[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 69.850389] audit: type=1800 audit(1550235028.897:25): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 69.869378] audit: type=1800 audit(1550235028.897:26): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 69.888885] audit: type=1800 audit(1550235028.897:27): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. 2019/02/15 12:50:41 fuzzer started 2019/02/15 12:50:45 dialing manager at 10.128.0.26:39243 2019/02/15 12:50:46 syscalls: 1 2019/02/15 12:50:46 code coverage: enabled 2019/02/15 12:50:46 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/15 12:50:46 extra coverage: extra coverage is not supported by the kernel 2019/02/15 12:50:46 setuid sandbox: enabled 2019/02/15 12:50:46 namespace sandbox: enabled 2019/02/15 12:50:46 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/15 12:50:46 fault injection: enabled 2019/02/15 12:50:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/15 12:50:46 net packet injection: enabled 2019/02/15 12:50:46 net device setup: enabled 12:52:55 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000280)) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, 0x0) syzkaller login: [ 217.250535] IPVS: ftp: loaded support on port[0] = 21 [ 217.384219] chnl_net:caif_netlink_parms(): no params data found [ 217.448629] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.455203] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.463304] device bridge_slave_0 entered promiscuous mode [ 217.471901] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.478372] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.486636] device bridge_slave_1 entered promiscuous mode [ 217.516839] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.528289] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.556508] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 217.564977] team0: Port device team_slave_0 added [ 217.571672] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.580028] team0: Port device team_slave_1 added [ 217.586253] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.594675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.776981] device hsr_slave_0 entered promiscuous mode [ 217.922590] device hsr_slave_1 entered promiscuous mode [ 218.163217] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 218.170727] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 218.196874] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.203423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.210474] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.217025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.295910] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 218.302123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.314956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.328548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.340426] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.349530] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.360689] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 218.379425] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 218.385595] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.399419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 218.407139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.415649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.424867] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.431324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.446766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 218.458849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 218.466541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.475019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.483242] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.489681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.498561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.513633] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.525175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 218.536575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 218.547616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 218.555015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.564136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.572877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.581443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.590420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.599186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.607600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.617060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.628507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 218.636393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.645330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.657495] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 218.663681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.688544] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 218.706545] 8021q: adding VLAN 0 to HW filter on device batadv0 12:52:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') syz_open_procfs$namespace(0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/203, 0xcb}], 0x1, 0x80000000000) modify_ldt$write2(0x11, 0x0, 0x0) 12:52:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0af51f023c123f3188a070") keyctl$get_persistent(0x16, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$trusted_overlay_nlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='trusted.overlay.nlink\x00', &(0x7f0000000440)={'L-', 0x3}, 0x28, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='pipefs\x00', 0x0, 0x0) 12:52:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x110) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) 12:52:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) [ 220.559645] binder: 9767:9768 ERROR: BC_REGISTER_LOOPER called without request [ 220.560840] IPVS: ftp: loaded support on port[0] = 21 [ 220.567580] binder: 9768 RLIMIT_NICE not set [ 220.576900] binder: 9768 RLIMIT_NICE not set [ 220.592243] binder: release 9767:9768 transaction 2 in, still active [ 220.598847] binder: send failed reply for transaction 2 to 9767:9768 [ 220.618590] binder_alloc: binder_alloc_mmap_handler: 9767 20001000-20004000 already mapped failed -16 [ 220.629376] binder: BINDER_SET_CONTEXT_MGR already set [ 220.634850] binder: 9767:9768 ioctl 40046207 0 returned -16 [ 220.670869] binder_alloc: 9767: binder_alloc_buf, no vma [ 220.676639] binder: 9767:9770 transaction failed 29189/-3, size 24-0 line 3035 [ 220.686669] binder: 9767:9768 ERROR: BC_REGISTER_LOOPER called without request [ 220.694157] binder: 9768 RLIMIT_NICE not set [ 220.694847] binder: undelivered TRANSACTION_COMPLETE [ 220.703819] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.722113] binder: undelivered TRANSACTION_ERROR: 29189 12:52:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) [ 220.840404] chnl_net:caif_netlink_parms(): no params data found [ 220.876402] binder: 9774:9775 ERROR: BC_REGISTER_LOOPER called without request [ 220.883967] binder: 9775 RLIMIT_NICE not set [ 220.888427] binder: 9775 RLIMIT_NICE not set [ 220.910100] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.916650] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.924748] binder: release 9774:9775 transaction 5 out, still active [ 220.924817] device bridge_slave_0 entered promiscuous mode [ 220.931374] binder: undelivered TRANSACTION_COMPLETE [ 220.941155] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.948762] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.956958] device bridge_slave_1 entered promiscuous mode [ 220.988476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.999558] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.028617] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 12:53:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) [ 221.035664] binder: release 9774:9775 transaction 5 in, still active [ 221.036835] team0: Port device team_slave_0 added [ 221.042293] binder: send failed reply for transaction 5, target dead [ 221.050054] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.062079] team0: Port device team_slave_1 added [ 221.070995] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.092473] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.110308] binder: 9778:9779 ERROR: BC_REGISTER_LOOPER called without request [ 221.118026] binder: 9779 RLIMIT_NICE not set [ 221.122613] binder: 9779 RLIMIT_NICE not set 12:53:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="060000000000000049000000000000000000000000aa"]) [ 221.142929] binder: release 9778:9779 transaction 7 in, still active [ 221.149563] binder: send failed reply for transaction 7 to 9778:9779 [ 221.158131] binder: undelivered TRANSACTION_COMPLETE [ 221.163488] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.173836] device hsr_slave_0 entered promiscuous mode [ 221.247815] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 221.252511] device hsr_slave_1 entered promiscuous mode [ 221.313127] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 221.320601] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 12:53:00 executing program 0: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ptrace$cont(0x3f, r0, 0x31e7cb9e, 0x7f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r0, 0x9, &(0x7f0000000000)) tkill(r0, 0x16) [ 221.394654] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.401170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.408277] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.414810] bridge0: port 1(bridge_slave_0) entered forwarding state 12:53:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f00000022c0)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x430000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x8001001, 0x1000, 0x1}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0xfff, 0x4) [ 221.512551] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 221.518686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.532711] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.547354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.583604] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.605845] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.630918] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 221.664494] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 221.670672] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.695670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.704793] bridge0: port 1(bridge_slave_0) entered blocking state 12:53:00 executing program 0: r0 = socket$inet6(0xa, 0x400080000001, 0x0) r1 = socket$inet(0x2, 0x1, 0x7e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000017000)=0xfffff7fffffffffb, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffffffffff00, 0x3078) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2=0xac141400}, 0x10) [ 221.711246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.760264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.768636] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.775163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.784213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.832159] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.840574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.849298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.857488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.869199] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 