[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.647633] audit: type=1800 audit(1541783964.707:25): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.667043] audit: type=1800 audit(1541783964.707:26): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.686743] audit: type=1800 audit(1541783964.727:27): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.4' (ECDSA) to the list of known hosts. 2018/11/09 17:19:38 fuzzer started 2018/11/09 17:19:43 dialing manager at 10.128.0.26:38493 2018/11/09 17:19:43 syscalls: 1 2018/11/09 17:19:43 code coverage: enabled 2018/11/09 17:19:43 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/09 17:19:43 setuid sandbox: enabled 2018/11/09 17:19:43 namespace sandbox: enabled 2018/11/09 17:19:43 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/09 17:19:43 fault injection: enabled 2018/11/09 17:19:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/09 17:19:43 net packed injection: enabled 2018/11/09 17:19:43 net device setup: enabled 17:22:18 executing program 0: r0 = memfd_create(&(0x7f0000000580)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x6) fallocate(r0, 0x0, 0x0, 0xeb96) syzkaller login: [ 228.728326] IPVS: ftp: loaded support on port[0] = 21 [ 230.902864] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.909499] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.918201] device bridge_slave_0 entered promiscuous mode [ 231.049482] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.056111] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.065041] device bridge_slave_1 entered promiscuous mode [ 231.192480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.319576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 231.711191] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 231.844137] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:22:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x400) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000109, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x101, 0x8, 0x20, 0x7, 0x1, 0x7, 0x8, {0x0, @in6={{0xa, 0x0, 0x4, @ipv4}}, 0x3, 0x2, 0x2, 0x1, 0x8}}, &(0x7f0000000280)=0xb0) lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x6}, &(0x7f0000000300)=0x8) [ 232.675830] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.684012] team0: Port device team_slave_0 added [ 232.707197] IPVS: ftp: loaded support on port[0] = 21 [ 232.909041] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.917162] team0: Port device team_slave_1 added [ 233.158673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.324091] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.331192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.340222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.471751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.479714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.488854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.755075] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.762748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.771993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.989333] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.995913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.002999] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.009626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.018396] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 236.083498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.230481] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.237138] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.245987] device bridge_slave_0 entered promiscuous mode [ 236.429263] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.435982] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.444557] device bridge_slave_1 entered promiscuous mode [ 236.671091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 236.885608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.528207] bond0: Enslaving bond_slave_0 as an active interface with an up link 17:22:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x400) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000109, 0x4) lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000300)=0x8) [ 237.827241] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.114740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 238.124407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.396653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.404016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.445169] IPVS: ftp: loaded support on port[0] = 21 [ 239.309683] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.317851] team0: Port device team_slave_0 added [ 239.517114] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.525182] team0: Port device team_slave_1 added [ 239.814005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 239.821141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.829903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.081611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 240.088907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.097692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.387651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.395591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.404519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.687507] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.695257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.704400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.565143] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.571631] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.580315] device bridge_slave_0 entered promiscuous mode [ 242.856664] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.863415] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.871831] device bridge_slave_1 entered promiscuous mode [ 243.140666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 243.417294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 243.888417] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.894983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.901886] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.908519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.917046] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 244.163066] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.424421] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.567445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.724362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 244.731502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.907624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 244.914896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.661190] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 245.669482] team0: Port device team_slave_0 added 17:22:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000500)={'syz_tun\x00', 0xa4}) sendmmsg$unix(r1, &(0x7f0000000b80), 0x49249f8, 0xc007002000000000) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001080)=[{{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/234, 0xea}], 0x1, &(0x7f0000000680)=""/31, 0x1f}}], 0x1, 0x0, &(0x7f0000000b40)) [ 246.015776] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 246.023994] team0: Port device team_slave_1 added [ 246.344981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 246.352360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.361282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.617481] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 246.624742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.633553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.789664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.904868] IPVS: ftp: loaded support on port[0] = 21 [ 246.920055] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 246.927821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.936856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.281276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 247.289024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.298301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.230678] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.308851] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.315390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.323483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.508310] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.123273] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.129810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.137400] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.143944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.152731] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 251.843712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.408898] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.415591] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.424140] device bridge_slave_0 entered promiscuous mode [ 252.767361] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.773997] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.782352] device bridge_slave_1 entered promiscuous mode [ 253.095998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 253.387583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 254.365149] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 254.690130] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 255.044287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 255.051538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.300089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 255.307363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 17:22:46 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) [ 256.311996] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 256.320199] team0: Port device team_slave_0 added [ 256.428705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.766505] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 256.774673] team0: Port device team_slave_1 added [ 257.209894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 257.217146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.226062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.526647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 257.533958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.542788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.618669] IPVS: ftp: loaded support on port[0] = 21 [ 257.884970] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 257.908956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 257.916837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.926268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.396520] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.404668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.413645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 17:22:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000740)) 17:22:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r1, 0x5460, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x0, 0x0, &(0x7f0000000180)) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0xd67ce2a7b612dd78) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000140)=0x10) [ 259.316206] syz-executor0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 259.461136] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.467852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.476031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 17:22:49 executing program 0: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x6280) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x5, 0xfffffffffffff4f4, 0x1000, 0x14, r0}, 0x2c) 17:22:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0xdb, &(0x7f0000000100)=0xffff, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x0, 0x0, @dev, @local, {[], @dccp={{0x0, 0x2904, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 17:22:50 executing program 0: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8600, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x8, 0x6, 0x1, "d48962b2f5aecee1aedf0d46061515ac6ead9ccad6cf5c03ab0feadf40b0c0cb"}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000003840)=@nl=@unspec={0x40000000, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7a8a295b90bf9cc85a2b1496c0c48830103080a2f858ad2c4aa412d", 0x48}], 0x1}, 0x0) 17:22:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x3, 0x0, [], 0x1ff}]}}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) [ 261.057467] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 261.085176] 8021q: adding VLAN 0 to HW filter on device team0 17:22:51 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000a00), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000180)="d971933344cdf4d365407f419bcc3aea433545d6", 0x23c, 0x0, &(0x7f0000000200)={0x2, 0xfffffffffffffffd, @remote}, 0xb1d7efc2d85dd25e) 17:22:52 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)="6da7daf3617b75d29d8cde3bbfd55dba737c617400d323189041e8c5b188a1696b1651a91000baeec6eb55a7085bb009c98369656b663e5ed700fb31f5fc7c9f8f31c248cdd7b1a418971355021639a2190169bccf970f8652faa758b6d0fd0d586e7206d6fa877fe34321fc2feffb8a1ea6e98ad3684f11f75fd53d3479be700ec39cc46e9fecc0359d6af092e9eaf8fa6af3326295c8eb0c4dad6a2810dba408f3de7b8d6cb1b39bc1f20869826827fc472830dbcdcebe158600000000000000") getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x7f, 0x4, 0x8}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r2, 0xc7, "a78eec93502d07e9b16559518ca42041abeb44107a9d193e88215808e97a523afb5043d520aaeac5d8076a402be75eb6cd8891c3e3b42a0b28603adc2238f4989df97e8f1dfc43377e3a5220c6868e91f313c82658f598c39079c7ca3be2b135fa268610f3298519d9e0c65ee6f53912309b5e063d958ccaf92f466b78740667e25cc7d35a10313d1551ec9c5ca69af75b706db8873c0111dfa6619adacedbd1c6d6393a9c4160544c241a99942e00e25315048e609514bfebe794f8cb65559ee35f5d7b21ccb7"}, &(0x7f0000000280)=0xcf) exit(0x0) sendfile(r0, r1, &(0x7f0000000100), 