 4: 13:45:38 executing program 5: 13:45:38 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:38 executing program 4: 13:45:38 executing program 0: 13:45:38 executing program 2: 13:45:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:38 executing program 5: 13:45:38 executing program 4: 13:45:38 executing program 0: 13:45:38 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:38 executing program 2: 13:45:38 executing program 5: 13:45:38 executing program 0: 13:45:38 executing program 4: 13:45:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 332.003439] protocol 88fb is buggy, dev hsr_slave_0 [ 332.009178] protocol 88fb is buggy, dev hsr_slave_1 13:45:39 executing program 2: 13:45:39 executing program 0: 13:45:39 executing program 4: 13:45:39 executing program 5: 13:45:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:39 executing program 2: 13:45:39 executing program 5: 13:45:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0xffff) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e26, 0x0, @rand_addr="5b6974c9a9432f2269686c0d2f809c06", 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5f, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) socket$inet6(0xa, 0x2, 0x400000fd9) ioctl(r2, 0x10001, &(0x7f0000000780)="313f624c488dd25d76607062bf4356514a847d2ab26d6979f9bf9ba3e4ee5feef14ba4555dcc8e119bb6d6bb164ac4bd4651e5b111a72140b8b4b2edf3623a9b0ff9acfc4b7ac684dbbbd5911e744c031ddd4851dad48646c3334c3e746cb8c60e39ce07252511284aaeed83294405e694d0d8fba7bcec95263e58fe0311f03d0cbdf61d3de2c0680d031c183e1355e27ce1cc946ce35b786aeb1e086ed776080d8cf3acdf687e") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c6, 0x70004) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a0, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0xf}, {@remote, 0x4e21, 0x7, 0x5, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8bO\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac\x00\x00\x00', 0x5) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0x0) close(r0) dup3(r3, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000a8470800000000000001000000001729d444140d2f01414cbe7ba385e35f0c83567d2aaa095f2dd31af94c58da9239a07d189b6eeebbafacaabcd7d8ec77"], 0x40}}, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x190}}, 0x0) socket$key(0xf, 0x3, 0x2) 13:45:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:39 executing program 2: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x18, r0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 332.760745] ptrace attach of "/root/syz-executor.2"[11451] was attempted by "/root/syz-executor.2"[11452] 13:45:39 executing program 5: 13:45:39 executing program 2: 13:45:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:40 executing program 5: 13:45:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x4c000ffb, 0x10a000d04) 13:45:40 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000180)="0adc1f123c123f3188b070") r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fdatasync(r1) 13:45:40 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x0, 0x2, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) 13:45:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:40 executing program 2: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) 13:45:40 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000080200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) 13:45:40 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:40 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:40 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socket$inet6(0xa, 0x2, 0x0) clone(0xa01ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) tkill(r1, 0x26) 13:45:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:41 executing program 2: 13:45:41 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:41 executing program 5: 13:45:41 executing program 2: 13:45:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:41 executing program 5: 13:45:41 executing program 4: 13:45:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0100054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) 13:45:41 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000d40)={&(0x7f0000000500)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=[{0x60, 0x1, 0x1, "67798e560eecd0ff845d777614f109dd9a1e7e7cea075c4bc5ab9c71e91719f397c074de2d5940411500152736ffd7e7dd0d784fff227f319e5b9a6fd4abf2508aaf6d5c766c65f07b219ef2a30b"}], 0x60}, 0x20000000) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f00000000c0)=r0, 0x4) 13:45:42 executing program 4: 13:45:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:42 executing program 5: 13:45:42 executing program 4: 13:45:42 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl(0xffffffffffffffff, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:42 executing program 5: 