221.875427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.920928] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 221.940406] 8021q: adding VLAN 0 to HW filter on device batadv0 12:53:01 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4000c) dup2(r0, r1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000000c0)={r3, &(0x7f0000000140)=""/148}) fgetxattr(r2, &(0x7f0000000200)=@random={'btrfs.', '\x00'}, &(0x7f0000000240)=""/28, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000740)) 12:53:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x3fc, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x100, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='v'], 0x1) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x4}}, 0x10) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x8000108004500b, &(0x7f0000000040)) 12:53:01 executing program 0: unshare(0x800) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@nl=@unspec, {&(0x7f0000000000)=""/252, 0xfc}, &(0x7f0000000100), 0x3c}, 0xa0) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x0, 0x0, 0x0) 12:53:01 executing program 0: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x842, 0x0, &(0x7f00000001c0)={0x0, 0x1, 0x5}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x7}, 0x8) 12:53:01 executing program 1: r0 = socket$inet(0x2, 0xb, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001030014aa7e86620348770000c54cdd3e4dc9003bab64d75d40eaeea9f93fc6d362e9d7500be197ee55089ff06893933855646d79d40ec55cbe4fde94ac9ab53a7cc5d51b9fea00000000000000000000000000000000"], 0x10) 12:53:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x3, 0x3, 0x70000000000000, 0xc97e0d13513c2d74, 0x15a}) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) r4 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="d2c0c7bb730d5014", 0x8, 0xfffffffffffffff8) recvmsg$kcm(r1, &(0x7f0000000880)={&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/15, 0xf}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}, {&(0x7f0000000640)=""/49, 0x31}, {&(0x7f0000000680)=""/171, 0xab}, {&(0x7f0000000740)=""/116, 0x74}], 0x6, &(0x7f0000000840)}, 0x100) keyctl$setperm(0x5, r4, 0x20000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0xc04, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$UI_DEV_DESTROY(r6, 0x5502) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r7, 0x88, 0x65, &(0x7f0000013ff4)={@remote, @dev}, 0xc) close(r7) r8 = dup3(r2, r3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000080)={0x8001005, 0x401, 0x3}) 12:53:02 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0xa000, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = userfaultfd(0x0) close(r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) 12:53:02 executing program 1: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}], 0x18) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x204600, 0x8) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/48) r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e000000100000000000000000214000000000000000000000f2ff00000000000000000038000200000000000000030000000000000f000000000000000000000000000400000c00000000008000f800000000000000"], 0x68) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RGETATTR(r0, &(0x7f0000000380)={0xa0}, 0xa0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:53:02 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) 12:53:02 executing program 1: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0xfffffffffffffcc6) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000643ff8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="6078c6744ff5fc27ee682cdaf65930e31c314dc5754860dc72f5c3fc5ac37838a04226a72b1b389ffc57ce2f4989f76ede77211dda398feebca9003d8b34f374900baddb2c5bda8001ed2dc6ae28f633ebe261b5e17cae44ed3be695c4eadbe8f17f75dc15d9a3235c7260f5184c79722e3bdebe8c1f021cd30326355ecaacece5a60a68599e9d40942945a57bcd5d9c3a4163d9aa15fef873d7"], &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x1008, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r1, &(0x7f000001fff8)='./file0\x00') renameat2(r1, &(0x7f0000000200)='./file0/file0/file0/file0/file0\x00', r1, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 12:53:02 executing program 0: lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.apparmor\x00') perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:53:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7a}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x4000804) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10081, 0x0) 12:53:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1, 0x8000) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000140)={0x4}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5000000) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000080)=0x88) clone(0x80000040000003, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000000c0)) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x6) setitimer(0x1, &(0x7f000000bfe0)={{}, {0x77359400}}, &(0x7f000002c000)) 12:53:02 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x4) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000280)=ANY=[@ANYBLOB="8b0000008e6eb808fea64b1f47d38eb55d0f28bc41e680a32656acdaed7187f112e871a88520763651d9aa5c634fe60c9c2c45b515fba057232925944793c8179e8555641f5d9782cff7b8cfad3e8a9f5d0f17e5673af64d9d9e827ee8a01150004f6116f0a25e4f45261aac49302543a1d54d84f913f9af98987758c59b30bc55db339e635c4df72a87d9d0408123d0141916ff786d81370b637e9e1acd7f58a049a60638db68ac69c70b4619e6b81f39e37cfb43031f927dba7ba7a999c7eb073115d2931a14d52b0d68112ed7437ac080421c762459e5cce1d2cd276a67"]) sendto$rxrpc(r0, 0x0, 0xfffffffffffffe16, 0x0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0x26) 12:53:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x100000001, 0x401}, {}, 0x10000000ff, 0x8000000000000001}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)) 12:53:02 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) socket$tipc(0x1e, 0x0, 0x0) 12:53:02 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x1d, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 12:53:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000040)="ffd5d36c0000cc46801b7beb0f00000101008400", 0x14) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000000)="ff55d36cffba04365d0000000000000101000000", 0x14) [ 223.983261] can: request_module (can-proto-0) failed. 12:53:03 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x44000, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x8005) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f00000002c0)="00de", 0x2, r1) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r3}, &(0x7f0000000480)=""/83, 0xfffffffffffffe12, 0x0) [ 224.037429] can: request_module (can-proto-0) failed. 12:53:03 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000000c0)="a7", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfe33) sendto$unix(r0, &(0x7f0000000140)="117eb116a2c01cef7817c4b982dc0d43402bb18497c45da24e541e61b1f1637e3e3a5f107b3b", 0x26, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x8, 0x4) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) 12:53:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x19c, 0x202000) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x200000) sendmsg$key(r1, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, 0xce, 0x0, 0x22c, 0x2c, 0x70bd26, 0x25dfdbfc}, 0xffffff68}}, 0x1) [ 224.244374] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 12:53:03 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "62fb6403"}, 0x0, 0x0, @planes=0x0, 0x4}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x3, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) 12:53:03 executing program 1: syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@x25={0x9, @remote={[], 0x2}}, {&(0x7f0000000180)=""/241, 0xf1}, &(0x7f00000000c0), 0x41}, 0xa0) unshare(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9201, &(0x7f00000004c0)) 12:53:03 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0xffffffffffffffac, 0xfa00, {&(0x7f0000000040), 0x2, 0xffffffffffffffff, 0x0, 0x4, @ib={0x1b, 0x0, 0x0, {"2ebd7ddaf6e909aa80e26ab6fea93133"}, 0x9ae}}}, 0xa0) sendmsg$rds(r0, &(0x7f0000003b00)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000003580)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/81, 0x51}, {&(0x7f00000032c0)=""/254, 0xfe}, {&(0x7f0000000140)}, {&(0x7f00000033c0)=""/58, 0x3a}, {&(0x7f0000003400)=""/163, 0xa3}, {&(0x7f00000034c0)=""/141, 0x8d}], 0xa, &(0x7f0000003a00)=[@fadd={0x58, 0x114, 0x6, {{0x6, 0x80000001}, &(0x7f0000003640)=0x1, &(0x7f0000003680)=0x3, 0x8, 0x80000001, 0x0, 0x2, 0x4, 0x5}}, @cswp={0x58, 0x114, 0x7, {{0x8001, 0x4}, &(0x7f00000036c0)=0x8000, &(0x7f0000003700)=0x2, 0xfffffffffffffffb, 0x1, 0x0, 0xd5, 0x22, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x5}, {&(0x7f0000003740)=""/251, 0xfb}, &(0x7f00000039c0)=[{&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/80, 0x50}, {&(0x7f0000003900)=""/126, 0x7e}, {&(0x7f0000003980)=""/1, 0x1}], 0x4, 0x0, 0x7}}], 0xf8, 0x44010}, 0x8050) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x100) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000003b40)) ioctl(r1, 0xffffffffffffffaa, &(0x7f0000000180)) 12:53:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000180)={{0x4, 0x1b5040000}, 0x0, 0x1, 0x400, {0x1ff, 0x180000000}, 0x2, 0xfffffffffffffffb}) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x8) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0xfb}}, 0x18) socket$inet(0x2, 0x6, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r2, 0x200) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)={r3, 0x0, 0x96, "cdb6c0a415e2eb73bf3a9fedac525b21671e422c4c03c9f450c6e5fe02da2c44f048b33db480fdf7aea50dd7b3d7043e1f7a297041148ff5a356ea81fe6236e3f360e26260ff4484c07f7f49960e09f6e0484eb8a6d6b3e4c2c39a11018233b1dfef04f975a9264b05cfbf69845e0e31ab348ded45a1b251b90f6322f7fc0f19962540dc90df8b01de2a4d2728e9e01c9d6ea77531ff"}, 0x9e) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x7d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) 12:53:03 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0xffffffffffffffac, 0xfa00, {&(0x7f0000000040), 0x2, 0xffffffffffffffff, 0x0, 0x4, @ib={0x1b, 0x0, 0x0, {"2ebd7ddaf6e909aa80e26ab6fea93133"}, 0x9ae}}}, 0xa0) sendmsg$rds(r0, &(0x7f0000003b00)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000003580)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/81, 0x51}, {&(0x7f00000032c0)=""/254, 0xfe}, {&(0x7f0000000140)}, {&(0x7f00000033c0)=""/58, 0x3a}, {&(0x7f0000003400)=""/163, 0xa3}, {&(0x7f00000034c0)=""/141, 0x8d}], 0xa, &(0x7f0000003a00)=[@fadd={0x58, 0x114, 0x6, {{0x6, 0x80000001}, &(0x7f0000003640)=0x1, &(0x7f0000003680)=0x3, 0x8, 0x80000001, 0x0, 0x2, 0x4, 0x5}}, @cswp={0x58, 0x114, 0x7, {{0x8001, 0x4}, &(0x7f00000036c0)=0x8000, &(0x7f0000003700)=0x2, 0xfffffffffffffffb, 0x1, 0x0, 0xd5, 0x22, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x5}, {&(0x7f0000003740)=""/251, 0xfb}, &(0x7f00000039c0)=[{&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/80, 