0x2007ff) [ 262.203399] capability: warning: `syz-executor0' uses deprecated v2 capabilities in a way that may be insecure [ 263.038946] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.045522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.052520] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.059118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.067628] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 263.314008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.163457] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.169941] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.178763] device bridge_slave_0 entered promiscuous mode [ 264.585481] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.591969] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.600495] device bridge_slave_1 entered promiscuous mode [ 264.959658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 265.312353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 265.948975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.185258] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 266.530637] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 266.944916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 266.952040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.081061] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 267.277690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.287026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.166047] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 268.174354] team0: Port device team_slave_0 added [ 268.356291] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 268.362727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.370862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.470507] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 268.478654] team0: Port device team_slave_1 added [ 268.670031] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 268.677246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.685987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.907666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 268.914962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.923916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 17:22:59 executing program 1: r0 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)) [ 269.186041] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 269.193843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.202565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.460611] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 269.468435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.477551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.517561] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.664888] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.671372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.678450] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.685030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.693585] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 271.700261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.731796] 8021q: adding VLAN 0 to HW filter on device bond0 17:23:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x1, 0x0, 0x10000101) [ 274.523365] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 275.055255] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 275.061671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.069724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.558893] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.021800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.496457] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 278.997771] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 279.004441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.012392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.562131] 8021q: adding VLAN 0 to HW filter on device team0 17:23:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') 17:23:17 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=@raw, &(0x7f0000000080)="288922320bcca3", 0xfb, 0x1000, &(0x7f0000001240)=""/4096}, 0x48) r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x9e, 0x9, "2871c8c900da1ec0554e737881107907f952f914c4c39cec29318751737c16c1d8647decc1eb030afefec4c2abb95e239e8ec7a1f4279eb8af281d46bacfdc938b6455370be41cf7ecdda9f99622f2f17940351567ab3cf59d9aef87626e9331f7d72c97dd806ad38de00ab41087fd30d53c7c8120c2c295c232ac927cda017038c35db826cad899ff1bf907ac3e0cb82b4957f673da"}, &(0x7f0000000200), 0x400) 17:23:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) r1 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0xffffffff, 0x4, 0x583, 0x4b, 0xffff, r1}) r2 = accept$alg(r0, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f00000010c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/4096, 0x1000, 0x7, 0x3ff, 0x6, 0x1}, 0x120) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001200)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001280), &(0x7f00000012c0)=0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001300)=@sack_info={0x0, 0x7f, 0x1f}, &(0x7f0000001340)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001380)={r3}, 0x8) prctl$setmm(0x23, 0x7, &(0x7f0000ffc000/0x3000)=nil) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000013c0)={0xf, @pix={0x3, 0xfffffffffffffffb, 0x34324948, 0x1, 0x2, 0x10001, 0xd, 0x1ff, 0x1, 0x0, 0x2, 0x6}}) modify_ldt$read_default(0x2, &(0x7f00000014c0)=""/249, 0xf9) r4 = semget(0x2, 0x3, 0x1) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f00000015c0)=""/195) sendmsg$alg(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000016c0)="4b71002684b317feaab4835c20cd9beda89fd7", 0x13}, {&(0x7f0000001700)="722887def880fe5f7b6e8dcd2ba36b60311f74a463bc3f8d9237f78c475bbb721f64a86b63ebf33a079b8c9c19547eb7c41c22ac044b2b01ba74956fe1ae1a94232c2a43fcfcc3619a3782b879048881592aa01691e208b9145c2a558b42708583b173d0009ecf30facd9414840b6bf23fe18736663e0600d92a739a2054e726ab8e5702e154747083a05f06e099512950d67a80d3d1ac954f6eb002105d0ad40d79c66ffaf1d9f993f3cd8b984289d9daa3b1f9276859cfd34de59839f470de8912a2b94242930b5159a89f22b2d6a84fc99bf9444d4f793df099590f481679c7818299ee234590d80b50f5", 0xec}, {&(0x7f0000001800)="8b2743df8aa860e366a516013eb80e9305b38a46cf7ec7c336c12df26e54d5e7309b8e8cfa89ada96e792344abac069a0e21e4802a62a1a416783d6af975fa063ec17a63afa144bc163584c1e72379de0c4730370c986c85c4c7747db5619f45137c1fb229952f", 0x67}, {&(0x7f0000001880)="a75ad75a70f5d50929d0183bfd5835cda288f24d86c70113c81a6e39df12377ce93c4d42ca08c286bf41c1a66ce1722716da2df319d8f69c1a5464422c94b3ee7f6213a51364585cf04b44e542782fd79c41db0319eff0bd52b3ab3c4d8e01f826d24c06263cf0965f1a533bcee1e4d98d683b5dd97fb837df7906108f8663b81bbfee74b37f5e97127cec02402ec852b18d64267d9e3dc3da6a78b1d93b2a61a3fd6b5f142b6155c1f0db95d6585030fdcb4028b3449e", 0xb7}, {&(0x7f0000001940)="285900336235b9c0c2ac0acff2a731fe28895f325c3904f5f65b5270b35150973ce09e370f84140001e6fca5521e302ed0987923a62a80f6c20ea82df50bf2e5bb69b83920b17013547f588cb73b03fd", 0x50}, {&(0x7f00000019c0)="8ff8364474857bc6d127f47dce34d57b8beb6dc52fcf4d08f8e766bc347d5a2d1a1ad2098656a2c082ccdfa86b450cd26d9ce7bc85bbdb0daefc22c75e5061058e2eeb7037db172e94bd82fc07dc26edfb8c8c02f1cc1d749e73a13022b3490c7e89ce8c3a565771197bd11d95809241cfba0f4d27888f44ff2a478fe25a5a840009031721a088c6ddcf35119350beafd67e3703", 0x94}, {&(0x7f0000001a80)="3051abb78a4964698bd3ce1e2f2e96ade8ed050506bb1844efa52c9e159505349992ceb0f101926bec0b85bcdd58e27582b21ebc422a4276d8d9704dd35e043e72cb3735d3e9865f252e101ad50900854e87cc95fdbad6307bdfc9bd2bbfafd0a1ade17f51c263832deffb4da4df682a66882846c7fe86585302081b7bf0218b15d4f20c75a830d579920328d8bea4ca5347ba61c96bd6c21644509f94f1aacf80cdc9fc16b403b2929635106472e75b20212a1bd5f0f380decd45d54648924c0d", 0xc1}], 0x7, &(0x7f0000001c00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}, 0x20000801) ioctl$KDMKTONE(r0, 0x4b30, 0x81) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000001c80)=0x5, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001cc0)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001d00)={0x1, 0x6, 0x7f, 0xd9, 0x7a9}, 0x14) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000001e00)={0x1f, 0xa0, &(0x7f0000001d40)="7ccccd96f4e14a31382f2d83a5a12b21db378481ddb08e119f4c9b5f9a5090b318406815b1b0dd8d86d950ad88cc10c6896be8621540fc28d07a1b63b68f24b50d678b72fa582f5944f087e68bb03c0d10714c73fbc92543a3b188cf0d89171829daa5a16fa565ea8f99034fe6bd6ed09556ff52fd76d8bce2d21ebcebb248a624b9f13fe7d85c2e19809a870fd6048a4acbc3581d34f91bb586eabf646b908d"}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001e40)=""/138) r5 = fcntl$dupfd(r2, 0x0, r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001f00)={r3, 0x3, 0x4}, &(0x7f0000001f40)=0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) io_setup(0x7, &(0x7f0000002000)=0x0) io_pgetevents(r7, 0xe8, 0x8, &(0x7f0000002040)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002140), &(0x7f00000021c0)={&(0x7f0000002180)={0x100}, 0x8}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000002200)={r3, 0x8}, &(0x7f0000002240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000002280)={r6, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) r8 = geteuid() lstat(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002400)={0xa0, 0x0, 0x5, {{0x5, 0x3, 0x200, 0x6, 0x45e, 0x10000, {0x1, 0x40, 0xffffffffffffb57d, 0x81, 0x9c39, 0x6, 0x3, 0x9, 0x2, 0x5, 0x1, r8, r9, 0xfff}}, {0x0, 0x1}}}, 0xa0) 17:23:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) 17:23:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r1, 0x9) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0xbf99) 17:23:17 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) 17:23:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="006340400000000000000000e0a94f43078936d0940e314a35"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000000)={'dummy0\x00'}) 17:23:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) 17:23:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 17:23:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea9b, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000806, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r0) 17:23:18 executing program 3: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'ip_vti0\x00', {0x2, 0x4e24}}) syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0xfff, 0x600000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x202200) keyctl$join(0x1, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) userfaultfd(0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0)) msgsnd(0x0, &(0x7f0000e74f60)={0x2}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) [ 288.038942] binder: 7691 RLIMIT_NICE not set [ 288.108902] binder_alloc: binder_alloc_mmap_handler: 7689 20001000-20004000 already mapped failed -16 [ 288.166177] binder: BINDER_SET_CONTEXT_MGR already set [ 288.171720] binder: 7689:7691 ioctl 40046207 0 returned -16 [ 288.193246] hrtimer: interrupt took 100561 ns 17:23:18 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x80045505, &(0x7f0000000140)={0x1, {0x2, 0x0, @dev, [0x0, 0x0, 0x4000000000000000]}, {}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip6gre0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @mcast2, 0xff}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x2}, 0xffffffffffffffff, 0x1}}, 0x48) [ 288.288912] binder_alloc: 7689: binder_alloc_buf, no vma [ 288.295372] binder: 7689:7709 transaction failed 29189/-3, size 0-0 line 2970 [ 288.309052] binder: undelivered TRANSACTION_COMPLETE [ 288.318872] binder: undelivered TRANSACTION_ERROR: 29189 17:23:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) write(r2, &(0x7f0000000240), 0xfc5e) write(r2, &(0x7f00000001c0), 0xe) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) tkill(r1, 0x1000000000016) [ 288.448484] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor2' sets config #1 [ 288.460971] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor2' sets config #1 17:23:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000240)=""/22) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') fcntl$lock(r0, 0x27, &(0x7f0000000180)={0x2, 0x7, 0x5, 0x5}) [ 289.068639] IPVS: ftp: loaded support on port[0] = 21 [ 290.570756] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.577267] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.585312] device bridge_slave_0 entered promiscuous mode [ 290.661711] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.668404] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.676429] device bridge_slave_1 entered promiscuous mode [ 290.753805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 290.829658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 291.128658] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 291.233772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 291.315036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 291.322067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.397033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 291.404229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.641276] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 291.648988] team0: Port device team_slave_0 added [ 291.725392] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 291.733013] team0: Port device team_slave_1 added [ 291.807735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.887519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.964902] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 291.972212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.981284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.057621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 