13:45:42 executing program 2: 13:45:42 executing program 4: 13:45:42 executing program 5: 13:45:42 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl(0xffffffffffffffff, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:43 executing program 5: 13:45:43 executing program 4: 13:45:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl(0xffffffffffffffff, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:43 executing program 2: 13:45:43 executing program 4: 13:45:43 executing program 5: 13:45:43 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:43 executing program 4: 13:45:43 executing program 2: 13:45:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:43 executing program 5: 13:45:44 executing program 4: 13:45:44 executing program 5: 13:45:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:44 executing program 2: 13:45:44 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:44 executing program 5: 13:45:44 executing program 4: 13:45:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:44 executing program 2: 13:45:44 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:44 executing program 5: 13:45:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 13:45:44 executing program 4: 13:45:44 executing program 2: 13:45:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:45 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:45 executing program 2: 13:45:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:45 executing program 5: 13:45:45 executing program 4: 13:45:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 13:45:45 executing program 2: 13:45:45 executing program 4: 13:45:45 executing program 5: 13:45:45 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 13:45:45 executing program 4: 13:45:45 executing program 2: 13:45:45 executing program 5: 13:45:46 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:46 executing program 4: 13:45:46 executing program 5: 13:45:46 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:46 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1200, 0x12, &(0x7f0000000140), &(0x7f00000001c0)}}], 0x3f000000, 0x0, &(0x7f0000000300)}) 13:45:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000220001a1000000000000000004ffff0004000f00"], 0x1}}, 0x0) [ 339.403970] binder: 11759:11762 got transaction with invalid offsets size, 18 [ 339.411398] binder: 11759:11762 transaction failed 29201/-22, size 4608-18 line 3070 [ 339.443590] protocol 88fb is buggy, dev hsr_slave_0 [ 339.449419] protocol 88fb is buggy, dev hsr_slave_1 13:45:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:46 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:46 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:46 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:46 executing program 5: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, 0x0}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f) 13:45:46 executing program 2: accept4$tipc(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000740)=0x10, 0x800) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000680)={0x9, 0x0, [], {0x0, @reserved}}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) semget$private(0x0, 0x4, 0x4) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1, &(0x7f0000000200)={0x0, 0x989680}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0xc6, 0x7, 0x81, 0x3, 0x99, 0x7, 0x0, 0x81, 0x8, 0x7fff, 0x2, 0xff, 0xfffffffffffffff8, 0x101], 0xf000, 0x1000}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in, 0xfff, 0x82b5}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000600)=ANY=[@ANYBLOB="3401fdac8f457f1f676ce1474cc522cd7e2133163ca062a39d8e1bced906e11068e09367752ebf7960f678cbef72ad738539e458523f3c56ab5c80f9e120f811d9f700b9edebb3707d80ad8c7dbb1213006b9678c6f819b3bcb3be7770a163e403bc039a4583a4"], 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000800)='trusted\x00', &(0x7f0000000840)={'syz'}, r1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000380)={[0xf000, 0x4, 0x2000, 0x3000], 0x0, 0xd8, 0xb}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000002c0)={{0x1, 0x5}, 'port1\x00', 0x51, 0x16043c, 0x1, 0x3, 0x4, 0x543, 0x1ff, 0x0, 0x7, 0x4b}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(r2, &(0x7f00000005c0)={0x18, 0x0, 0x7, {0x3}}, 0x18) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x7}) rt_sigprocmask(0x0, 0x0, &(0x7f0000000280), 0x0) syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0x2000000003, 0x10000000004200) getdents64(r3, &(0x7f00000000c0)=""/11, 0xeb) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000500)={{0x3, @name="b8675210bb0fe9e088abe986bdb1f123043ab523e699e1ceb8d7727971963eae"}, 0x8, 0x400, 0x8}) 13:45:47 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x3a, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 