0x50}, {&(0x7f0000003900)=""/126, 0x7e}, {&(0x7f0000003980)=""/1, 0x1}], 0x4, 0x0, 0x7}}], 0xf8, 0x44010}, 0x8050) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x100) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000003b40)) ioctl(r1, 0xffffffffffffffaa, &(0x7f0000000180)) [ 224.620666] Unknown ioctl -1067953329 [ 224.722047] Unknown ioctl -1067953329 12:53:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000002a974bbe2bb576afb1e415f1ad4813f7cc59a32e5190cc465fd17742a72a544ceb0341590c8fcabd38f6e9793ad8a20286cd612df7089471ec27fbead1a3283cb45a0e0b40f09ec1593bbee61c3dd81f27811c6cdbf18eb5a3fc29e3e5eed09873fedcfa0e6cbe5643b62034ee23d8811ab4cd58110c18c1e4", @ANYRES16=r1, @ANYBLOB="210000000000000000000100000000000000014100000018001700000000000000006574683a7663616e30000000"], 0x34}}, 0x0) 12:53:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0xfffffffffffffef7, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0xffffffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x4000000000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000140), 0x0, 0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x7) 12:53:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x2}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000140)=0x9, 0x4) 12:53:04 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18}, 0x18) sendfile(r0, r0, &(0x7f0000000040), 0xff8) r2 = getpgid(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f00000003c0)=0x3) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={r2, r3, r4}, 0xc) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000180)=0x1) futimesat(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={{0x0, 0x7530}}) 12:53:04 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2040, 0x0) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000029000000040000004c923d83daf4140200ddb0931c3526901ea15b83c60347ed6774888c5440ce06bc02f6f7b99865fb2858b9c4b8f0864dc13fb730e2b6ebb2d7aa4fc9ff19e88807ccdc000000000000564549e287676519fbd340f078bc602fefb8dc0f1bc72fd428af5a9af1cacaa5fabbd8df816ae44dcbb681e9049dab3a5cf903fb806ce7d099428dc11a5638ee86c3627fcc10fea3f8a143e0b34dd2fa957ff4e4ec12d1803a94639fcd4f9f6c4a9802e3a9f33f1c615e65d7b9260cc605b86ee9e1cb72a90f6f0a26b73d63c87b01af18466137c4b8929c13b4c3690116ab7f12cbda31972539410df8b57d947f1ec8108e509300000019fea0d14684ae8bf9"], 0x10c}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x1800, @dev={0xfe, 0x80, [], 0x17}, 0x6}, {0xa, 0x4e24, 0x1, @empty, 0x8}, 0x80000001, [0x1ff, 0xffffffffffff7fff, 0xb7, 0xfffffffffffff3a7, 0x2, 0x1, 0x6, 0x9]}, 0x5c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007d80), 0x6, 0x0) 12:53:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0af51f023c123f3188a070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r1, &(0x7f0000000180)="0cc3bb9d4b661e65778ca0a18d34a14e8a36b826a1b7765b11fe", 0x1a, 0x4000, &(0x7f0000000140)={0xa, 0x4e21, 0x2000000000, @loopback, 0x200}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 12:53:04 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\x00', 0x6) fdatasync(r0) socketpair$unix(0x1, 0x1000007, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x8000000000003, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x501483) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @empty}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r4, @in={{0x2, 0x4e22, @local}}}, &(0x7f00000002c0)=0x84) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) close(r2) 12:53:04 executing program 0: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000cd8ff4)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x17b4, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 12:53:04 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006000)='/dev/ppp\x00', 0x800000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)="ea08", 0x2}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 12:53:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000400)) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x20140) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r4, r5}}, 0x18) 12:53:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000400)) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x20140) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r4, r5}}, 0x18) 12:53:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000400)) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x20140) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r4, r5}}, 0x18) 12:53:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000400)) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x20140) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r4, r5}}, 0x18) 12:53:05 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000ac0)={0x3, 0x3}) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xfffffffffffffffb, 0x400) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000002c0)={"de473e9d59fe83b387be74be72debc65edc349a3fb48f831e37a6a78c2dcb3b9be7b09b5b0cdd29768010bb4d302e697681bdc0770834524da1faf7912c7db2ac5f7f205785459ac3a0b8e810045b30018a4123847b3e70ddc0e039ff3bec5563861e0e0f823522da05d679b7b9426ce6672062ae17b20b3b977cfb44c0d529ae17dc62791360c9be33f6e66f7f31ee7d7ff31c9dc31647227b7932e6da25db1ef33322e56a57de5f2c13956da28ba9629bc4eef213e12dee8e60c8fcc2e2a8a016506d16adcaf9ea25b38c0f434a43ee75cadc6bdc424b6fe6bac7c7c8df9e6dd1b4f6be9d2ab618bf70ba64dc69f4dd3adfac0c3533af1c23b4aa31c7ef7dd007aa0af5ef2f21882bef8a3af18a74301e7dcaf8a81f96d852ae6b172ccecc7a6dd620bfc3607df4d2152899f44f82094af09be58adf6b56c57d2a428d2dfe0a6d4d9324a27a37a12fef83194c794343cd10fb4e9106114c0a784593f7e778394c365b0c2d68e8fe9ee8cbb9f9e3fdffbe3261acd942a45cc6d684fd10fa9a184378c12ed9c186c1ad7dd4741edaedfcf82cb515d4a5dad53599a7f6527e562ea2e6e4af503fba63da91d0f5953f6747077f3f7c1bb6a2f0a635b224a7f644f2c90397dd81f0d9da213c2c2ac6bc12e25916d596f9d2181724c580fe2064b6e8d00e8222ab0424a484faeae08b7a180a5c3b887bde9348bb4e93282f6f0c660e106d75af5f22cfdccb05af73062c56629e4c9da4d46d9c991e559995aad2bb8a61535b9720cac6053d57ddc609b7e53a0621550a06c14b5d8fda1bf86bec6154e0e138c8107c907abc4874c5aabc6c9b597fad53be96f89d0b2274377aad0737c7a6f68b26dc3e8d23565f737fce46446de6760f9ba07720a54664e975357fe5b0499d7e89f2c9346d8223c52b8a611bd603efd9633c1f38cca51f00e1d1774d6c18743a5b7f797b9e2db9ac51827fd07fc66b6fedd10d8b5404911ce1eaa2fd65057eb1b14e90b8c72fed6b7704dcbc232bb1af8f9d3c71571c70ecfff05a2abebb9ff8f7b3804c0e0b2500300ed226ebfc9c4548e226a01db7e1c51656890b3d7f20e2c3ace264cee400cabb187ef1c2ff5f89907d015e4d83f27255aecc7cb2fb534b7fde57c25c9a54eceffec131453dcf27e97c2aaccff51f96a59825c6fefcdff234bce9fade3a4ef86250b99c248cfd6e0bbf88b42f567a4ca5188c644554758c72d02f248c955d65b1feed25b582af9e9acda4813b9e7d8c323c48a41a8e96397009a55935dde06929074ebae65c3f185de5599ea187d4a0e31984ce6969389253aaed3f285fbe6b7a3515345e675715306cbb83e3e3b1b193d9cbcc16cad288c8c6dfac641fbe9af0dfea613fd6b24804559b578f4c2d0e66012d1024e45a8b71165ed9ef2b908fc7eded424773c1749ed298c5e5b601877e862d8"}) unshare(0x20400) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000001c0)=""/237) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000006c0)) 12:53:05 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x1000002400, 0x0) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000180)={0x29}) 12:53:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000400)) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x20140) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r4, r5}}, 0x18) 12:53:05 executing program 2: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8800, 0x0) ioctl$TIOCCONS(r0, 0x541d) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x400, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x1ff, &(0x7f00000000c0)=0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='bcsf0\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x80081) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x81, 0x4) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000001c0)=""/214) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x4, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000002c0)={'bpq0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000300)={0x10}) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000340)={[0xf000, 0x2, 0xd000, 0x10000], 0x7fff, 0x2, 0x3}) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000003c0)={{0xa, 0x4e23, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x29}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x15}, 0x1bfc89a}, 0x401, [0x100000001, 0x1, 0x6, 0x6, 0x4, 0x2000000000, 0x2, 0x40]}, 0x5c) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000440)={0x5, 0x0, [{0xfff, 0x0, 0x0, 0x0, @msi={0x2, 0xf99d, 0x81}}, {0x80000001, 0x1, 0x0, 0x0, @sint={0x100, 0x8}}, {0x4, 0x7, 0x0, 0x0, @sint={0x9, 0x9e19}}, {0x7ff, 0x4, 0x0, 0x0, @adapter={0x3e, 0x763d, 0x0, 0x3, 0xca7fa0}}, {0xffffffffffffff81, 0x3, 0x0, 0x0, @sint={0x0, 0xecf}}]}) readv(r2, &(0x7f0000002900)=[{&(0x7f0000000540)=""/40, 0x28}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/213, 0xd5}, {&(0x7f0000002680)=""/231, 0xe7}, {&(0x7f0000002780)=""/113, 0x71}, {&(0x7f0000002800)=""/226, 0xe2}], 0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f0000002980)={0x7fff, 0x1, 0x800, 0xf33b, 0xc, 0x7, 0x6, 0x0, 0x6, 0x7fff, 0x100, 0x6}) fdatasync(r0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000029c0), 0x4) r3 = getuid() setuid(r3) read$FUSE(r1, &(0x7f0000002a00), 0x1000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003a40)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000003bc0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000003b80)={&(0x7f0000003a80)={0xc8, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffff8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7b62}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003c00)='/dev/vcs\x00', 0x84100, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000003c40)={0x1ff, 0x101, 0x752, 0x3c8}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000003c80)=0x102, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003e40)={r5, 0x0, 0xfb, 0x67, &(0x7f0000003cc0)="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", &(0x7f0000003dc0)=""/103, 0x7}, 0x28) prctl$PR_SET_FPEXC(0xc, 0x0) 12:53:05 executing program 0: 12:53:05 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x101, 0x4200) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000340)=0x10000) creat(&(0x7f0000000380)='./file0\x00', 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r2 = socket$inet6(0xa, 0x7, 0x0) listen(r2, 0x8000000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10080, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000100)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fffd) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f00000000c0)) r6 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f00000001c0)="4c0000001300ff09fffd956fa283b700008c0e07000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x9, 0x0, 0x5, 0x4, 0x7}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000002c0)={r7, 0x5}, 0x8) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x40, 0x100, @empty, 0x1}, 0x1c) fcntl$setflags(r5, 0x2, 0x0) fadvise64(r6, 0x0, 0x2, 0x7) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xcc) 12:53:05 executing program 