292.065438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.074226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.924680] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.931103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.938069] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.944625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.952301] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 293.303625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.042771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.326007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 296.611578] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 296.617978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.626017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.914389] 8021q: adding VLAN 0 to HW filter on device team0 17:23:28 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x20000) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000380)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000004c0)="5d71f27e79ae18a9307d3ad987bde5f943e8ad91f720cfe21e05ed8b721e0ef4c45a65b156b13090e4e14239017021314f912f2b3015486cda955f5a3122ea923ca8d9a814a3a856c40199034a818c08e0ffabccebf4833b5d8ef14652d5036a99b4739144a86ad9dd49d944855696e16418860989b336e75e7ec57cfe4c1d4133138141764b0803495363c723da79eb5589650b51a885db7b430abbadafb126e512e742e2a64e610b96995b2cc2baa14ef6f7be6e0c227a41eced186639c0f680a42f5dbd22b788e7069f27d5327bb16079780164da906093", 0xd9) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x0, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x1c) flock(r0, 0x2) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) r4 = add_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f0000000200)={'syz'}, &(0x7f00000005c0)="b077cb401e2fbb81aad731f8a4d4d1e039c19ba25c58a59766e58d8c31d1dc9119657cb30adc3fb2b8591776154fd484393798ea3711214c072123aecb1b6f13352db523b00d4439a23f727e0892b30cc84d0855134add65db95e89123139ab54670bce77130acce6d9eb419083ca3bfa83ca5e71612534ee959d239e886fc23193dc3b52c266a1b", 0x88, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r5) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x4, 0x1f) poll(&(0x7f00000000c0)=[{}], 0x1, 0x9) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, r7, {0xffff, 0xfffb}, {0x4, 0x7}, {0xfff2, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 17:23:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="006340400000000000000000e0a94f43078936d0940e314a35"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000000)={'dummy0\x00'}) 17:23:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 17:23:28 executing program 3: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'ip_vti0\x00', {0x2, 0x4e24}}) syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0xfff, 0x600000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x202200) keyctl$join(0x1, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) userfaultfd(0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0)) msgsnd(0x0, &(0x7f0000e74f60)={0x2}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) 17:23:28 executing program 0: r0 = socket(0x848000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2713, &(0x7f0000af0fe7)=""/13, &(0x7f0000000080)=0x100) 17:23:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) write(r2, &(0x7f0000000240), 0xfc5e) write(r2, &(0x7f00000001c0), 0xe) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) tkill(r1, 0x1000000000016) [ 298.985155] binder: 8002 RLIMIT_NICE not set 17:23:29 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001880)=""/129, 0x81}], 0x2}}], 0x1, 0x0, &(0x7f0000001e80)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x397, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) [ 299.213575] binder: undelivered TRANSACTION_COMPLETE 17:23:29 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = gettid() recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x1, 0xe, &(0x7f0000000040)={0x77359400}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000013) 17:23:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f00000000c0)=[{}, {}]}, 0x78) sendfile(r0, r0, &(0x7f0000000140), 0x2000005) 17:23:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) getdents(r0, &(0x7f00000000c0)=""/118, 0x76) 17:23:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000003640)=""/126) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 17:23:29 executing program 3: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x14103e, 0x0) read(r0, &(0x7f0000000140)=""/201, 0xc9) 17:23:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={0x77359400}) semctl$IPC_RMID(0x0, 0x0, 0x10) 17:23:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r2, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x2b283714574a214d}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x6}) 17:23:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="006340400000000000000000e0a94f43078936d0940e314a35"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 17:23:30 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'gre0\x00'}, 0x18) [ 300.466193] binder: 8050 RLIMIT_NICE not set [ 300.523978] binder_alloc: binder_alloc_mmap_handler: 8047 20001000-20004000 already mapped failed -16 [ 300.562707] binder: BINDER_SET_CONTEXT_MGR already set [ 300.568681] binder: 8047:8050 ioctl 40046207 0 returned -16 17:23:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 17:23:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000000)) [ 300.613654] binder_alloc: 8047: binder_alloc_buf, no vma [ 300.619271] binder: 8047:8060 transaction failed 29189/-3, size 0-0 line 2970 17:23:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) write(r0, &(0x7f0000000340)='\x00', 0x1) [ 300.692585] binder: 8057 RLIMIT_NICE not set [ 300.704647] binder: undelivered TRANSACTION_COMPLETE [ 300.711580] binder: undelivered TRANSACTION_ERROR: 29189 17:23:30 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$sock_inet_SIOCRTMSG(r0, 0xc0185500, &(0x7f0000000140)={0x1, {0x2, 0x0, @dev, [0x0, 0x0, 0x4000000000000000]}, {}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip6gre0\x00'}) 17:23:31 executing program 1: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) 17:23:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1c) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x4) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="b740dbad79bbe9af88a5d7852523d73c165e8ad8fffffff7e9ff00000000279d7e0716726273c6c9957c143b0ce81583f406e52194c7fe13c48be2b3f77641a27c422796240077fafc927213359aa5a2f4a64656e6063bb120c8c6a4fc7d142fa630c37ef7e74c72861021497bfb054e638bece56301737d0daf"]) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xa59) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1000}, &(0x7f0000000140)=0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x80045505, &(0x7f0000000140)={0x1, {0x2, 0x0, @dev, [0x0, 0x0, 0x4000000000000000]}, {}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip6gre0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @mcast2, 0xff}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x2}, 0xffffffffffffffff, 0x1}}, 0x48) [ 300.986353] usb usb3: usbfs: process 8074 (syz-executor5) did not claim interface 0 before use 17:23:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) write(r0, &(0x7f0000000340)='\x00', 0x1) 17:23:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x18}], 0x10000000000000cd) 17:23:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) memfd_create(&(0x7f0000000240)='threaded\x00', 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x2) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) syncfs(0xffffffffffffffff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f0000000000)='./bus\x00'}, 0x10) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000074b7000062c7"]) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[]}}, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) write$binfmt_elf32(r1, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x38, 0x2e, 0x0, 0x8, 0x20, 0x0, 0x0, 0x9}, [{0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x62d}], "", [[], []]}, 0x258) 17:23:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='2', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) [ 301.359256] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor0' sets config #1 17:23:31 executing program 5: nanosleep(&(0x7f0000000140), &(0x7f0000000080)) 17:23:31 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1004000000016) [ 301.596650] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor0' sets config #1 [ 301.640991] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:23:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) 17:23:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fea000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 17:23:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fea000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 17:23:32 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000140)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000002c0)=r1) dup2(r1, r0) 17:23:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10013c93e) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 17:23:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_delete(0x0) sendto$inet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) 17:23:32 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$sock_inet_SIOCRTMSG(r0, 0x80045505, &(0x7f0000000140)={0x1, {0x10, 0x0, @dev, [0x0, 0x0, 0x4000000000000000]}, {}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip6gre0\x00'}) [ 302.579448] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor2' sets config #1 17:23:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x18}], 0x10000000000000cd) 17:23:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000003740)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'team_slave_0\x00\x00\x00`'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) 17:23:32 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sysfs$3(0x3) 17:23:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000200)=0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1c) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="b740dbad79bbe9af88a5d7852523d73c165e8ad8fffffff7e9ff00000000279d7e0716726273c6c9957c143b0ce81583f406e52194c7fe13c48be2b3f77641a27c422796240077fafc927213359aa5a2f4a64656e6063bb120c8c6a4fc7d142fa630c37ef7e74c72861021497bfb054e638bece56301737d0daf"]) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xa59) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1000}, &(0x7f0000000140)=0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x80045505, &(0x7f0000000140)={0x0, {0x2, 0x0, @dev, [0x0, 0x0, 0x4000000000000000]}, {}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip6gre0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @mcast2, 0xff}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x2}}}, 0x48) 17:23:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 17:23:33 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000700)=""/144) 17:23:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x5, 0x2}) 17:23:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000003740)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'team_slave_0\x00\x00\x00`'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) 17:23:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r1, r0, &(0x7f0000000080), 0x10013c93e) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 17:23:33 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x176}}, 0x0) memfd_create(&(0x7f00000001c0)='cgroup.stat\x00', 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000340)) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000e40)={0xa0, 0xffffffffffffffff, 0x0, {{0x6, 0x2, 0x0, 0x0, 0x6, 0x5, {0x6, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x80000001}}}}, 0xa0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @multicast1, @remote}, &(0x7f0000000580)=0xff9f) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x0, 0x8, 0x0, 0x149, 0x0, 0x37e}, "", [[], [], []]}, 0x320) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@ipv4={[], [], @loopback}, r2}, 0x14) socket$inet6(0xa, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000001480)={0x20}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[]}}, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x40000a9, 0x0) 17:23:33 executing program 3: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+30000000}, 0x0) 17:23:33 executing program 0: move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000ffc000/0x3000)=nil], &(0x7f00000003c0), &(0x7f0000000180), 0x0) 17:23:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x45, 0x0, &(0x7f0000000480)="82c7a62d76bfb490b3457dbd5484911f099f319682ae6bccb198d22a8d33c18971d8d11a0f73b6aff3e85cfd8f6a96a3a9af76d1ecd19a3c0d092d493614ea7e9308baf871"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, &(0x7f00000007c0)}) 17:23:34 executing program 2: clone(0x3103001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x0, 0x0, 0x0, 0xd4}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x40}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)) ptrace$cont(0x1f, r0, 0x0, 0x0) 17:23:34 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='threaded\x00', 0x9) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) [ 304.145314] ptrace attach of "/root/syz-executor2"[8201] was attempted by "/root/syz-executor2"[8202] 17:23:34 executing program 2: quotactl(0x0, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)) [ 304.258436] binder: 8204 RLIMIT_NICE not set [ 304.349338] binder: 8204 RLIMIT_NICE not set [ 304.462813] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:23:34 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x49e, 0x0, 0x9, 0x17, 0x10, "7490f1baca9e39a190e2818e38ce565e561ad14fa38ab9f95f9957f50d4e77200e57e6de784179f60a95e641317f3b218d38be3f4e788b0d59420ec51623163d", "f5049728d2182270633850299e8e8b8c86d7b98bcaf34967d2a02dbcb7ff5b9be19558b9ea9bb610b95a2fdc641a35f44dc4f932008ca0c4c82df9e89cf51453", "19fec054c3af892ffe88025af43a9ce85f2abf251ec18b43c73e01f6bfb1e76b", [0x8, 