13:45:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:47 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f9b"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:45:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:48 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 13:45:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:50 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:50 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 13:45:50 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 13:45:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:50 executing program 5: openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) unlink(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x20000800003, 0x8012, r0, 0x0) [ 343.453512] protocol 88fb is buggy, dev hsr_slave_0 [ 343.459315] protocol 88fb is buggy, dev hsr_slave_1 [ 343.467461] protocol 88fb is buggy, dev hsr_slave_0 [ 343.473243] protocol 88fb is buggy, dev hsr_slave_1 13:45:50 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)) 13:45:50 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0}) 13:45:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:50 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000180)) r1 = socket(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000340)=0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000380)) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000007, 0x4050, r0, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001440)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$FICLONE(r0, 0x40049409, r0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00', 0x2000000004}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x604000, 0x0) ioctl(r1, 0x8916, &(0x7f0000000000)) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x48c80, 0x8) write$tun(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1) rt_sigprocmask(0x3, &(0x7f0000000040), &(0x7f0000000080), 0x8) clone(0xa01ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = gettid() r6 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r5) tkill(r6, 0x26) 13:45:51 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0}) 13:45:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x100000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffa5, 0x0, 0x0, 0x99820800}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 13:45:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:51 executing program 4: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x20, 0x20, 0xf29}, 0x20}}, 0x0) 13:45:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 344.904157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 13:45:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='/\x00~WMzU\xed\xbb\xc8\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xb1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\x19sT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6d\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\xf7\xff\xff\xff\xff\xff\xff\xff\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xecv:\x1ba=\xd7G\xd5)\xeap\xef\x02\x98\xff\xf5f\x160\xb9\x9ay\xec\x82i\xaf\x9b\xe1x\xae\xca\x17\xfe\xfb\x14\xfd=\x00\x97Z\x99\x9dy\xba\x89M\xba\xe4\xc1\xa6\x06\x00\x00\x00\x00\x00\x00\x00x\"m\a\xe6:?E\x96~\x0e\xe8Y\xbbn\x0f0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffa5, 0x0, 0x0, 0x99820800}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 13:45:52 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:52 executing program 4: creat(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB='/dev/nbd0'], 0x0, &(0x7f00000005c0)='gfs2\x00', 0x0, 0x0) 13:45:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x80001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004000/0x1000)=nil}) 13:45:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x100000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffa5, 0x0, 0x0, 0x99820800}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 13:45:52 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x106001, 0xcd, &(0x7f0000000140)=""/205}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 13:45:52 executing program 5: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2e0000002b00812de492b4b6675082cf0124b0eba16ec400014100000000001700c150fcde6de050cb3a02691db15b2103c43f4f40c73db0", 0x38}], 0x1}, 0x0) 13:45:52 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x3fffffffffffffd, 0x4) 13:45:52 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000840)=""/4096, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) [ 345.616428] ================================================================== [ 345.623968] BUG: KMSAN: uninit-value in memchr+0xce/0x110 [ 345.629576] CPU: 1 PID: 11944 Comm: syz-executor.5 Not tainted 5.0.0+ #11 [ 345.636526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.645889] Call Trace: [ 