0: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000001d008100e00f80ecdb4cb9d91f63190408005b00000000fb120001000300000040d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x101000) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x0, 0x2, {0xa, 0x4e20, 0x1a4, @local, 0x4}}}, 0x3a) 12:53:05 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f000058a000)={0x0, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r3 = syz_open_pts(0xffffffffffffff9c, 0x400000) ioctl$VT_WAITACTIVE(r3, 0x5607) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0xfffffffffffffff8, 0x5, 0x4) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/32, 0x2c7}, {&(0x7f0000000280)=""/47}], 0x6) 12:53:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0), 0x0) [ 227.037462] IPVS: ftp: loaded support on port[0] = 21 12:53:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x0, 0xd5e7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 12:53:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000440)=""/97, 0x61}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000300)=""/18, 0x12}], 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xbc, 0x0, &(0x7f0000000380)=[@clear_death, @transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000000), &(0x7f0000000080)=[0x78, 0x78, 0x20, 0x30, 0x0, 0x30]}}, @enter_looper, @acquire={0x40046305, 0x3}, @reply_sg={0x40486312, {{0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x30, 0x28, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r1}, @flat={0x77682a85, 0x0, 0x0, 0x3}], &(0x7f0000000140)=[0x18, 0x28, 0x0, 0x0, 0x40]}, 0x3}}, @acquire={0x40046305, 0x4}, @decrefs={0x40046307, 0x4}], 0xa2, 0x0, &(0x7f0000000240)="97dab5b4e565fafe6c66a78e25094ac98c9277923c75084559e1cd6bba9ddb72c66b3a9e35e8d37f4643cbcc79f3224e8f700ff6f839f2668bad7c0cd2a5c67810c1d650de0103a5233dba74760aad2a7185459784df8227482977879e4577467841ce370c15d8d14acf52e7c96f5c4ca452aa3721aa074a82b2b9aab425309aaad21d1495f99225b8d998362ffc5675f3a8d36d1802faf5b5640d20e8f50cd997e4"}) [ 227.248190] binder: 10013:10014 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 227.256855] binder: 10013:10014 got transaction to invalid handle [ 227.263352] binder: 10013:10014 transaction failed 29201/-22, size 0-48 line 2896 12:53:06 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f0000000140)=0x54) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x281, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x2, 0x0) linkat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x0) [ 227.298040] chnl_net:caif_netlink_parms(): no params data found [ 227.333438] binder: BINDER_SET_CONTEXT_MGR already set [ 227.338792] binder: 10013:10014 ioctl 40046207 0 returned -16 [ 227.362266] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.368758] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.378080] device bridge_slave_0 entered promiscuous mode [ 227.391285] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.397884] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.406440] device bridge_slave_1 entered promiscuous mode [ 227.457629] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 227.468744] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.496504] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 12:53:06 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x802) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x4) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) unshare(0x400) 12:53:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x280) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100), &(0x7f00000001c0)=0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x1000, 0x400, 0x8007, 0x6, 0x38, 0x1, 0x9, 0x0, r3}, &(0x7f00000002c0)=0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00\x00\x00\x00 \x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="cd5f3a8d822a"}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) [ 227.504934] team0: Port device team_slave_0 added [ 227.514042] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.522412] team0: Port device team_slave_1 added [ 227.553943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 227.562374] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 12:53:06 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x2000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000380)="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", 0x1000, 0x1, &(0x7f0000000080)={r1, r2+30000000}) [ 227.656493] device hsr_slave_0 entered promiscuous mode [ 227.701793] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 227.713768] device hsr_slave_1 entered promiscuous mode [ 227.753656] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 227.761051] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 227.816496] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.823038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.830171] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.836735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.948957] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 227.955325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.969312] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.983194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.993184] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.001212] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.015000] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 228.055236] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 228.061378] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.108132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.116406] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.122891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.166570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.174710] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.181226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.190341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.229857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.239636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.250793] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 228.261444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.269811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.277982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.286406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.300305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.313473] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 228.334459] 8021q: adding VLAN 0 to HW filter on device batadv0 12:53:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video36\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000002, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x20000000000000, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) socket$kcm(0x29, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000180)=',', 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x312, 0x585000) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) sendto$inet(r0, &(0x7f0000000b40)="ac", 0x1, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x18800, 0x0) getsockopt$packet_int(r2, 0x107, 0x17, &(0x7f00000001c0), &(0x7f0000000340)=0x4) sendto$inet(r0, &(0x7f0000000040)="acef6a5d63ef92748663a94a7e331d259f451e9e7594b9715f51522ab9d212bdc27442a9aca123bd07be1f326a0d542eebd141062af1f0cc2fdd45078dc5309593fe15f758c7fb0789cf09ee39a831d40a6fbba09fa16c73b2007ca0fa9228f52422602a709562a19257c043c7605345fabd4cb74a219fc92878af30f58e44135c96bb332664b8882b288c0baf5e9ab1c5e80564fe556abdaf47abbb7df373575c9ca2a034acc3f72c36c2b8beb06ee6b1024b007ab547feebe73884dfee", 0xbe, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000400)) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000240)) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/27, 0xfffffffffffffd9d}, {&(0x7f0000000480)=""/72}, {&(0x7f0000000500)=""/97}, {&(0x7f0000000580)=""/12}], 0xfb}}], 0x400000000000049, 0x6, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000003c0), 0x4) 12:53:07 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0xfffffffffffffea5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x200, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000003c0)=0x10000, 0x4) write$selinux_attr(r1, &(0x7f0000000000)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25) 12:53:07 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r1, 0xfffffffffffffffb}, &(0x7f0000000200)=0x8) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) close(r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000002c0)) [ 228.586993] tls_set_device_offload_rx: netdev lo with no TLS offload [ 228.618865] Unknown ioctl 30470 12:53:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000080), 0x9c) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 228.632333] tls_set_device_offload_rx: netdev lo with no TLS offload 12:53:07 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x10000, {{0x2, 0x4e24, @multicast1}}}, 0x98) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000180)=0x4712) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000140)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1}, 0x10) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x7, 0x200000) 12:53:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) sendto(r0, &(0x7f00000006c0)='u', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000010000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9e8212fe44486b966b50a9a125203eb990fef8e116341aa2ad671488ce1589385ecb013e771879acc7dcaaedb86df6cc736b02e8463f0372cffff0000000000007ad01161045cf1fc5eec23744ad3c9ab03"], 0xc9) sendto$inet(r0, &(0x7f0000000e80)="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", 0x1a0, 0x0, 0x0, 0x0) 12:53:07 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x8001, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000400)={0x20, 0x0, 0x7, {0x4, 0x4, 0x4, 0x3}}, 0x20) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000003c0)={{&(0x7f0000009000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket(0x1, 0x8080f, 0x400) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000340)="d467452a0d2075f4aae52ac9738b1b5a", 0x10) getsockopt$inet6_dccp_buf(r2, 0x21, 0x80, &(0x7f00000001c0)=""/58, &(0x7f0000000200)=0x3a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @rand_addr=0x5}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e21, 0xfffffffffffffbff, @mcast2, 0xfffffffffffffffe}}, 0x2, 0x20, 0x3f, 0x0, 0x2000000000003f}, &(0x7f0000000180)=0x98) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x0, @rand_addr=0xf58}}, 0x0, 0x4, 0x0, "79b6c4035790a7ec3c98dd1e766d93784dc5d5158679981362e3b84f7c0ececd7e1d87bb16ca12bfe256695857fd47e65111e717c411ce97673fdfa4b4620f63c97933888a6ddaf8520341917714a0c4"}, 0xd8) 12:53:08 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x10000, {{0x2, 0x4e24, @multicast1}}}, 0x98) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000180)=0x4712) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000140)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1}, 0x10) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x7, 0x200000) 12:53:08 executing program 2: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x4, 0x3c1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) sendfile(r0, r1, &(0x7f0000000100), 0x80000002) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000140)) 12:53:08 