0x5]}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000480)=0x4) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x5}}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000400)=0x2) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) 17:23:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x7a2, {{0x2, 0x0, @multicast1}}}, 0x84) 17:23:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semtimedop(0x0, &(0x7f0000000040)=[{}, {}], 0x2, &(0x7f00000000c0)={0x77359400}) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 305.020831] binder_alloc: binder_alloc_mmap_handler: 8203 20001000-20004000 already mapped failed -16 17:23:35 executing program 4: inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x49e, 0x0, 0x9, 0x17, 0x10, "7490f1baca9e39a190e2818e38ce565e561ad14fa38ab9f95f9957f50d4e77200e57e6de784179f60a95e641317f3b218d38be3f4e788b0d59420ec51623163d", "f5049728d2182270633850299e8e8b8c86d7b98bcaf34967d2a02dbcb7ff5b9be19558b9ea9bb610b95a2fdc641a35f44dc4f932008ca0c4c82df9e89cf51453", "19fec054c3af892ffe88025af43a9ce85f2abf251ec18b43c73e01f6bfb1e76b", [0x8, 0x5]}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000480)=0x4) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000400)=0x2) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) [ 305.101910] binder: 8212 RLIMIT_NICE not set 17:23:35 executing program 2: [ 305.144489] binder: BINDER_SET_CONTEXT_MGR already set [ 305.149976] binder: 8203:8212 ioctl 40046207 0 returned -16 [ 305.149990] binder_alloc: 8203: binder_alloc_buf, no vma [ 305.150056] binder: 8203:8233 transaction failed 29189/-3, size 24-8 line 2970 [ 305.270096] binder: 8203:8240 BC_INCREFS_DONE u0000000000000000 no match [ 305.330845] binder: 8203:8204 BC_ACQUIRE_DONE u0000000000000000 no match [ 305.355771] binder: release 8203:8209 transaction 10 out, still active [ 305.363679] binder: 8203:8241 Release 1 refcount change on invalid ref 1 ret -22 [ 305.367774] binder: send failed reply for transaction 10, target dead 17:23:35 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280), 0x1000) 17:23:35 executing program 3: 17:23:35 executing program 4: 17:23:35 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='threaded\x00', 0x9) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 17:23:35 executing program 1: 17:23:35 executing program 2: 17:23:36 executing program 2: 17:23:36 executing program 1: 17:23:36 executing program 4: 17:23:36 executing program 3: 17:23:36 executing program 5: 17:23:36 executing program 4: 17:23:36 executing program 1: 17:23:36 executing program 2: 17:23:36 executing program 3: 17:23:37 executing program 0: 17:23:37 executing program 5: 17:23:37 executing program 4: 17:23:37 executing program 1: 17:23:37 executing program 3: 17:23:37 executing program 2: 17:23:37 executing program 1: 17:23:37 executing program 5: 17:23:37 executing program 4: 17:23:37 executing program 3: 17:23:37 executing program 0: 17:23:37 executing program 1: 17:23:37 executing program 5: 17:23:37 executing program 2: 17:23:37 executing program 4: 17:23:38 executing program 1: 17:23:38 executing program 5: 17:23:38 executing program 0: 17:23:38 executing program 3: 17:23:38 executing program 4: 17:23:38 executing program 2: 17:23:38 executing program 1: 17:23:38 executing program 0: 17:23:38 executing program 3: 17:23:38 executing program 4: 17:23:38 executing program 2: 17:23:38 executing program 5: 17:23:38 executing program 4: 17:23:38 executing program 3: 17:23:38 executing program 0: pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x7f}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) add_key(&(0x7f0000000280)='logon\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 17:23:39 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$sock_inet_SIOCRTMSG(r0, 0x80045505, &(0x7f0000000140)={0x1, {0x2, 0x0, @dev, [0x0, 0x0, 0x4000000000000000]}, {}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip6gre0\x00'}) 17:23:39 executing program 2: 17:23:39 executing program 1: [ 309.145146] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor5' sets config #1 17:23:39 executing program 4: 17:23:39 executing program 3: 17:23:39 executing program 2: 17:23:39 executing program 5: 17:23:39 executing program 1: 17:23:39 executing program 0: 17:23:39 executing program 3: 17:23:39 executing program 5: 17:23:39 executing program 4: 17:23:39 executing program 1: 17:23:39 executing program 2: 17:23:40 executing program 3: 17:23:40 executing program 0: 17:23:40 executing program 4: 17:23:40 executing program 1: 17:23:40 executing program 5: 17:23:40 executing program 2: 17:23:40 executing program 0: 17:23:40 executing program 3: 17:23:40 executing program 1: 17:23:40 executing program 4: 17:23:40 executing program 0: 17:23:40 executing program 3: 17:23:41 executing program 5: 17:23:41 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280), 0x10000030}}], 0x1, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0) 17:23:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) 17:23:41 executing program 2: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) 17:23:41 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='threaded\x00', 0x9) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x200007ff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000001240)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000900)={@mcast1, 0x0}, &(0x7f0000000940)=0x14) sendmsg$nl_route(r1, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@mpls_getnetconf={0x2c, 0x52, 0x820, 0x70bd2b, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480c4}, 0xc800) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r3, r6, &(0x7f0000d83ff8), 0x8000fffffffe) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="29de000003000400000000f700002000000000f00000000000000000c689040002800000000004000000627f1e298c234c7b6f35c2070f607c40758ac118000000004d643b38df67e526306e2ebcded0b19292e3a40bf9cb7dd37f7fdfe85f1cda817314f2829da17c09030000006a80d406c703a908"], 0x76) 17:23:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=@raw, &(0x7f0000000080)="288922320bcca3", 0xfb, 0x1000, &(0x7f0000001240)=""/4096}, 0x48) r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x9e, 0x9, "2871c8c900da1ec0554e737881107907f952f914c4c39cec29318751737c16c1d8647decc1eb030afefec4c2abb95e239e8ec7a1f4279eb8af281d46bacfdc938b6455370be41cf7ecdda9f99622f2f17940351567ab3cf59d9aef87626e9331f7d72c97dd806ad38de00ab41087fd30d53c7c8120c2c295c232ac927cda017038c35db826cad899ff1bf907ac3e0cb82b4957f673da"}, &(0x7f0000000200), 0x400) 17:23:41 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xff, 0x4fe6, 0x7f, 0xff4, 0x6, 0x40, 0x4, 0x9, 0xfff, 0x9, 0x229, 0x1}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000300)=""/191) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 17:23:41 executing program 1: r0 = syz_open_dev$video(&(0x7f00000006c0)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x5, 0x2, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r0, 0xc0405610, &(0x7f00000000c0)) 17:23:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:41 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x20000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000000c0)=""/91, &(0x7f0000000140)=0x5b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x20c00, 0x100) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000003c0)={0x768, 0x0, "b2984d254bffb3735a08a6c35f65b41ff0828d3f31a02d7320195372dce2fc76", 0x5, 0x8, 0xfff, 0x97, 0x180}) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044d76, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000180)=@ethtool_gstrings={0x1b, 0xd2e0, 0x67, "4276e7956c857f71a4bfb6aaddea8a9c2e6dd13abbf5b99004c4b815079a710f188de44f42bfc6fe36ceb6dfdaa71c329d5995e3dfc0a4c0c18a5038b9594fd02c9c25e8d4cf5e0bca9a04cda04492ff355dc5bd53b23b4400513caa4d2b80fa9a6d70d9c2cac7"}}) 17:23:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000000c0)='/procposix_acl_access}&\x00', 0xffffffffffffffff}, 0x30) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x20}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000002c0)={r3, 0x8, 0x80}, 0x8) r4 = syz_open_procfs(r1, &(0x7f00000004c0)="6d61705f66696c657300fae64997ae35e056cf22504e41431b2bbe560aea2d2a0d9b5aa85cfdbbc8af4bbbe9e8e948d97dd7ef390dacf3ba59d8361ebe408a58bf8fc6a1cb60b5fc6d4ca7c25cc756b65025bcd70d0eff52515defb3cbae32fdb50fa74b22707bd933c7d248baf01628033fb935442a29b34cba35a986be2641bfcaf3012b7cdf7c620c81185594b58835b3eb122ed9fa00") getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={r5, 0xa2bb, 0x8, 0x2, 0x7, 0x100}, 0x14) fchdir(r4) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 17:23:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x0, 0x0, @ioapic={0xf000, 0x1, 0x4, 0x5f, 0x0, [{0x7, 0x0, 0x7, [], 0x800}, {0xb42, 0x6, 0x8, [], 0x1ff}, {0x1, 0xac37, 0x9}, {0x9, 0x3, 0x1f, [], 0x5}, {0xc76, 0x8, 0x1}, {0xffffffff, 0x100000000, 0xfea, [], 0x200}, {0x7, 0x5, 0x4, [], 0x5}, {0x1, 0x4, 0x2, [], 0x1}, {0x1000, 0xad1c, 0x7fff, [], 0x9}, {0x5, 0x0, 0x1, [], 0x7}, {0xa82, 0x7, 0x81, [], 0x9}, {0x100000001, 0x100000000, 0xce, [], 0x1}, {0x1000, 0x6, 0x100, [], 0x800}, {0xffff, 0x3, 0x0, [], 0x2}, {0x2, 0x6e1, 0x6, [], 0x8}, {0x7, 0x8001, 0x7, [], 0x1}, {0x8, 0x1, 0x6, [], 0x9}, {0x20, 0x1f, 0x5, [], 0x101}, {0x1f, 0x5, 0x1, [], 0x9}, {0x3, 0x6, 0xfd, [], 0x7}, {0x4, 0x0, 0x1, [], 0x3a}, {0x13a8c465, 0x7, 0xa0, [], 0x3}, {0x9, 0x3, 0x9, [], 0xffff}, {0x0, 0x7f, 0xfffffffffffff9d4, [], 0x4}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x5000, 0x6, 0x1000, 0x8, 0x0, [{0xfff, 0x3, 0x100000000, [], 0x7}, {0x6, 0x18, 0x3f, [], 0x3}, {0x966, 0x1a, 0x8, [], 0x9}, {0x5, 0xfffffffffffffffe, 0x7, [], 0x64}, {0x1000, 0xffffffffffffffc0, 0xd5, [], 0x8}, {0x3, 0x40, 0x0, [], 0x167}, {0x6, 0xff, 0x7, [], 0x1000}, {0x58, 0x5, 0x7f, [], 0x9}, {0x2, 0x5, 0x0, [], 0x480000000}, {0x8, 0x7, 0x0, [], 0xfffffffffffffff8}, {0x9, 0xed4e, 0x1, [], 0x40}, {0x692, 0x1, 0x7fffffff, [], 0x7cd}, {0x0, 0x1b3, 0x7fffffff, [], 0x9}, {0x0, 0x8, 0x0, [], 0x9}, {0x4, 0x10000, 0x7f, [], 0x3ff}, {0x6, 0x2, 0x3a, [], 0x7fffffff}, {0x7, 0x2, 0x80000000, [], 0x6e9}, {0xdaae, 0x80000000, 0x1, [], 0x5}, {0xfff, 0x1, 0x7fffffff, [], 0x6}, {0x1, 0xfffffffffffff000, 0x2, [], 0xffffffffffffffc0}, {0x1, 0x1000, 0x80}, {0x844, 0x8, 0xa5, [], 0x7}, {0x1, 0xffffffff, 0xfe95, [], 0xc}, {0x0, 0x6, 0x0, [], 0x8}]}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, 0x84) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000440)) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x4, 0x7fff}) 17:23:42 executing program 2: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/228, 0xe4}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4788, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, &(0x7f0000000040)) r2 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x3) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)={'team0\x00', r5}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x154, r3, 0xa0d, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3d4b}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r5}, {0xbc, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x14eb}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3da2}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000c0}, 0x840) 17:23:42 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) ioctl$VT_DISALLOCATE(r0, 0x5608) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0), &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r2, 0x3, 0x0, 0x5) vmsplice(r0, &(0x7f0000000240), 0x100000000000000d, 0x0) 17:23:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:42 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) 17:23:42 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x420a, r0, 0x6, &(0x7f0000000000)) 17:23:42 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa703ff5da828c7c910001080006040001aaaaaaaaaa0000000000aaaaaaaaaaaa00000000ae71534d595c02b9239ec2b0b823ece7418e8fb703cb9ef68242"], &(0x7f0000000040)={0x0, 0x2}) r0 = memfd_create(&(0x7f0000000000)='selfvmnet0systembdevcgroup-\x00', 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000000c0)) 17:23:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f00000000c0)=0x1c, 0x80800) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/119, 0x77}], 0x1) llistxattr(&(0x7f0000001740)='./file0\x00', &(0x7f0000001640)=""/222, 0xde) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) 17:23:42 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) 17:23:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae6a, &(0x7f0000000580)={0x3, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) 17:23:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) 17:23:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x80044dfe, &(0x7f00000001c0)) 17:23:43 executing program 3: setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x6}, 0xb) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) sendfile(r0, r0, 0x0, 0x800) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x105000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x2, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000380)) read(r1, &(0x7f0000000240)=""/114, 0xfffffffffffffe5c) fchown(r0, 0x0, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x400, 0x200}]}, 0xc, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) 17:23:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:43 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x8, 0x10000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f00000001c0)={0xf65, 0x8}) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7946, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0x10) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000100)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000064}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="94000000", @ANYRES16=r6, @ANYBLOB="000b26bd7000fedbdf250f0000000800050000f80f00140003000800030001000000080007004e22000014000100080006006468000008000b0073697000080004000000000008000600160700003c00020008000600ffffffff08000700010000000800080040000000080009000100008008000900ffff000008000500070000000800080004000000"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)={0x8027, 