345.648558] dump_stack+0x173/0x1d0 [ 345.652299] kmsan_report+0x12e/0x2a0 [ 345.656159] __msan_warning+0x82/0xf0 [ 345.659998] memchr+0xce/0x110 [ 345.663276] tipc_nl_compat_bearer_enable+0x2c4/0x910 [ 345.668510] ? tipc_nl_compat_dumpit+0x820/0x820 [ 345.673290] tipc_nl_compat_doit+0x3aa/0xaf0 [ 345.677723] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.683002] tipc_nl_compat_recv+0x1ae7/0x2750 [ 345.683121] protocol 88fb is buggy, dev hsr_slave_0 [ 345.687676] ? tipc_nl_bearer_disable+0xb0/0xb0 [ 345.693229] protocol 88fb is buggy, dev hsr_slave_1 [ 345.697383] ? tipc_nl_compat_dumpit+0x820/0x820 [ 345.707143] ? tipc_netlink_compat_stop+0x40/0x40 [ 345.712017] genl_rcv_msg+0x185f/0x1a60 [ 345.716101] netlink_rcv_skb+0x431/0x620 [ 345.720182] ? genl_unbind+0x390/0x390 [ 345.724122] genl_rcv+0x63/0x80 [ 345.727436] netlink_unicast+0xf3e/0x1020 [ 345.731631] netlink_sendmsg+0x127f/0x1300 [ 345.735947] ___sys_sendmsg+0xdb9/0x11b0 [ 345.740049] ? netlink_getsockopt+0x1460/0x1460 [ 345.744789] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.750010] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 345.755399] ? __fget_light+0x6e1/0x750 [ 345.759424] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.764642] __se_sys_sendmsg+0x305/0x460 [ 345.768848] __x64_sys_sendmsg+0x4a/0x70 [ 345.772924] do_syscall_64+0xbc/0xf0 [ 345.776670] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 345.781940] RIP: 0033:0x457f29 [ 345.785151] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.804073] RSP: 002b:00007fafca1c8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.811803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 345.819083] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 345.826357] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 345.833634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fafca1c96d4 [ 345.840920] R13: 00000000004c5561 R14: 00000000004d9408 R15: 00000000ffffffff [ 345.848227] [ 345.849860] Uninit was created at: [ 345.853416] kmsan_internal_poison_shadow+0x92/0x150 [ 345.858528] kmsan_kmalloc+0xa6/0x130 [ 345.862448] kmsan_slab_alloc+0xe/0x10 [ 345.866342] __kmalloc_node_track_caller+0xe9e/0xff0 [ 345.871459] __alloc_skb+0x309/0xa20 [ 345.875185] netlink_sendmsg+0xb82/0x1300 [ 345.879336] ___sys_sendmsg+0xdb9/0x11b0 [ 345.883437] __se_sys_sendmsg+0x305/0x460 [ 345.887588] __x64_sys_sendmsg+0x4a/0x70 [ 345.891647] do_syscall_64+0xbc/0xf0 [ 345.895381] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 345.900586] ================================================================== [ 345.907951] Disabling lock debugging due to kernel taint [ 345.913418] Kernel panic - not syncing: panic_on_warn set ... [ 345.919309] CPU: 1 PID: 11944 Comm: syz-executor.5 Tainted: G B 5.0.0+ #11 [ 345.927618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.936970] Call Trace: [ 345.939578] dump_stack+0x173/0x1d0 [ 345.943254] panic+0x3d1/0xb01 [ 345.946520] kmsan_report+0x293/0x2a0 [ 345.950347] __msan_warning+0x82/0xf0 [ 345.954171] memchr+0xce/0x110 [ 345.957400] tipc_nl_compat_bearer_enable+0x2c4/0x910 [ 345.962623] ? tipc_nl_compat_dumpit+0x820/0x820 [ 345.967389] tipc_nl_compat_doit+0x3aa/0xaf0 [ 345.971804] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 345.977040] tipc_nl_compat_recv+0x1ae7/0x2750 [ 345.983057] ? tipc_nl_bearer_disable+0xb0/0xb0 [ 345.987730] ? tipc_nl_compat_dumpit+0x820/0x820 [ 345.992491] ? tipc_netlink_compat_stop+0x40/0x40 [ 345.997338] genl_rcv_msg+0x185f/0x1a60 [ 346.001397] netlink_rcv_skb+0x431/0x620 [ 346.005469] ? genl_unbind+0x390/0x390 [ 346.009398] genl_rcv+0x63/0x80 [ 346.012706] netlink_unicast+0xf3e/0x1020 [ 346.016892] netlink_sendmsg+0x127f/0x1300 [ 346.021167] ___sys_sendmsg+0xdb9/0x11b0 [ 346.025261] ? netlink_getsockopt+0x1460/0x1460 [ 346.029952] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 346.035149] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 346.040531] ? __fget_light+0x6e1/0x750 [ 346.044539] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 346.049744] __se_sys_sendmsg+0x305/0x460 [ 346.053955] __x64_sys_sendmsg+0x4a/0x70 [ 346.058036] do_syscall_64+0xbc/0xf0 [ 346.061781] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 346.066988] RIP: 0033:0x457f29 [ 346.070184] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.089559] RSP: 002b:00007fafca1c8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.097272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 346.104568] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 346.111859] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 346.119124] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fafca1c96d4 [ 346.126390] R13: 00000000004c5561 R14: 00000000004d9408 R15: 00000000ffffffff [ 346.134434] Kernel Offset: disabled [ 346.138061] Rebooting in 86400 seconds..