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000000c0)) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000380)=""/105) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4100, 0x0) getsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f00000001c0)=""/174, &(0x7f0000000040)=0xae) 12:53:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000080)={r2, 0x1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/stat\x00') fstat(r3, &(0x7f0000001bc0)) 12:53:08 executing program 1: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xec0b) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x7f, "85bb159bf48f5cefa31cf4c19e428997e9f8c27433c6bc71063eb552f38dc8db9f6f63d35c8b530b22cdd515e77c120076b27aeef349a26088edf1b7d0c3038bed9627bed45d98a206dc0f1a148ce75493bc98b546fc17976185da24d71e597e1d9667f987ce73e9aa8606e4fdcd8ce8e2394862d475294962d8e612163a1b"}, &(0x7f0000000100)=0x87) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x9, 0x81}, &(0x7f0000000180)=0x10) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x8000) prctl$PR_SET_TSC(0x1a, 0x2) 12:53:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x2, 0xf2a, &(0x7f0000000080)=0x7fff}) r2 = socket$inet6(0xa, 0x3, 0x2f) fchdir(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x1, 0x0, 0x8}}, 0xe8) connect$inet6(r2, &(0x7f0000000000), 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x40) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000540)={0x2, &(0x7f0000000400)=[{}, {}]}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x37f4ee3c, 0xc, 0xffffffff, 0x7, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, [], 0xb}, 0x4}}}, &(0x7f0000000280)=0x84) write(r2, 0x0, 0xffffffffffffffcb) ioctl$FICLONE(r2, 0x40049409, r0) 12:53:08 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x21, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 12:53:08 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x80000008, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000140)) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x57, 0x4, 0x101, {0x5, 0x1}, {0x1, 0x1}, @period={0x5b, 0x1, 0x7, 0x5, 0x101, {0x5, 0x6f809eee, 0x5, 0xfff}, 0x7, &(0x7f0000000000)=[0x46, 0x0, 0x8, 0x20, 0x118, 0x800, 0x1000]}}) 12:53:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x11, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000000c0)={{r2, r3+10000000}, {0x77359400}}, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_nat_t_port={0x1, 0x18}]}, 0x40}}, 0x0) 12:53:08 executing program 0: prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='ns\x00f\x82}r2\xf2\xf0|<\x14\x85H\x1c\xba\xb6\x06A\x92\xf9\xcc\x84\x8f\xd2~\x8c\x84r\xed\xca\xea\x159\xf0{\xa9\xc65\xd0\xad\xad\x18\x84\xed\"\f\xe5\x02k\xcdk\x1fNcr\x8d\xfd\x1bi\xb6\xaf*L\x9a_w\"\x8d?D\x8f[0\xd9\xb8\xbe^\x89\x9f\xf8\xed\xa1\xe7\xe1\x94J\xfd-\x84\x85\xd9\xa4\x15\xcf\xadP~N\xb3\x91\x8f:\x91\xe5\xbb\x8d\x142\x94}e\x98*H/BC\xdd,lm\xbd\x88\xf5\x85u\xc7C#&t\t\xa9(X:6\x95\xf4\xcd\x8fwX\x8f\xd3\xdeU\xfd\x9aJ,\xdb\x15\xaad\xb3LR\x8aXn\x13U\x93B\xd88\xd5\xf0\xc0$o\xec\x9az\x84\xa13\xe1\xabs\xe5\x9b\x17\xfaJ\x00\xacc\xae7@\xe1\x02\x85h\xab\xa3\x00\r\xce\xf4I]\xc6\xa4\xa9\xdd\xe91v\xc5\xdc:L[\xc8\xe4\xeb\xe1`\xfal\x8e') fstat(r1, &(0x7f0000005080)) 12:53:08 executing program 2: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x0) close(r0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) inotify_add_watch(r0, 0x0, 0x1) 12:53:08 executing program 1: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x262002, 0x0) clone(0x802902001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) exit_group(0xe87) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) 12:53:08 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000b85fe4)={0xa, 0x2000004e24, 0x0, @loopback}, 0x1c) 12:53:08 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'dummy0\x00', 0x400}) sendmsg$rds(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000680), 0x0, &(0x7f0000000040)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000200), &(0x7f0000000280)}}], 0x232}, 0x0) 12:53:08 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1ff, 0x40) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) perf_event_open(&(0x7f0000001a40)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=""/126, 0x3b}) writev(r1, &(0x7f0000000080), 0x1a6) 12:53:09 executing program 0: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffc, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, 0x0, &(0x7f0000000340), 0x0) 12:53:09 executing program 2: r0 = memfd_create(&(0x7f0000000880)='#em1#+\x00', 0x0) ftruncate(r0, 0x8000) write(r0, &(0x7f0000000040)="0600", 0x2) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x4880) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0x7fff, 0x0, 0x8}) sendfile(r0, r0, &(0x7f0000001000), 0xffff) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x9, 0x10000, 0x5}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) keyctl$join(0x1, &(0x7f0000000600)={'syz'}) 12:53:09 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xab10, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x43a801, 0x0) 12:53:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket(0xa, 0x802, 0x88) r2 = socket$netlink(0x10, 0x3, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000000)="480000001400197f09004b0109048c590a88bfffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e0000000000d5a49b19007a9eace3dbe8b12c000000000000000000", 0x48}], 0x1) recvmmsg(r2, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:53:09 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bpq0\x00'}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000940)) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x200}, 0x8) 12:53:09 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x381000, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000000240)=""/68, 0x44, 0xffff, &(0x7f0000000300)={r3, r4+30000000}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8002, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400)="ca", 0x1}, 0x68) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000380)={0x8, 0x4, 0x8000, 0xa6}) ioctl$KDDELIO(r2, 0x4b35, 0x5) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000340)={0x3ac2, 0xd8}) r6 = getpgid(0xffffffffffffffff) ptrace$peek(0x2, r6, &(0x7f00000001c0)) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000200), 0x27e) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/221) 12:53:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000300)={0x1f, 0x10, 0x3, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 12:53:09 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r1, &(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x10000004}, 0xc) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x7f, 0x3}}) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, {0x100d}}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101200, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r2}}, 0x18) 12:53:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000000)) 12:53:10 executing program 0: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000400)="7685427801bf9010063037780953c84a646631712cda943146fb570115931dd1993f8043b788d24c1551cefcb5153d20b4e632697c97193502df6deae7b4c921955fb6086244113182b8f313593c4f226eb613cd2f6ca4a388a9782d215e5884f52b2d7774001bd238965172bacf7a82f5b4ed470000e28d20a1b63316035911bcc91665ae6e37b5246b01389448912f207cafed83929be5e93185db493494ad2ba500000096567028a29b82d3d427d662", 0xb1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) r3 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)="26134e51e2fcd8db63d5288afb543b33be04bf35a994c51ce8c6ac4b056f523e022fd73af1aaba469bb884620f03fa275ff355a54ef80bb9c5278319d1b46d1f7c8ce5bab83834a2c7c6fcfe778be9bf9bcda4162520c9e39f19b0bf222de52d76970aec8de522c9a2424eb8279ae7950ce38ed997f14b76cff8e8b133f12e39c0663228db", 0x85, 0xfffffffffffffff9) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000600)="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", 0x1000, r3) 12:53:10 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) connect$unix(r0, 0x0, 0xffffffffffffff83) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind(r1, &(0x7f0000000040)=@un=@file={0x1, './file0\x00'}, 0x80) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000140)={0x4, 0x40, 0xfffffffffffffeff, 0xffffffff, 0x3, 0x4}) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 12:53:10 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0xfffffff8) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 12:53:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0xfffffffffffffffd) 12:53:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000040)=""/155, 0x9b, 0x20, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) sendmsg$nl_route(r0, &(0x7f0000017000)={&(0x7f0000748000), 0xc, &(0x7f000000b000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000100000000000000000000000000afa2550a37f3f500000000916612be0919d5c2c5a17151c91cd5d132ac8eae17033bfd019e388c75eab44c3ad5176dc123c636ca735b8368f2cb02bb8596edbd3f5afb456a89a177d041fc56e43f38ac3625b261df69645222199094b29e8d2c0371701978d6805cfa8549c261c1c1ee4687853e4191190d8d977b397cde1e6eeaf6064263920c390210", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006c6f0000000000000000000000000000140012000c000100000000000000000004000200"], 0x48}}, 0x0) 12:53:10 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f00000001c0)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r3, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) [ 231.414608] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 12:53:10 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r0 = getpgid(0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0x6) r2 = getpgid(0xffffffffffffffff) r3 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80800) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440), 0x10) r4 = syz_open_procfs(r2, &(0x7f0000000100)='net/ptype\x00\x8d\n\xb8v\xe6\x13V\xaf\xc3\xdb\x818\x10\xb3\xa4iK\xdd\xdb\x91\x1b\x0e>#\xe7\a\x9e5\xe1\xca\xf8B5\xd4\x101\xb3\xae\x1d\x91\x1d]N\x06\xe8\xe8\xe1p\x97\xa3t\xf0eL\x16\xc0H\xf8{d<\xdce\x9a\x83v\xb3r\x91bWoE\xcc\t\xfb \xc7\x1b\xa3\xbb\xa0\x82Ew\x17P[QC\x1a\xfa\x8c\x99\xc3\x1d\xb2\xc1\xb4_IO\xc5\xca\xfa\xa4\x8bo\x7fg\x12\x91)\x1e\xb4\x8a\x00\xf6\xa0\xf1\x83\xef|\xbc\xd8T\xfb\xdcx=\xb0, \xa4\xb7\xae\xe6\x0e\xd7m\xe3\xe5\x82\xae7\xbe\x9e`nl\t&#(\x00\x8e\x91`\xd8\xe0\x15x\xc2\xab\xe9%\xcd\xf0\xf4\xe0?\xa8\xe2\xd8\xb7hB\x13\x02)-w\x8a\x03?