0x91}) 17:23:43 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) inotify_init1(0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, &(0x7f0000000100), &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) prctl$getname(0x10, &(0x7f0000000400)=""/161) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) getresuid(&(0x7f0000000380), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000007c0)=0xe8) r9 = getuid() r10 = getuid() r11 = getegid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x2}, [{0x2, 0x0, r5}, {0x2, 0x3, r6}, {0x2, 0x4, r7}, {0x2, 0x6, r8}, {0x2, 0x3, r9}, {0x2, 0x7, r10}], {0x4, 0x3}, [{0x8, 0x7, r11}, {0x8, 0x7, r12}], {0x10, 0x3}, {0x20, 0x5}}, 0x64, 0x2) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:23:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) 17:23:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f00000000c0)=0x1c, 0x80800) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/119, 0x77}], 0x1) llistxattr(&(0x7f0000001740)='./file0\x00', &(0x7f0000001640)=""/222, 0xde) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) 17:23:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) socket$pptp(0x18, 0x1, 0x2) 17:23:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000040)="153f62344885d25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x8000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000100)=0x1) ioctl$sock_ifreq(r0, 0x8942, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_hwaddr}) 17:23:44 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000001, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000080)="bfee32156a8f042987ae1f1f1a1b47adddcaa7239b3481f49ac12619a7b3a5acc4c18d2a23256353732bb8fc59ea47b84f94bcb7333eb1ef39cbc77953177e4e5bf5643bc6e84a4150909f82442a5aa374d482d5e6e87962d4485c1b165ce244f4b2923a09ec970bdedfed707e9a474e695295d5739346825ae447d8b6ac0feb41e46096170e678fa8d3021cefe6096db5424bacd3d731c09be6df38fc4651d9dc1b4849abe58220a89195804f5463d5ce98184fb06944f87f0a86167619ba3c813c0140b50c8643d82811e1ed78a00562e2650000041deb8e", &(0x7f0000000180)=""/144}, 0x18) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x8000, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x100000, 0xa, 0x52, r1, 0x0) 17:23:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) r1 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5, 0x1, [0xc041]}, &(0x7f0000000040)=0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r2, 0xff}, &(0x7f0000000200)=0x8) shmdt(r1) 17:23:45 executing program 1: unshare(0x80000040001) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/118) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) openat$vsock(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vsock\x00', 0x2c0401, 0x0) 17:23:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r2, 0x4}) 17:23:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1fffffffffffd) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x2000000001}, 0x3d7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x400, 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80000, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x3, 0x856, 0x5}) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x80000001, 0x800) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f0000000080)="0a1009cf6cba50fad4c13ae27d5b43a2df579969c0086d648c4b031fd8f59ad051367c0e08c15d72543a0200000038c6fba30c6dfa13bc35fbe328eff129b0301b9d767eaa8a8ed2eef899a234c9fa9b9ba9d1efe3606d92c23a74229f9a248a1dd0692dbce57662d55e02bc1eee913045ba84dff9", 0xfffffffffffffd13) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x5}, 0x8) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x8) 17:23:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x401, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xe32e, 0x400000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x10001, 0x4f, &(0x7f0000000080)=""/79}]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x7, @vbi}}) 17:23:45 executing program 1: unshare(0x8000000) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x4, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x440, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r0, r1, 0xd, 0x2}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x90100, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00', 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) socket$can_bcm(0x1d, 0x2, 0x2) clone(0x1047ffd, &(0x7f0000597f1c), &(0x7f0000000280), &(0x7f00000001c0), &(0x7f0000000240)) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_delrule={0x20, 0x21, 0x200, 0x70bd29, 0x25dfdbfd, {0xa, 0x10, 0x14, 0x3, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 17:23:45 executing program 0: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000240)={'team_slave_1\x00', @ifru_addrs=@can}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) 17:23:46 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) [ 316.000175] Unknown ioctl 8834 17:23:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x401, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xe32e, 0x400000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x10001, 0x4f, &(0x7f0000000080)=""/79}]}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x7, @vbi}}) 17:23:46 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff98c, 0x101000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x44, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) 17:23:46 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 0x58}}) 17:23:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r0, 0xffffffffffffffff, 0x19a) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) [ 316.635800] Unknown ioctl 8834 17:23:46 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:47 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) connect$pppoe(r2, &(0x7f00000004c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ifb0\x00'}}, 0x1e) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x9, 0x79, 0x820, 0xfff, 0xffffffffffffffff}) socketpair(0x1, 0x0, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000440)={0x0, @speck128}) 17:23:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:47 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000001540)=0x7f05, 0x20, 0x0) sysfs$3(0x3) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0xfffffffffffffffd, 0x1000000002, 0x0) 17:23:47 executing program 0: io_setup(0x200000000003, &(0x7f0000000040)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)='/dev/md0\x00', 0x0, 0x0) close(r1) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x1ffffffffffffe76, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80000000005, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 17:23:47 executing program 4: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x803, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x100000001}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x10000, @mcast2, 0x1}, 0x1c) 17:23:47 executing program 4: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:47 executing program 2: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000280)=[{0x0, 0x8}, {0x4, 0x8}], 0x2) semop(r0, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000000)=""/4) 17:23:47 executing program 0: futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x11000002) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x100) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0xfffffffffffffff9, "0e0105085a9dbdfba0eaa3bc570b9de5ba983b06da766cec30d6f17cc0008ecc", 0x2, 0x1}) 17:23:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xc2000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='wlan1)eth1-/') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000140)={0x7b}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000810000040000000000000000000000000ef9e900150000000000000000000000000000000000000000000000000002"]) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000001c0)={0x4, 0x0, [{0x40000001, 0x2, 0x7fff, 0xfffffffffffffff9, 0xfff}, {0xc000000f, 0xfffffffffffffffe, 0x7fffffff, 0x6}, {0x4000000b, 0xd73e, 0x3ff, 0x7, 0x8}, {0x80000019, 0x82, 0x401, 0x5, 0x4ae9}]}) 17:23:47 executing program 4: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:47 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8008000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r1, 0x3}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r2, 0x0) 17:23:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df000000000000000000000000"], 0x38}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x6, 0x40) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) connect$packet(r1, &(0x7f0000000200)={0x11, 0x15, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)=@ax25, 0x80, &(0x7f0000000140), 0x13}}], 0x1, 0x0, &(0x7f0000000a80)={0x0, 0x1c9c380}) 17:23:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000200)='N'}, 0x10) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x9e6, 0x42) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x3, 0x6, 0x3, 0x1, r0, 0x2}, 0x2c) 17:23:48 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:48 executing program 3: r0 = getpgid(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x101) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000240)={0x8, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40) 17:23:48 executing program 0: unshare(0x22000900) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) 17:23:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:48 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x4, [@dev={[], 0x13}, @local, @random="582184e2c7bc", @local]}) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x80000080045017, &(0x7f0000000000)) 17:23:48 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df000000000000000000000000"], 0x38}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x6, 0x40) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) connect$packet(r1, &(0x7f0000000200)={0x11, 0x15, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)=@ax25, 0x80, &(0x7f0000000140), 0x13}}], 0x1, 0x0, &(0x7f0000000a80)={0x0, 0x1c9c380}) 17:23:48 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x4, 0x4000) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0xfffffdea) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0605345, &(0x7f00000002c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000400)) tkill(r2, 0x1000000000013) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) 17:23:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(0x0, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:49 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x20, 0x100) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000300)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') r2 = open(&(0x7f0000000380)='./file0\x00', 0x2000, 0x84) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000280)=0x510000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000340)=@add_del={0x2, 0xfffffffffffffffe, 0x3}) recvmmsg(r0, &(0x7f0000004d80)=[{{&(0x7f0000002640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000002800)=[{&(0x7f00000026c0)=""/10, 0xa}], 0x1}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000006a86dddfe110d903d0000009500000000d1024941f4dd4e570000007fb5c0fffcffffff00000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0xde, &(0x7f0000000140)=""/222, 0x41101, 0x1, [], 0x0, 0x8}, 0x48) connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0xfffffffffffffff7, @dev={[], 0x21}, 'veth1_to_bond\x00'}}, 0x1e) preadv(r1, &(0x7f0000000280), 0x0, 0xd) 17:23:49 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x4, [@dev={[], 0x13}, @local, @random="582184e2c7bc", @local]}) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x80000080045017, &(0x7f0000000000)) 17:23:49 executing program 1: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ptrace(0x4208, r1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x80000000, 0x84c2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000180)=0x3, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8947, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0a00de597bd5d3ce"]}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x6}) close(0xffffffffffffffff) 17:23:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2000072e}]) 17:23:49 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:49 executing program 3: unshare(0x20400) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) times(&(0x7f00000002c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x1f, 0x2) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000280)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) 17:23:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f00000001c0), 0x5) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0x4, 0x2, 0x403}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) fcntl$setown(r2, 0x8, r3) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x8, 0x4) 17:23:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1d, 0xffffff1f, 0x0, 0x0, {0xffffff1f}}, 0x14}, 0x1, 0x8001a0ffffffff}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/4096, 0x1000}}, {{&(0x7f0000002940)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002f40), 0x1094}}], 0x152, 0x140, 0x0) 17:23:50 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x4, 0x4000) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0xfffffdea) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0605345, &(0x7f00000002c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000400)) tkill(r2, 0x1000000000013) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) 17:23:50 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x882, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x80, 0x0, &(0x7f0000000140)="b7db7bb81ac2ad31e5da880ebd55bef85c58d3987eabe8ab256743356e0e20b0d32502a11a678bc62b132aa4ffcb4032053cdecdb32933b911010f541d47673ab02ca0b02f2651aedec3bfeb674e2f5b7db5097c852d2c67a08b0324bdc64feaf9169e1b84a181c160bd2af2bb342e0de818f538fa3c3f07a42b33121c16247c"}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e22, 