\x06\xeb*\xe2\xec\xd5r&\xaa4X') ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000000)={0xa, &(0x7f0000000080)=[{}, {}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000240)={r7, &(0x7f0000000200)=""/45}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYPTR64]], @ANYRESDEC, @ANYRESDEC=r6, @ANYRES64=r5, @ANYRESDEC=0x0, @ANYBLOB="8a6bdcbf9396e5d90c4ed23c687c9a03247095448ca6285ad7a9fdb5ffd91a08eb1d35daa0fd8b4ce5310614b6b34f", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r4, @ANYBLOB="197f162205c95571647ac4b4b847d90e95a4fca3cab7f18384e3124daedbce2a8c70f878ceba977c3af88e33", @ANYRES64=r0]], 0x83}, 0x0) preadv(r4, &(0x7f00000017c0), 0x1fe, 0x20d) 12:53:10 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x19b40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, r1, 0x3a, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x30}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x21}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40040}, 0x4000800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[@mss={0x2, 0x1}, @sack_perm, @timestamp, @window={0x3, 0x8, 0x5}, @timestamp, @sack_perm, @mss={0x2, 0x4}, @sack_perm, @timestamp, @window={0x3, 0x6, 0x3}], 0xa) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000180)={0x4, 0x7fffffff, 0x400, 0x6, 0x10000}) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x4, 0x1, 0x5, 0x8001}}, 0x20, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000100)=0x38, 0x100000001) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f00000000c0)) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x40a00) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000080)='ifb0\x00') 12:53:10 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f00000001c0)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r3, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) 12:53:10 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2000008a, &(0x7f0000000100)=[{0x6}]}, 0xfffffffffffffe66) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='irlan0\x00', 0x10) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) sync_file_range(r2, 0x9, 0x800, 0x6) 12:53:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00040008004000000800005d14a4e91ee438", 0x39}], 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000000100)="5cc9140a0f748072c4ac89d602fd792629b5a31459dc74c2734c49c0c5af144f7f01f20ce48aca332d59b833e35a6fbee69f91a3062d4969060da2d1ef1723dbc58f1bd27897e569847a2c38103fb204026e94acfe2db70292aea99f043548f1de5669256a6c2afbd264a7967156be06bcf9e27a70ac847b71f44ec05cd31987b645be1388cf0f814f6e1ce0edd0beee2c029a57982edaf47e316ada60be6a85b28b91e04c3ce7b100e3463abc16090af278c59f6ac0c2f16ef4a610520208", 0xbf) [ 231.828470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:53:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x6, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="f2", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x80, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x41cb3ed4}, 0x20) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) [ 231.873032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.885119] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 231.906010] netlink: 'syz-executor.0': attribute type 8 has an invalid length. 12:53:11 executing program 1: r0 = socket$inet6(0x10, 0x805, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x46020000}, 0x0) 12:53:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x20404) getsockname(r0, 0x0, 0x0) socketpair(0xa, 0x80003, 0x3d2, &(0x7f0000000000)) 12:53:11 executing program 1: mbind(&(0x7f000051c000/0x4000)=nil, 0x4000, 0x8002, &(0x7f0000000000)=0x7fffffff, 0x5, 0x0) mbind(&(0x7f0000526000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000a1a000)=0x40000000003, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x220401, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x3, 0x1, 0x2000, &(0x7f0000520000/0x2000)=nil}) mbind(&(0x7f000051e000/0xb000)=nil, 0xb000, 0x4003, &(0x7f0000000040)=0x203, 0x2, 0x0) fstat(r0, &(0x7f0000000140)) 12:53:11 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001d5000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00006a2000/0x1000)=nil, &(0x7f0000a87000/0x2000)=nil, &(0x7f0000cd6000/0x4000)=nil, &(0x7f0000c59000/0x4000)=nil, &(0x7f0000533000/0x13000)=nil, &(0x7f0000b61000/0x4000)=nil, &(0x7f0000ab3000/0x3000)=nil, &(0x7f000043e000/0x11000)=nil, &(0x7f000014d000/0x3000)=nil, 0x0}, 0x68) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='^$vmnet0$}\x00'], &(0x7f0000000280)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)=',%^\x00', &(0x7f00000001c0)='mime_type\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='-ppp1\x00'], 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000380)=0x3ff, 0x4) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 12:53:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x3) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x3f, 0x1, 0x1, 0x0, 0x0, [{r0, 0x0, 0x10001}]}) 12:53:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000340)=""/65, &(0x7f00000003c0)=0x41) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x0, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r3 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r3, &(0x7f0000002000)='/', 0x1) sendfile(r3, r3, &(0x7f0000001000), 0xfec) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x6, 0xbff, &(0x7f0000000200)="77f4ab025e8d508b7c26aa13c5968f5e5ebd45c529b19e24461913a05191fca257e04321bd4f834631f8deb9b449a3067a430361de47e9f2cef304b2880998d2fc3624ec1704dc17304b51df940439ccd266b1634d3e3a0d2ecb10f35d2b3cacc91a275e869b911f8df3b5148489ff967425d21486d62435b835a939ce50a212a73817387a8391f642d1a30a598c951cd5084a45bdf059", &(0x7f00000002c0)="c5d2fe87d511c76243460064a66b4f62fca2a2440e52a8aeac2dc0c755d7e1", 0x97, 0x1f}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x5452, &(0x7f0000000080)) 12:53:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x101000, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}]}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x100, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x4, @remote, 0x3}, 0x1c) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) write(r2, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) 12:53:11 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[]], 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000000c0)={0x14}, 0x1b7) msgsnd(r0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/203}, 0xd3, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xd306fbad2a3189c4) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x7) [ 232.533450] QAT: Invalid ioctl 12:53:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_ifreq(r1, 0x100008947, &(0x7f0000000180)={'bond0\x00', @ifru_map}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x10, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) alarm(0x80000000) 12:53:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x8a000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)=0x1) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x28, 0x2b, 0x105, 0x0, 0x0, {0x80000001}, [@typed={0x14, 0x0, @ipv6=@ipv4={[0x4101], [], @multicast1}}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') alarm(0xb4c) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x102, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 12:53:11 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8000, 0x840) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0xffffffff}, &(0x7f0000000140)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'sit0\x00', 0x3}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={@local, @loopback, @local, 0x0, 0x78, 0x0, 0x0, 0x0, 0x40003e}) 12:53:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x30}}, 0x0) [ 233.000849] QAT: Invalid ioctl 12:53:12 executing program 1: r0 = msgget$private(0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000080)={0x9, 0xfffffffffffffff8, 0x101, 0x400}) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x1, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x20, &(0x7f0000000100)=0x1) msgrcv(r0, &(0x7f0000000300)={0x0, ""/30}, 0x26, 0x3, 0x0) 12:53:12 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x87, 0x80140) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x1000, 0xffffffff, 0x100, 0x2372, 0x11, 0xfffffffffffffffc}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$RTC_WIE_OFF(r0, 0x7010) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e23, 0x3, @local, 0x3}, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x22}, 0xabd}, 0x3f, [0x5, 0x6c9, 0x5, 0x80, 0x7fff, 0x56, 0x20000000000000, 0xfffffffffffffffe]}, 0x5c) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) write$P9_RMKDIR(r0, &(0x7f0000000280)={0x14, 0x49, 0x2, {0x2, 0x4, 0x7}}, 0x14) read(r0, &(0x7f00000002c0)=""/4096, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000012c0), 0x13f, 0x5}}, 0x20) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x21000001}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000880) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001480)={0x0, 0xc8}, &(0x7f00000014c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001500)={r3, 0x9, 0x401}, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) r4 = dup2(r0, r1) write$FUSE_LSEEK(r0, &(0x7f0000001540)={0x18, 0xfffffffffffffff5, 0x6, {0x4}}, 0x18) getuid() ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, 0xfffffffffffffffd) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000001580)=0x8, 0x8) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000015c0)=0x0) tkill(r5, 0x2d) ioctl$KDMKTONE(r0, 0x4b30, 0x80000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xec, 0x0, {"22237e20439040b4de9af222505c7754257ba97c816324ac4d9f0b557b25382765472c6c77d439beb78472e806c10aa4ce43891491a68d13a642106cfbf6670dbf75046edc461bc7805f227e099e1ac0c68e6532a521be8a549e9bd844942558de8428f22b307eda0c07630fc3ac153454d47cdee08041a99f861dc4d01ec3d108e9edf6aff87ddaabfa9ede05484f81795d3736ad2a2af460b7863e2af0ed5a4a54a267ade31a2edd3b7e965981ffa495a9767b04750fb21d4452bd62b5c6b99e3eddd17339f844574d59c38ec351a8c16438"}}, {0x0, "6d325357e309c531cd55f42de63e91d65009b30dbe9354aa1f0141322735157a9cc813ef45aaa1cb95af8c6ca3dcc49434e1609eb7b7fc8c95bf04864f757ead792a9c12b10411ed12c22550b8b423104675d40d6635170eef75d2c198db3cf35bbd6b799f144ea3176d7ad01ff87a73badaa159db21d245641a6720154bb385c713f228053c5c0565a9af2ad0fc"}}, &(0x7f0000001780)=""/177, 0x17c, 0xb1}, 0x20) fallocate(r1, 0x1, 0xf4, 0x1ff) [ 233.096816] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 233.107951] bond0: lo is up - this may be due to an out of date ifenslave [ 233.115629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 12:53:12 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x20ffffffdff7fffd, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xa, {0x7b9be95b, 0x100, 0x8001, 0xff6}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)) 12:53:12 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x3) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x600000, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x3, @sdr={0x76317d59, 0x4}}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={r2, 0x2}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x5}, 0x1c) 12:53:12 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) r2 = open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000040)=""/108, &(0x7f0000000100)=0x6c) tgkill(r1, r1, 0x13) 12:53:12 executing program 0: unshare(0x10000) capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='veth1_to_team\x00') 12:53:12 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r3 = getgid() fchown(r0, r2, r3) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000f46000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/156, 0x9c}, {&(0x7f0000000180)=""/159, 0x9f}], 0x2, 0x0) 12:53:12 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) r2 = open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000040)=""/108, &(0x7f0000000100)=0x6c) tgkill(r1, r1, 0x13) 12:53:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="56c0469db3ae19e571b52edf40a538422b34ffc639d5ea3dd1c2ccd7525f7ddf1d1106fa6ba510efe81e7e6d2b6032ec47776a29e1f7edb0d32ebca5cdda5a6232249d3514bd126c5b089c13bd8d38bd000f7ffa3af3a4aaf46d7bfd5bcb5ae5acb37deab0977af6", 