0xffffffffffffff87, @loopback, 0xfffffffffffffffb}}, 0x3f, 0x1f, 0x8, 0xfffffffffffffffb, 0x2}, &(0x7f0000000300)=0x98) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000340)=ANY=[@ANYBLOB="096f25eb960413671ecf2b4936"], 0x1}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000110) 17:23:50 executing program 3: unshare(0x20400) r0 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x7fffffff, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000040)={0xcf, 0x7f3, 0x15}) r2 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000400)={0x100}) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in=@multicast1}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000000)=0x84) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000003c0)={0xffff, 0x9}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r4, 0x29b9}, &(0x7f0000000380)=0x8) setsockopt$inet_int(r3, 0x0, 0x82, &(0x7f0000000080), 0x0) 17:23:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:50 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x3f, &(0x7f0000000100), &(0x7f00000001c0)) timer_create(0x6, &(0x7f0000000380)={0x0, 0x23, 0x0, @thr={&(0x7f0000000180)="9cf5c332f22dfcb6503bfe4a245807cd71a927c4d2780debe6bcc8afd3e3180d7e5b67dff401279d791337d9ecdc7fb73a90", &(0x7f00000002c0)="3f672e451c8761cd67766495c840eea7b1e570016c3d60e8da13e62a906c9571008bd099195724d1314aeb270fcf5c6f77a4892aa8129ec1f945bfcbd350d628b7149b3ce39c66e379630ce5071a8585538cd2719c30a1de851d7c4e7a70dbd97b0a4419eda749b2826399a547a4bac2c9dabccf6e84ccd706414c7c6370b9d70a46"}}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000400)) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0502000000000009007ce6a1f9d39adbdb002789e6000000000000000000d1e3249050eb7ee547f15f783bf6243826ead92e2d51ad07e55808378faaa4ba1f6c9002e313b7e96e4fed3ff1cf38f071ff76df8614a2901e4f2742da7205698ff159fa566e1c108fb91beca07c3f42eba194b7d7d9dc06ae677b179d0d9026b3820adf5010f4c5e9eea59d853baf1f2c92353cf760f9bab8af8e59ae90b88e0462d354549cf2ddae5ff4dfc4121788f731d9330bc2687a07fada17b16d39e6"], 0x1e, 0x3) r2 = memfd_create(&(0x7f0000000040)='$ppp0-}\x00', 0x6) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x9, 0x200}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0x2d080000000000}, 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000440)={0x0, 0xcb7c37035f34a161, 0xfffffffffffffffc, 0x1}) 17:23:50 executing program 5: close(0xffffffffffffffff) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r0, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2000072e}]) 17:23:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:50 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2c0000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x101}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000140)={r1}) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) r3 = gettid() unshare(0x24020400) ioctl$int_in(r2, 0x800000c0045003, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000016c0)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f0000001680)) tkill(r3, 0x6) semget$private(0x0, 0x1, 0x1) 17:23:50 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/206) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000001c0)="efa3f91db558de57f104711ee71142c5686b05c23a972e8bae56ba149ab6427429522aea2deae41ee80b9ef8c415e9196af250a90f62cab6cd33") epoll_wait(r0, &(0x7f0000000200)=[{}, {}], 0x2, 0xffffffffffff4b2c) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000003c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&\x00'}, 0x7) 17:23:50 executing program 1: mq_open(&(0x7f0000000000)='ppp0%@selfvmnet0\x00', 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x14}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe407}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001) 17:23:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:51 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") accept$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e) rt_sigsuspend(&(0x7f0000000140)={0x2}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r3, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000000c0)={0xb, {0x20, 0xfffffffffffffff8, 0x1, 0x6}}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0), &(0x7f00000002c0)=0x10) [ 320.971034] kauditd_printk_skb: 3 callbacks suppressed [ 320.971063] audit: type=1400 audit(1541784231.027:31): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=8788 comm="syz-executor2" 17:23:51 executing program 0: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000080)="db4e7609ff088e35236276725fab3ade450c0ae5a530eef0d98a3f4acb4b8342099b52ca81e4c3cccd38f91586bffb1e6cdb7671091b65590351f395646081b0cdf02646e9a13d3c58f0ae8a63d5b8c0f5e23e2f8f696c516b98bf71ef0a5a87f3af2d57f3f8e9da19872dcf2c12c906b03fecc0b667842a43e3bf", 0x7b, 0x40000, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="74756e6c30002530e48000", 0x10) sendto$inet(r1, &(0x7f0000000480)='\x00', 0x1, 0x4000010, &(0x7f00004daff0)={0x2, 0x0, @broadcast}, 0x10) 17:23:51 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x1}}, 0xa0, 0x80, 0x400, 0x73dc}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e21, 0x5, @loopback, 0x9}}, 0x401, 0x10001}, 0x90) ioctl$TCSETAF(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 17:23:51 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000) prctl$void(0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x28000) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000002c0)={0xfff, 0xd0f, 0x8, 0x0, 0x3ff, 0x7, 0x6, 0x101, 0x20, 0x5, 0x9, 0x2, 0x0, 0x4, 0xfffffffffffffffe, 0x2, 0x685, 0x5, 0x3ff}) shmctl$SHM_LOCK(r0, 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000007f40)=[{{&(0x7f0000000000)=@rc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/135, 0x87}], 0x1, &(0x7f0000002580)=""/95, 0x5f}}], 0x1, 0x0, &(0x7f00000081c0)) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000340)=[0x319, 0x10000]) shmctl$SHM_UNLOCK(r0, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@rand_addr, @in6=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) 17:23:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2000072e}]) 17:23:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:51 executing program 0: r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x0, @local, 0x6}, 0x1c, &(0x7f0000000400)}, 0x10008000) sendto$inet6(r0, &(0x7f0000000b40)='d', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000140)={@rand_addr, @dev}, &(0x7f0000000200)=0xffffffffffffffb3) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) write$cgroup_type(r2, &(0x7f0000000540)='threaded\x00', 0x9) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000480)=[0xee01, 0x0, 0xffffffffffffffff]) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [{0x2, 0x3, r3}], {0x4, 0x2}, [{0x8, 0x3, r4}, {0x8, 0x0, r5}, {0x8, 0x6, r6}, {0x8, 0x1, r7}, {0x8, 0x3, r8}], {0x10, 0x5}, {0x20, 0x1}}, 0x54, 0x2) 17:23:51 executing program 1: r0 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='.\x00', 0x40224400000b) socketpair(0xa, 0x5, 0x2, &(0x7f0000000040)) write(r0, &(0x7f0000000000)="829e", 0x2) sendfile(r0, r0, &(0x7f0000000380), 0x2000000800004c36) 17:23:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4002, 0x4000008200300) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x100000001, 0x0, 0x100000001, 0xfdfdffff}) r1 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xfffffffffffffffb, 0x80000) bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80c0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="08020000b3eba16384ea697a7fc9513a0adfddad89bb58f4d8a1a27f452cb6e00f5c67830340ead7c023ebb3fc74a16189ca0ec526ae0386698114c443c811813c388864435874187b02d0f11c95da4c9c0d7883d953eed3781d037e5a291d03cea443c37c7b2c827cd569f433c39fb25a918d14e5d3f3516afee96207c9b5858c872a6dd1cd610eb6afb685796d18b0ea8334ceb6357ff41cdd2a0a191beec586bfef15c8a29bc3bb48fffde2a02ebf076ea529c0387ffe8100f151cc11e5b66105ea5cdccae9a97df4bd0f1c5181d67761785d2efea3b11aa4c89e583fb2c114c665b0f883d56bd53824b77073efde143c", @ANYRES16=r3, @ANYBLOB="140926bd7000fedbdf250100000008000400000000000800040003000000080004000000000004000500080003002f0000000800040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4010) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)={0x3, 0x0, [0x0, 0x0, 0x0]}) 17:23:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:52 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") accept$unix(r1, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e) rt_sigsuspend(&(0x7f0000000140)={0x2}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r3, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000000c0)={0xb, {0x20, 0xfffffffffffffff8, 0x1, 0x6}}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0), &(0x7f00000002c0)=0x10) 17:23:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10012, r0, 0x0) 17:23:52 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x38, "5ef11bfc8690201c7c3d99c63361e065ac4b8d90afaa9180c5de891eeb15afad11698cc4fb38d93548709662b9f4b7891be278faabc938e7"}, &(0x7f00000000c0)=0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r0, 0xc008744c, &(0x7f0000d1df52)=""/174) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0x10000, 0x4) 17:23:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000280)={0x77, 0x0, [0x0, 0x0, 0x40000081]}) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x400000) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000080)) 17:23:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "e65417", 0x30, 0x29, 0x0, @remote, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a047ec", 0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}}}}}}}, &(0x7f00000000c0)={0x0, 0x4, [0x0, 0xc07, 0x50f, 0xeb0]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x9) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x100000001, 0x801) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x0, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x1, 'nq\x00', 0x1, 0x200, 0x20}, 0x2c) 17:23:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x3) r2 = socket(0xa, 0x80807, 0x80000001) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x7, 0x81, 0x9, 0xb9e1f1, 0x3}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_netfilter(r2, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a4, 0x5, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x7}, [@nested={0x190, 0x3e, [@generic="129b58548136097ddc4d9035757cd2fe4b8aa251e3ae056736a84ec814ad5588794ddf025c7099727f86bc22d4fae9a675c3dd047e5b57ababb910817626d8e1a17d6fbc5687396ea7ede232ca4c032fbe4288c8a398304a5df503c317d2597bc45993a2bf4fa8eb7434fcf98142d096f2f007280b4c6448c26eefdf715ad1ba546f26b5f78747cb50331a379f92a2f5209f6fe27f4dc7072b8825382ab0", @generic="19edb0f3b619909d21985318a8dce556b8d48bbf0ea6b8ad58b8798bc9b4ce909b55cc8da2103246c7524618410a954446d14952b60365a84d1f9f0ef22476cc616d3e8c72aa6a6d719f365a0ff73d66023aff555794a7919c756fc435ae4d9de9d9c2173cf79d2b561648569bcf174547d52255491458b4ea3d917e650eadc37a2bca003c09647cfadd503d32ea253aadc6fb60cbc8fae7450e5f2860c3a963d671f7239d14e2a4e5a977ae05e457f28ec4f49833b358d88cb4804208ac2783e0c9b9180153526bfaa2108d9b27e99477cc0a2592b4aa0615479625fdc5d83fc8617967c1", @typed={0x8, 0x13, @ipv4=@broadcast}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20000, 0x0) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) 17:23:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031628571") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) read(r1, &(0x7f0000000200)=""/26, 0x1a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="65b827077c2c4dfeca11e354cc35c6f74e1d38d1dc38c61e7f8d0f0b3876f352b5dae0ee374b096f7a4b8d96972f06bbd2a36ebc7ceada63ff52e8897b519e2ebb4894cfeafffaa04337b0947ae25121c56404bd667f1fd09b6a4d32b67394f5bb127009759426b4428d3220c664fc494e154e4e210fbac20b5d6e7f2ecf817831ad4b3dd25024098cb85420f5c71fce9a9846e232da7d59a0e72cb5f0356b9a839b4ac148b46e51d14724a90f755a4a2a5511a53ae8601102a7560657ddc1cddd73e1de2b646eb84917b23e796dca04a1997ea26f4b4fe11dc3dfb303f53a1ad5e20356c24275946753264dc4581571e2", 0xf1}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="d2666466baa000ed2665466f470f013c116467410f01cb66ba2000b8c3000000efa10080000000000000450f01cf440f1af5420f21ee", 0x36}], 0x1, 0x0, &(0x7f0000000380), 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L-', 0x6}, 0x28, 0x2) 17:23:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3f, 0x200000) accept(0xffffffffffffff9c, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@loopback, @mcast1, @local, 0x81, 0x8, 0x1, 0x100, 0xfc, 0x0, r1}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x3a, 0x1, &(0x7f0000000280), &(0x7f0000000000)=0xfffffffffffffd2d) 17:23:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031628571") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:53 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="57fa650fbc6e0aa7451b6f59fc3f3d7e233f86eafcb0f358458e66eabb6fa982df0b4fa58d470fe3bf70c9ae3f5829c39b45ab81d48a961ed54865026c0caacded351b2cbd07b4c5bc8777d840b3c8500d15ce03e9e69433487d4386d3efd5aa1b"], 0x1}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") ioctl$VT_DISALLOCATE(r0, 0x5608) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) unshare(0x60000000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000b40)={'nat\x00', 0xff, "8bad8235b56c4e620afc83ad3d6442d6aae2c84b973ea77491308ee0902cedde0ba492fec2c56c4377d8f80ad5078dd494b2f0337b6faf4f10b3f7ecab034cd5af141692bb3b1cc1f311f38a2ecf5dba282cf6c46b30e91c7bc78adf103310faf2ab495d59f730ba374adc46c3da8aff4928ffc5e0c554e94a0cedf920b84b0c691baf4a16b5a2de50ea2a8e47685ef96b478b413d131d946a3f2836fb562f9f78d4f8835d53cdd3ae9a8c49470c6ddcf8fa59dbb8306148738ae87ae488a4f508609f215139b7ece7bad254ba3f81738a02bbb27d0047e6826830fd4a1c5088fd88ccdd02d276de7c99371e8069c47b6fa6963a284969a927c0f4589f8851"}, &(0x7f0000000140)=0x123) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) r2 = socket$inet(0x2, 0x3, 0x2) write$P9_RXATTRWALK(r1, &(0x7f0000000240)={0xf, 