0x68, 0x20004005, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000000040), 0xff, 0x4000010) 12:53:12 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0xffffff99) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000040)) write(r0, &(0x7f00000001c0)="c4e1f64e5c17326a0000000000000000", 0x10) [ 233.825725] IPVS: ftp: loaded support on port[0] = 21 12:53:13 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000001, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1e44bfbcd07a8c2a5653f8d2776b12392b4fe0b13e165cf6919356b5cdad5af563cc67e67825f8dc884e280ce528045d093d54a116d7d90850533a47d7d1ae07175aa99763d99db0dfe0e17b0dd3cadb973f132ca98bf00098c84a11e20dc"]) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0xff}) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x80008) 12:53:13 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) r2 = open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000040)=""/108, &(0x7f0000000100)=0x6c) tgkill(r1, r1, 0x13) 12:53:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000040)=""/157, &(0x7f0000000100)=0x9d) writev(r0, &(0x7f000007eff0)=[{&(0x7f0000000000)="390000001100094701bb61e1c30500ff070000000a00000045efffff08009b0019001a000f000000220001070000000004e9ff0006000d0005", 0x39}], 0x1) [ 234.139699] chnl_net:caif_netlink_parms(): no params data found [ 234.219877] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.226620] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.234602] device bridge_slave_0 entered promiscuous mode [ 234.246049] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.252719] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.260655] device bridge_slave_1 entered promiscuous mode [ 234.356500] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 234.367454] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 234.395051] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.403572] team0: Port device team_slave_0 added [ 234.409745] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.418300] team0: Port device team_slave_1 added [ 234.426673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.435317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.515775] device hsr_slave_0 entered promiscuous mode [ 234.672465] device hsr_slave_1 entered promiscuous mode [ 234.912765] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 234.920266] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 234.957997] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.964544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.971694] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.978208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.054183] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 235.060409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.073020] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 235.085807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.094852] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.103817] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.115881] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 235.132655] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 235.138785] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.152139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.159362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.167879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.176118] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.182605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.199370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.211397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.219146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.227747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.236021] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.242540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.251082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.266578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.278084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 235.289834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 235.302369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.311312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.320245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.328692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.337492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.349947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 235.361945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 235.371178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.380951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.392213] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 235.398965] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.406832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.415152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.424001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.432237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.445273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.469137] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 235.493100] 8021q: adding VLAN 0 to HW filter on device batadv0 12:53:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000880)="00dc1f070000003188a070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) getsockname(r0, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) ptrace(0x7, r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x290000, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000180)=""/107) 12:53:15 executing program 1: r0 = socket(0x5, 0x5, 0x3ff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r1, 0x72e, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6e8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x7}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000603, 0x0, 0x1}, 0x7a) 12:53:15 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x7, @sliced}) 12:53:15 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) r2 = open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000040)=""/108, &(0x7f0000000100)=0x6c) tgkill(r1, r1, 0x13) 12:53:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x66, 0x60c40) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000900)={&(0x7f0000013000/0x1000)=nil, &(0x7f0000012000/0x3000)=nil, 0x1000, 0x1}) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1, 0x32, r1, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20002cbd7000fddbdf250200000300840000000000000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @multicast2}, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x15, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x0, "d53ab01df283e4d56fa56f6de7dfc37ae6bf3465656cb58ce6e1f8c9b407690d338413dad7cff42af4f36ead5fe7e28094c1e091133b38330b7922474e1a3d7d55a71fa8a4ae7991eee0d46449b4dfe3"}, 0xd8) close(r0) socket$inet6(0xa, 0x1000000000002, 0x0) r6 = dup3(r2, r4, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x58, 0xf888, @scatter={0x8, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)}, {&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/45, 0x2d}, {&(0x7f0000002040)=""/4096, 0x1000}]}, &(0x7f00000006c0)="b8a6c306a083faf910299dc18504f55113f19dbdce4c955b4e48a8d7082449d3a230171ce1aef878a07d0cd191de6dc185c506eb8e31cb4027fc7ac3190cd783c06465131aa1a20f84e880af1bc02b689e2942cdea7e7b1d", &(0x7f0000000740)=""/247, 0x10, 0x10004, 0x3, &(0x7f0000000840)}) 12:53:15 executing program 1: r0 = gettid() exit(0x0) rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000340)={0x2b, 0x0, 0xffffffff}) 12:53:15 executing program 0: bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) set_tid_address(&(0x7f0000000040)) accept$alg(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000080)="1cf412e1cdc05a3ed0e967d7c5619a5b3924128b6fb91e6eaa918a20de6b6444aea0b69dcf52300aa4224ca8e5089467514c6bbfe867fd231a263e283bf6c52c8b2451c0e398f5f93bafecfb2dda7b393d4fcc2641b5ffec9ddd8b9042548000b89015db65609f7c8731aeefc69b0355bd6873bd61fcdc551ad06cee632dbc6174222700fd079cc36299b7cba32b63d1db2f151ec7aedd3db5e32d2d0254cba117f46c60d54a6ddb9d9487471066c0c922270ce83acac4d523388b05b9bd1340", &(0x7f0000000140)=""/86}, 0x18) 12:53:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x40086603, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$nl_route(r0, &(0x7f0000004040)={&(0x7f0000004000), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x205, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IF_NETNSID={0x8}]}, 0x30}}, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0x81) 12:53:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000, 0x109000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x300, @time={r1, r2+30000000}, 0x3f, {0xd731, 0x6}, 0x9, 0x6, 0x3ff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x75) 12:53:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) r3 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000640)=0xe8) r5 = getgid() r6 = getpgid(0xffffffffffffffff) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000940)=0xc) r9 = getpgrp(r6) r10 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) splice(r0, &(0x7f0000000000), r1, &(0x7f00000000c0), 0x6, 0x0) sendmsg$unix(r2, &(0x7f0000000900)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)="be7b8515885f480f2766590aa4c455ab7549de289c2e6b473f2a35f333", 0x1d}, {&(0x7f0000000240)="ca3444ccd86317a9f06cb610b3906d3173aa828b75a515fffff7bcccb9015eebdc0786f22ddb72aebff07b76176a29a46352416e01233aa1647c0875904c0c7f265e2a08", 0x44}, {&(0x7f00000002c0)="8a9f368e43c57cf28c1a288cb87cbace2ad34d7e69bb5e7e54149470747951e22a1db8075094584bd655a8014c3425e1de4706a6f16b35c71d896e20", 0x3c}, {&(0x7f0000000300)="5e318d0ae05be05f92ed41868df052d93483fc2d012295c0dc4a4c44dc23a561196c3fa5be048d8a495fb21a1d2aa90e415214bc46e7460078bc586d148c7d0291d5d4bb64da7fd200770e51fe66970b9e4785c8c453e579464f9e26bd020e075fc30def27694b07dbfe9b54d506142df5f186a36ace1957e19afe32ab93ee55ccaa25109e6eeb781f6b9e8d", 0x8c}, {&(0x7f00000003c0)="80247be126fa234306e7513b39db50e169d2fb3d90ce0dd56c0f1d7f30b2", 0x1e}, {&(0x7f0000000400)="0d99e3d46a173f2a596e4f051ed71e8d90dd7d28103d57f0eac43622eabfc73dbe8c001de4086d628fa3902b159f7aa20b87def75dc4df8f6be5892ca35fea4b127b055aab630e00d1ebeaa34b18baaef501d6c17a60cc0d8fa23f5cb48431fdad737c418fa76ed28798299e8bf3", 0x6e}, {&(0x7f0000000480)="057f01c4", 0x4}], 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="30000000000079000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0], 0x158, 0x4}, 0x4000000) fcntl$getflags(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080), 0x4) 12:53:16 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) r1 = open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000040)=""/108, &(0x7f0000000100)=0x6c) 12:53:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x172) setsockopt$sock_int(r0, 0x1, 0x100000000000006, &(0x7f00000000c0)=0x800000000000fff, 0x9a6a9eaa6e5557ca) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x10001, 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 12:53:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xfffffe16, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="052a6466000000ed80909e10f45500", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYRESDEC=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 