0x1f, 0x2, 0x2}, 0xf) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) fchmod(0xffffffffffffffff, 0x40) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x42000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e20, @local}, {0x0, @remote}, 0x44, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 'veth1_to_bond\x00'}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000840)="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") preadv(r4, &(0x7f0000000480), 0x0, 0x0) setfsuid(r3) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000280)=0x7) dup3(0xffffffffffffffff, r4, 0x80000) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x202, 0xd9) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000001680)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000002140)}], 0x1, &(0x7f0000001880)}], 0x1, 0x0) 17:23:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031628571") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:54 executing program 1: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0xfffffffffffffffe) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x7305231dd2a614a5, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x3c4, 0x20, "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", 0x92, 0xfff, 0x8, 0x9b60, 0x2bf4, 0x391, 0x5, 0x1}, r1}}, 0x128) 17:23:54 executing program 2: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000040)={0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x200}) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x80800) accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r1 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) setreuid(r1, r2) 17:23:54 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) pwrite64(r0, &(0x7f0000000140)="1dec1ce67c2d", 0x6, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ftruncate(r0, 0x5) [ 324.167193] IPVS: ftp: loaded support on port[0] = 21 17:23:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d02403162857170") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) [ 324.329414] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) 17:23:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:54 executing program 1: request_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0xfffffffffffffffe) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x7305231dd2a614a5, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x3c4, 0x20, "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", 0x92, 0xfff, 0x8, 0x9b60, 0x2bf4, 0x391, 0x5, 0x1}, r1}}, 0x128) 17:23:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe00) 17:23:54 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) pwrite64(r0, &(0x7f0000000140)="1dec1ce67c2d", 0x6, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ftruncate(r0, 0x5) [ 324.672822] IPVS: ftp: loaded support on port[0] = 21 17:23:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d02403162857170") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:55 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="57fa650fbc6e0aa7451b6f59fc3f3d7e233f86eafcb0f358458e66eabb6fa982df0b4fa58d470fe3bf70c9ae3f5829c39b45ab81d48a961ed54865026c0caacded351b2cbd07b4c5bc8777d840b3c8500d15ce03e9e69433487d4386d3efd5aa1b"], 0x1}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") ioctl$VT_DISALLOCATE(r0, 0x5608) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) unshare(0x60000000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000b40)={'nat\x00', 0xff, "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"}, &(0x7f0000000140)=0x123) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) r2 = socket$inet(0x2, 0x3, 0x2) write$P9_RXATTRWALK(r1, &(0x7f0000000240)={0xf, 0x1f, 0x2, 0x2}, 0xf) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) fchmod(0xffffffffffffffff, 0x40) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x42000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e20, @local}, {0x0, @remote}, 0x44, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 'veth1_to_bond\x00'}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000840)="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") preadv(r4, &(0x7f0000000480), 0x0, 0x0) setfsuid(r3) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000280)=0x7) dup3(0xffffffffffffffff, r4, 0x80000) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x202, 0xd9) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000001680)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000002140)}], 0x1, &(0x7f0000001880)}], 0x1, 0x0) 17:23:55 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="54db6e1425665247a79734f9e14eb452", 0x10) connect$inet6(r1, &(0x7f00000009c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0x15}], 0x1, &(0x7f0000000140)}, 0xc100) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x2b7}], 0x1, &(0x7f0000000e00)}, 0x8000) socket$inet6(0xa, 0x0, 0x0) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="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", 0x2d5}], 0x1, &(0x7f0000003b40)}, 0x0) 17:23:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:55 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000002780)=ANY=[]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000346fc8)=ANY=[], &(0x7f0000f6bffb)="47104c00", 0x0, 0xfb, &(0x7f0000000100)=""/251}, 0x48) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000002c0)=0xe8) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x2, 0x80) r2 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x5, 0x1018c0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x8000, 0x1, 0x6, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={r3, 0x40}, &(0x7f00000003c0)=0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') 17:23:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = shmget(0x0, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = gettid() sched_setaffinity(r2, 0xfffffffffffffeca, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x70bd2b, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) ioctl(r0, 0xfffffffffffffff7, &(0x7f0000000140)="2703d734fc9b32934f1329827f6316fb52673a0ea400947b20bbecfad912817b876ab7327bf94788ea1f3a5b0a3f918b3ccb7150171974f372021294b60069ec9438445567ba4ff4f51d52ab2e27380e08effdd514e92b57ea653e39f569f15c8b770cfed8a24094c20a0b2d42409477c1382a579633d16fc9eb8865aba0c8af1e5f7dc23ea98957f4cb9814f82dbe00c48234cc7d8954950f1c7122ca042b1b7ae87ec094ca84e21e193ed17655d9e44b9c364f41fa3b6b892a489d842fc5495c0c12dc97f2e88625b89bc496aaca12f745e3073356d668e9eccf921b5650b5b7f39783c7335638ac57") 17:23:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d02403162857170") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) [ 325.285135] IPVS: ftp: loaded support on port[0] = 21 17:23:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:55 executing program 3: syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0x81}}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x6, 0x81, 0x1000000, 0x1, 0x5, 0x6, 0x4, 0x3, 0x94, 0xbdae, 0x820, 0x8000}) 17:23:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x54, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x48, 0x20, &(0x7f0000000100)=[@ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x4, 0x1e}, @fda={0x66646185, 0x8, 0x3, 0x31}], &(0x7f0000000180)=[0x28, 0x40, 0x20, 0x78]}}, @clear_death={0x400c630f, 0x1}], 0x1000, 0x0, &(0x7f0000000940)="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"}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00e5beb200000000"], 0x6e, 0x0, &(0x7f00000006c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484001800000001800007b657027d9c3ac1d70c000daffffffffffffff002000007b2000000000000000b578305650bffd7091dbed00000000000000f2ffffffffffffff00000fe0da539eecb35bcf1abb5f75d970ef5c47bf745e9f050000001a40c536c2d92302ebb8052550b3edd3d8696df6140070c0f57714eb59fd3248e2442f87e4f21bdeab09133f0ef58a90498957252991ce0dd732663a296c0990afa00891530a202a75c9e981f080041db85c90", @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000180)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000340)}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000300)={{0x2, 0x1, 0x4, 0x1, 0x7}, 0x0, 0x499}) [ 325.949344] QAT: Invalid ioctl [ 326.022173] QAT: Invalid ioctl 17:23:56 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="57fa650fbc6e0aa7451b6f59fc3f3d7e233f86eafcb0f358458e66eabb6fa982df0b4fa58d470fe3bf70c9ae3f5829c39b45ab81d48a961ed54865026c0caacded351b2cbd07b4c5bc8777d840b3c8500d15ce03e9e69433487d4386d3efd5aa1b"], 0x1}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") ioctl$VT_DISALLOCATE(r0, 0x5608) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) unshare(0x60000000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000b40)={'nat\x00', 0xff, "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"}, &(0x7f0000000140)=0x123) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) r2 = socket$inet(0x2, 0x3, 0x2) write$P9_RXATTRWALK(r1, &(0x7f0000000240)={0xf, 0x1f, 0x2, 0x2}, 0xf) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) fchmod(0xffffffffffffffff, 0x40) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x42000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e20, @local}, {0x0, @remote}, 0x44, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 'veth1_to_bond\x00'}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000840)="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") preadv(r4, &(0x7f0000000480), 0x0, 0x0) setfsuid(r3) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000280)=0x7) dup3(0xffffffffffffffff, r4, 0x80000) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x202, 0xd9) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000001680)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000002140)}], 0x1, &(0x7f0000001880)}], 0x1, 0x0) 17:23:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x0, 0x5, 0x2, 0x4}, 0x2c) 17:23:56 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="1b5cb3db32cf7630b620093956bf0fda45f5bfdb042e663c25769b37ee7256122fca3b0365249679e47c27dc4b9a7c0229671b967a") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0xfffffed8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000080), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)=@newqdisc={0x434, 0x24, 0xd08, 0x70bd27, 0x25dfdbfd, {0x0, r3, {0x3, 0x6}, {0xf, 0xf}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x1c, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xffffffff}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}, @TCA_STAB={0xb4, 0x8, [@TCA_STAB_DATA={0x10, 0x2, [0x3, 0x100, 0x6, 0xafd9, 0x5, 0x1]}, @TCA_STAB_BASE={0x1c, 0x1, {0x9, 0x9, 0x2, 0x3, 0x2, 0x7f, 0x7, 0xa}}, @TCA_STAB_DATA={0x18, 0x2, [0x80000001, 0x7fffffff, 0x2, 0x6, 0x6, 0x100000000, 0x400, 0x3, 0x8, 0xea99]}, @TCA_STAB_BASE={0x1c, 0x1, {0x2, 0x100000001, 0x3ff, 0x8, 0x0, 0x401, 0x401, 0x7}}, @TCA_STAB_BASE={0x1c, 0x1, {0x7f, 0x0, 0x5, 0x800, 0x0, 0xffffffffffffffe1, 0x9af, 0xa}}, @TCA_STAB_BASE={0x1c, 0x1, {0x4, 0x10001, 0x8001, 0x4, 0x2, 0x4, 0x1}}, @TCA_STAB_DATA={0x18, 0x2, [0xdff0, 0x8, 0x2, 0x40, 0x200, 0x8, 0x9, 0x1, 0x99]}]}, @TCA_STAB={0xc4, 0x8, [@TCA_STAB_DATA={0x4}, @TCA_STAB_BASE={0x1c, 0x1, {0xac4, 0x3, 0xfff, 0x80, 0x2, 0x75b85215, 0x7, 0x6}}, @TCA_STAB_BASE={0x1c, 0x1, {0x0, 0x1, 0x1fb0e1b2, 0xac21, 0x2, 0x40, 0x6, 0x5}}, @TCA_STAB_BASE={0x1c, 0x1, {0x0, 0x8001, 0x1, 0xffff, 0x0, 0x0, 0x8, 0xa}}, @TCA_STAB_BASE={0x1c, 0x1, {0x6, 0x3ff, 0x7fffffff, 0x3, 0x0, 0x4, 0x6}}, @TCA_STAB_BASE={0x1c, 0x1, {0x7ff, 0x0, 0x100, 0x8001, 0x3, 0x1, 0x6, 0x3}}, @TCA_STAB_BASE={0x1c, 0x1, {0xfffffffffffffff7, 0x7, 0x6, 0x3, 0x2, 0x3a, 0x0, 0x1}}, @TCA_STAB_DATA={0x14, 0x2, [0x4, 0x6, 0x6, 0x5, 0x6, 0x32d1, 0x7f, 0x0]}]}, @qdisc_kind_options=@q_gred={{0xc, 0x1, 'gred\x00'}, {0x23c, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x7fffffff}, @TCA_GRED_LIMIT={0x8, 0x5, 0xffffffffffff1a8e}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x9, 0x0, 0x5, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "34d73aa2412bbd9dbeddffad90f5774a72fc65dce005300dd612d41c8bbaf3e2fb7025f10537326107f2c35208eca150b7117bd4ecc86e689c43164f129f997587d3526f4a2a3c132e4588cf2fd6e76d206686efe614568d23a1ded1e6e76c670b755629ec6a838318b17acdf2a206cc389a28cd27d9865ce6bd42c609675b232933cece23585067f5de46a813980352c6055e6cd085067e7dc83871716bed6ff03fed911bbe7b4111ee3e409455e9359e2cc5b05cf8ce3d85ad1d699ef8d4d1b89c95a2e1099eadaacf9019ecc845d6cc3ceaa65d05a3d92b801cbc2b97226bf2ea0be15fe32983fa23fe2c5731305c8db13a841aacd70c70917f6702b1dff5"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x10, 0xb, 0x1, 0x4, 0x59e3}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1601}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x434}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000007c0)=@routing={0x0, 0xc, 0x1, 0x5, 0x0, [@remote, @local, @local, @loopback, @mcast1, @remote]}, 0x68) 17:23:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x20001, 0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x551}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x48, 0x1]}) [ 326.302263] binder: 8997:8999 transaction failed 29189/-22, size 72-32 line 2855 [ 326.374557] binder: 8997:8999 unknown command -1296112384 [ 326.380356] binder: 8997:8999 ioctl c0306201 20000680 returned -22 [ 326.418484] IPVS: ftp: loaded support on port[0] = 21 [ 326.468819] binder: 8997:9008 got transaction to invalid handle [ 326.475175] binder: 8997:9008 transaction failed 29201/-22, size 32-8141874053120030901 line 2855 17:23:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) [ 326.559360] binder: 8997:8999 ioctl 40485404 20000300 returned -22 [ 326.663626] binder_alloc: 8997: binder_alloc_buf, no vma [ 326.669372] binder: 8997:8999 transaction failed 29189/-3, size 72-32 line 2970 17:23:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x0, 0x2, 0x4}, 0x2c) [ 326.731346] binder: BINDER_SET_CONTEXT_MGR already set [ 326.731492] binder: 8997:9015 got transaction to invalid handle [ 326.737116] binder: 8997:9008 ioctl 40046207 0 returned -16 [ 326.743152] binder: 8997:9015 transaction failed 29201/-22, size 32-8141874053120030901 line 2855 17:23:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) [ 326.848298] binder: undelivered TRANSACTION_ERROR: 29201 [ 326.877357] binder: undelivered TRANSACTION_ERROR: 29201 17:23:57 executing program 0: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="57fa650fbc6e0aa7451b6f59fc3f3d7e233f86eafcb0f358458e66eabb6fa982df0b4fa58d470fe3bf70c9ae3f5829c39b45ab81d48a961ed54865026c0caacded351b2cbd07b4c5bc8777d840b3c8500d15ce03e9e69433487d4386d3efd5aa1b"], 0x1}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") ioctl$VT_DISALLOCATE(r0, 0x5608) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x4) unshare(0x60000000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000b40)={'nat\x00', 0xff, "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"}, &(0x7f0000000140)=0x123) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) r2 = socket$inet(0x2, 0x3, 0x2) write$P9_RXATTRWALK(r1, &(0x7f0000000240)={0xf, 0x1f, 0x2, 0x2}, 0xf) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) fchmod(0xffffffffffffffff, 0x40) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x42000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e20, @local}, {0x0, @remote}, 0x44, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 'veth1_to_bond\x00'}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000840)="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") preadv(r4, &(0x7f0000000480), 0x0, 0x0) setfsuid(r3) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000280)=0x7) dup3(0xffffffffffffffff, r4, 0x80000) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x202, 0xd9) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000001680)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000002140)}], 0x1, &(0x7f0000001880)}], 0x1, 0x0) 17:23:57 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)="7da911f1dfe0dc5a75fd01d84ae7cbc53914ff6aed0276fdb7385084d48622681b87fd9fa9529ad6d9c698d30ece08a69b3746bb7a0e4266cedecfb576e9a28e026758edab337bf4a1acda3e12e4a44487509e619d30ac7d392e3b187bc9f9b91772bec2c8bd1086035e58fbf628ec3cbb4907770b27a299", r0}, 0x10) 17:23:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x0, 0x4}, 0x2c) 17:23:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) [ 327.319530] IPVS: ftp: loaded support on port[0] = 21 17:23:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 17:23:57 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 17:23:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000000005, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x200) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40400, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x16) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x29c, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x0, 0x0, @dev, 0x6}]}, &(0x7f0000000100)=0x10) 17:23:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2}, 0x2c) 17:23:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000280)={{0xa, 0x7, 0x80000001, 0x81, '\x00', 0x2}, 0x1, [0x406d, 0xffff, 0x3, 0x5, 0x81, 0xfffffffffffffffc, 0x7f, 0x1, 0x2, 0x9, 0x1, 0x9, 0x0, 0x3, 0x1, 0x7, 0x3, 0x7f, 0xffffffffffffffc0, 0xbe, 0x9, 0x2, 0x3100000000000000, 0x0, 0x79, 0xff, 0x3, 0x696c, 0x1, 0x2, 0x8e9d, 0x100000000000, 0x1, 0x81, 0x7a, 0x7, 0x7, 0xffffffff, 0x4, 0x6, 0x7f, 0x400, 0x9, 0x1ff, 0x101, 0x3, 0x0, 0x7fff, 0x100, 0xffc0000000000000, 0x2, 0x10001, 0x3, 0x1ff, 0x200, 0x1, 0x3f7c, 0x3, 0x100000000, 0x200, 0xff, 0xf3, 0x101, 0x110d, 0xfff, 0x1, 0x7fff, 0x9, 0x8001, 0x7, 0x3f, 0x8, 0x100000000, 0x800, 0x7ff, 0x10000, 0x2d4, 0x0, 0x0, 0x0, 0x7, 0xffffffff80000001, 0x0, 0x7f, 0x5, 0x80000001, 0x0, 0x10000, 0x5, 0x4, 0xffffffff, 0x5, 0x80000000, 0x40, 0x67, 0x9, 0x9, 0xffffffffffffff00, 0x1, 0xffff, 0x0, 0x4, 0x5, 0x1, 0xffff, 0x81, 0x40, 0x8, 0x1, 0x4, 0x4, 0x4, 0x6, 0x4, 0x7f, 0x3, 0x6, 0x3ff, 0x3bf97ba7, 0x200, 0x8000, 0x80, 0x58851936, 0x3, 0x3, 0x6c9, 0x1, 0x1000], {r2, r3+10000000}}) sendfile(r0, r0, &(0x7f0000000000), 0x7ffffffe) syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) 17:23:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) 17:23:58 executing program 0: unshare(0x203fc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x15, 0x4, 0x3, 0x10}, 0x2c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x420080, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x4f, [], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180)=""/79}, &(0x7f0000000280)=0x78) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f00000000c0), &(0x7f0000000400)}, 0x18) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000080)={0x68, 0x29, 0x1, {0x100000000, [{{0x80, 0x4, 0x8}, 0xffffffffffff0001, 0x5, 0x7, './file0'}, {{0x50, 0x3, 0x6}, 0x20, 0x100000000, 0x7, './file0'}, {{0xa1}, 0x7, 0x6, 0x7, './file0'}]}}, 0x68) 17:23:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2}, 0x2c) 17:23:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:23:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000000)={0x8001, 0x14, [0x100000000, 0x100000000, 0xfff, 0x3ff, 0x9]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x4) vmsplice(r2, &(0x7f0000001540)=[{&(0x7f00000012c0)="1f", 0x1}], 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffc8f) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r1, 0x0, r3, 0x0, 0x80000010005, 0x0) 17:23:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000002000), 0x1000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10000000032e) read$FUSE(r2, &(0x7f0000001000), 0xffffffffffffff84) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000003c0)={0x100000, 0x0, 0x80, 0x5, 0x5}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) lstat(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)) umount2(&(0x7f0000000180)='./file0\x00', 0x2) write$FUSE_DIRENT(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000b7f5ec2d70046ce656d316e6f246576656d31000000000000000000f386616a1a0a3c0000000000002c0e0000000000619fed3823b7c9c6bd3276ce8c9461000000000000051c0005000000000079737465746a48be1b31486dcc6370757365746367726f757024a3d030914ce146ddb4ddefa62f4fe745fe700471"], 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 17:23:58 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1002, 0x1) recvmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/41, 0x29}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000003c0)=""/111, 0x6f}], 0x6, &(0x7f00000004c0)=""/116, 0x74, 0x3}, 0x40000100) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @empty=[0x8847000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x4, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000100)) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000580)={@loopback, @multicast2, 0x0, 0x5, [@rand_addr=0x3, @multicast1, @broadcast, @broadcast, @remote]}, 0x24) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@random="0f74e96a5d33", @random="0579571ad5e8", [], {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "a262ab53f7c70966"}}}}, &(0x7f0000000040)) 17:23:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2}, 0x2c) 17:23:58 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r2 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) unshare(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x1000, "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"}, &(0x7f0000001200)=0x1008) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001240)={r3, 0x1, 0x10}, &(0x7f0000001280)=0xc) socket$inet(0x2, 0x7, 0x6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000140)) 17:23:59 executing program 4 (fault-call:2 fault-nth:0): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2, 0x4}, 0x2c) 17:23:59 executing program 0: process_vm_writev(0x0, &(0x7f0000002800), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000001fc0)=ANY=[]}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/183, 0xb7}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2, &(0x7f0000000f00)=""/24, 0x18}}], 0x1, 0x0, &(0x7f0000003380)={0x77359400}) r1 = add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'yam0\x00', r2}) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000002c0)='user\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto(r3, &(0x7f00000007c0)="120000ffffffff00000000000000000000a1", 0xffffffffffffffa7, 0xfffffffffffffffc, 0x0, 0x0) ioctl$int_out(r3, 0x5460, &(0x7f0000000740)) socket$nl_crypto(0x10, 0x3, 0x15) process_vm_writev(0x0, &(0x7f0000000b00), 0x0, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x115, &(0x7f00000024c0)=""/129, 0x81}, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000800)='/proc/self/attr/current\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 17:23:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000032ff8), 0x0, 0x8) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2000072e}]) [ 329.245526] FAULT_INJECTION: forcing a failure. [ 329.245526] name failslab, interval 1, probability 0, space 0, times 1 [ 329.257310] CPU: 0 PID: 9101 Comm: syz-executor4 Not tainted 4.19.0+ #80 [ 329.264225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.273666] Call Trace: [ 329.276324] ================================================================== [ 329.283728] BUG: KMSAN: uninit-value in get_stack_info+0x720/0x9d0 [ 329.290072] CPU: 0 PID: 9101 Comm: syz-executor4 Not tainted 4.19.0+ #80 [ 329.296936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.306749] Call Trace: [ 329.309374] dump_stack+0x419/0x480 [ 329.313025] ? get_stack_info+0x720/0x9d0 [ 329.317205] kmsan_report+0x19f/0x300 [ 329.321029] __msan_warning+0x76/0xd0 [ 329.324852] get_stack_info+0x720/0x9d0 [ 329.328857] __unwind_start+0x7d/0xe0 [ 329.332674] show_trace_log_lvl+0x20e/0x11e0 [ 329.337141] show_stack+0x12e/0x170 [ 329.340809] dump_stack+0x32d/0x480 [ 329.344473] should_fail+0x11e5/0x13c0 [ 329.348393] __should_failslab+0x278/0x2a0 [ 329.352659] should_failslab+0x29/0x70 [ 329.356587] __kmalloc+0xcf/0x4d0 [ 329.360073] ? htab_map_alloc+0xc5/0x1c60 [ 329.364252] ? kmsan_set_origin+0x83/0x130 [ 329.368526] htab_map_alloc+0xc5/0x1c60 [ 329.372530] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 329.377919] ? htab_map_alloc_check+0x63b/0x680 [ 329.382619] ? htab_map_alloc_check+0x680/0x680 [ 329.387310] ? htab_map_alloc_check+0x680/0x680 [ 329.392013] __do_sys_bpf+0x44b0/0xf9a0 [ 329.396027] ? kmsan_set_origin+0x83/0x130 [ 329.400293] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 329.405703] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 329.411176] ? prepare_exit_to_usermode+0x182/0x4d0 [ 329.416226] ? syscall_return_slowpath+0x123/0x8c0 [ 329.421176] ? __se_sys_write+0x2fd/0x370 [ 329.425346] __se_sys_bpf+0x8e/0xa0 [ 329.428996] __x64_sys_bpf+0x4a/0x70 [ 329.432845] do_syscall_64+0xcf/0x110 [ 329.436666] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 329.441873] RIP: 0033:0x457569 [ 329.445084] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.464002] RSP: 002b:00007f6b85e23c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.471739] RAX: ffffffffffffffda RBX: 00007f6b85e23c90 RCX: 0000000000457569 [ 329.479027] RDX: 000000000000002c RSI: 0000000020000500 RDI: 0000000000000000 [ 329.486314] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 329.493695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b85e246d4 [ 329.500980] R13: 00000000004bd8da R14: 00000000004cc4d0 R15: 0000000000000004 [ 329.508277] [ 329.509917] Local variable description: ----state@show_trace_log_lvl [ 329.516409] Variable was created at: [ 329.520147] show_trace_log_lvl+0xb3/0x11e0 [ 329.524481] show_stack+0x12e/0x170 [ 329.528108] ================================================================== [ 329.535470] Disabling lock debugging due to kernel taint [ 329.540931] Kernel panic - not syncing: panic_on_warn set ... [ 329.540931] [ 329.548323] CPU: 0 PID: 9101 Comm: syz-executor4 Tainted: G B 4.19.0+ #80 [ 329.556561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.565923] Call Trace: [ 329.568530] dump_stack+0x419/0x480 [ 329.572272] panic+0x57e/0xb28 [ 329.575514] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 329.581000] kmsan_report+0x300/0x300 [ 329.584840] __msan_warning+0x76/0xd0 [ 329.588667] get_stack_info+0x720/0x9d0 [ 329.592694] __unwind_start+0x7d/0xe0 [ 329.596517] show_trace_log_lvl+0x20e/0x11e0 [ 329.600966] show_stack+0x12e/0x170 [ 329.604614] dump_stack+0x32d/0x480 [ 329.608272] should_fail+0x11e5/0x13c0 [ 329.612198] __should_failslab+0x278/0x2a0 [ 329.616465] should_failslab+0x29/0x70 [ 329.620374] __kmalloc+0xcf/0x4d0 [ 329.623852] ? htab_map_alloc+0xc5/0x1c60 [ 329.628020] ? kmsan_set_origin+0x83/0x130 [ 329.632267] htab_map_alloc+0xc5/0x1c60 [ 329.636268] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 329.641651] ? htab_map_alloc_check+0x63b/0x680 [ 329.646357] ? htab_map_alloc_check+0x680/0x680 [ 329.651050] ? htab_map_alloc_check+0x680/0x680 [ 329.655768] __do_sys_bpf+0x44b0/0xf9a0 [ 329.659788] ? kmsan_set_origin+0x83/0x130 [ 329.664047] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 329.669446] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 329.674916] ? prepare_exit_to_usermode+0x182/0x4d0 [ 329.679958] ? syscall_return_slowpath+0x123/0x8c0 [ 329.684913] ? __se_sys_write+0x2fd/0x370 [ 329.689087] __se_sys_bpf+0x8e/0xa0 [ 329.692738] __x64_sys_bpf+0x4a/0x70 [ 329.696475] do_syscall_64+0xcf/0x110 [ 329.700296] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 329.705503] RIP: 0033:0x457569 [ 329.708733] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.727750] RSP: 002b:00007f6b85e23c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.735495] RAX: ffffffffffffffda RBX: 00007f6b85e23c90 RCX: 0000000000457569 [ 329.743045] RDX: 000000000000002c RSI: 0000000020000500 RDI: 0000000000000000 [ 329.750337] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 329.757630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b85e246d4 [ 329.764920] R13: 00000000004bd8da R14: 00000000004cc4d0 R15: 0000000000000004 [ 329.773619] Kernel Offset: disabled [ 329.777261] Rebooting in 86400 seconds..