12:53:16 executing program 3: keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000100), &(0x7f0000000080)='eth0))posix_qcl_accesswlan0eth1eth0\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xffffffffffffff80, @loopback, 0xeae}}, 0xb4, 0x4}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0x0, 0x2f8, 0x3c8, 0x498, 0x2f8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, &(0x7f0000000280), {[{{@ip={@multicast2, @multicast1, 0xffffffff, 0xffffffff, 'bridge_slave_0\x00', 'nr0\x00', {0xff}, {0xff}, 0x16, 0x3c8c435ad28d2fc4, 0x28}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x9, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @loopback, @multicast1, @icmp_id=0x66, @gre_key=0x400}}}}, {{@uncond, 0x0, 0x1a8, 0x1d8, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0xe8c, 0x1, 0x2, 0x2}}, @common=@unspec=@conntrack1={0xc0, 'conntrack\x00', 0x1, {{@ipv6=@mcast2, [0x0, 0xffffffff, 0xffffffff, 0x2857e155cb73eb63], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xff000000, 0xffffffff, 0xff0000ff, 0xff000000], @ipv4=@broadcast, [0xffffff00, 0xffffffff, 0xff], 0x9, 0x2e, 0xff, 0x4e24, 0x4e20, 0x4e23, 0x4e21, 0x2, 0x40}, 0x180, 0x2800}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x3, 0x20, 0x1}}}, {{@ip={@rand_addr=0x2, @multicast1, 0xffffffff, 0xffffff00, 'nlmon0\x00', 'ip6gretap0\x00', {0xff}, {0x92dbd4b64e039826}, 0x84, 0x2, 0x8}, 0x0, 0x98, 0xd0}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @remote, @loopback, @port=0x4e22, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @rand_addr=0x1000, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e20, @gre_key=0x100000001}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) socket$inet6_sctp(0xa, 0x1, 0x84) 12:53:16 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0xcd00) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5582405a"], 0x4) [ 237.274300] binder_alloc: 10399: binder_alloc_buf size 3472328296227680336 failed, no address space [ 237.283854] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 237.293428] binder: 10399:10400 transaction failed 29201/-28, size 24-8 line 3035 [ 237.334618] binder_alloc: binder_alloc_mmap_handler: 10399 20fff000-21000000 already mapped failed -16 [ 237.351077] binder: BINDER_SET_CONTEXT_MGR already set [ 237.356636] binder: 10399:10400 ioctl 40046207 0 returned -16 [ 237.367270] binder_alloc: 10399: binder_alloc_buf, no vma [ 237.373045] binder: 10399:10403 transaction failed 29189/-3, size 24-8 line 3035 [ 237.385160] binder: undelivered TRANSACTION_ERROR: 29201 [ 237.401717] binder: undelivered TRANSACTION_ERROR: 29189 12:53:16 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f00000001c0)=0x7) readv(r0, &(0x7f0000395000)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) 12:53:16 executing program 3: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x200, 0x4, 0x1, 0x1, 0x4, 0x3, 0x8001, 0x42d, 0x1, 0x18, 0x7, 0xffffffffffffff0c, 0x90, 0x80000000, 0x5, 0x4}}) r0 = socket(0x40000000009, 0x0, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e24, @local}}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/39, &(0x7f0000000180)=0x27) 12:53:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0xffe, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f00000034c0)=[{&(0x7f0000000300)="49b7f0683ddd0dbf9c68549613c37239b1271761260036e23c9c0131a8e0a6e713b8f161dc5eadd1dda971211a90c0c3f466ffd424404642b5e5f1f8046f828ce5335a8987e758b87a8bf972ca47fc25dabb991d1777bf8e8c53372263ac68f89c330e7b33c11934446e26a238fa0dab84280e8cd85b415561e93f365e67d7de3956eeca4e2ea632cac338c4561c9c99ead04cbc5517525333847535", 0x9c}, {&(0x7f0000000040)="ad651f81ff2aa0711efa9a268b3c2d2a9452b7d44a5efeeb68a3fdc35fe4b5ca2af5552a2c002e0b9f20e6b167d05b25618ab1d7281e2dcfd0e9", 0x3a}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="226a1e121b12ed88a08f01184b0fcdf11cbb88bf6e1d4e1e39119bd72d2ef32352d37fd24089bfab7b8dbe07ffeea6fef22eb757a1239c4ad40853af346be9f4e5b9a162477c465830e896fc61609605ab159aeceed534c016552ff4137861aa008660bd87630db2f1bfa413cd6bf65c69048486cacedfd9129eadbadd47d64af94af353961101a395dd4c981dfc3d887a192f2c9b8cd0e8158edc4fedd5771f7084678524c8db2de6106024d9f1e26702d53d64b91d930897b77b24d3fd902f7fa628b39cee0a9bae1a6f52c3e96254d114564c727fc023ab949f1c16162ead6a91c5f3903f3ae86d0e3f9f5364c94b04b66abe5abc307d", 0xf8}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="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", 0x1000}], 0x6, 0xc) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/34) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x8, 0x3}, &(0x7f0000000100)=0xc) r5 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x7fff, 0x800) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000280)=0xc87b) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={r4, 0x6}, &(0x7f00000001c0)=0x8) 12:53:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0x6, 0x7, 0x80000001, 0x4}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000740)={0xfffffffffffffffe, {{0x2, 0x0, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x9, r2, 0x0, 0x0, 0x1}}, 0x20) 12:53:16 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/166, 0xa6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") ioctl$int_in(r0, 0x800000c0045004, 0x0) 12:53:16 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) r1 = open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000040)=""/108, &(0x7f0000000100)=0x6c) 12:53:16 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfffffffffffffffb}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffff}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x8, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r1, r3}) r4 = socket$kcm(0x2b, 0x400000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) dup3(r4, r4, 0x80000) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x40200) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0xc280, 0x0) getpeername$unix(r5, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x408b6b1) getsockname(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000280)=0xfffffffffffffffb, 0x4) 12:53:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7ff, 0x401}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x7, 0x9}, &(0x7f0000000200)=0x90) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0xfffffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_script(r0, 0x0, 0x0) 12:53:17 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20\x00', 0x1, 0x0) get_mempolicy(&(0x7f0000000600), &(0x7f0000000640), 0x5, &(0x7f0000fff000/0x1000)=nil, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffef7fffffffe, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x8000000000003d, &(0x7f0000000600), &(0x7f00000005c0)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, 0x2, 0x3f}, &(0x7f00000006c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000700)={r4, 0xffff, 0x9a, "3530202904ecdb568161403ab0167b47840967ff0208415d80cc5aa38a268e8df7c816a1168731ce84b3759f87292a584e46c372efc31b925fb0e60fa446d21a941d1fd81c20dad376b0a69518abab5c7d77feb7a057416ac1c8770781cfd9fd2d2c27ce5362b4ba0b2b5c91da455b53b1553c85374e8003a4ff35a708ce19100f6187663c4ea4a3bf8149ca12e6b2412bb2a79808f92a2bfd96"}, 0xa2) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x12280, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="06000000", @ANYRES16=r6, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x40080) 12:53:17 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00') 12:53:17 executing program 4: times(&(0x7f0000000000)) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x20000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4e29}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xef6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x101000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x4) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) sendto$unix(r0, &(0x7f0000000300)="07c22547093cf4cc5633304d996570efbf7802efd25314034dd2779d104ecbabaa897a0b8050d3591304431f099bbea899ed73484aed29d92a5fa9aeebffc13480a50c2f34da0f885eb25d48c9cb0f2eb64e8d5928b3fd8811f851e1f968a5413a4295cc3ff34ccf3c41c66cf3b9fee1fd81", 0x72, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)=0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f00000003c0)='ns/net\x00') setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x17, 0x4) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000440), &(0x7f0000000480)=0xc) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000004c0)={0x28, 0x2, 0x0, {0x2, 0x1f, 0x4}}, 0x28) lgetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@known='trusted.overlay.upper\x00', &(0x7f0000000580)=""/127, 0x7f) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000600)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) lsetxattr$trusted_overlay_opaque(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='trusted.overlay.opaque\x00', &(0x7f0000000780)='y\x00', 0x2, 0x3) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000007c0)) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000000800)=0xf97, 0x4) write$selinux_attr(r0, &(0x7f0000000840)='system_u:object_r:syslog_conf_t:s0\x00', 0x23) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000880)={{0xa61, 0x4, 0xffffffffffff8000, 0x7fffffff00000, 0x9, 0x7f}, 0x3}) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000008c0)=""/199) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000009c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x1, 0x9, 0xed, 0x8c, 0x8000}, &(0x7f0000000a80)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000ac0)={r5, 0x26, "f778e71c37f78297731aac1b06ae105e1be20cd5adb364b85be93d23cf7f7e58e6e8c426b6c3"}, &(0x7f0000000b00)=0x2e) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000b40)={0x100000000, 0x80000001, 0x4, 0x0, 0x0, [{r4, 0x0, 0x5}, {r4, 0x0, 0x3}, {r2, 0x0, 0x81}, {r4, 0x0, 0x78b}]}) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000c00)='tls\x00', 0x4) 12:53:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) dup3(r0, r1, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f0000000100)='/dev/vhci\x00', 0xa, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000015) 12:53:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x95, 0x20000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x100000000, 0x3ff, 0x6}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x2}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x76, &(0x7f0000ad2000), &(0x7f0000000080)=0x144) 12:53:17 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) r1 = open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000040)=""/108, &(0x7f0000000100)=0x6c) 12:53:17 executing program 0: unshare(0x3fffffff) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)) 12:53:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0xe, {0x4da6, 0xed6, 0x80000000, 0x7}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040), &(0x7f00000041c0)=0xcd) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000080)={0x5, 0x0, 0x3016, 0xfffffffffffffffd, 0x3f, {0x7, 0x3800000000000000}, 0x1}) 12:53:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x31, 0x0, &(0x7f0000000080)) 12:53:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x200000) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 12:53:18 executing program 0: unshare(0x20400) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x81, 0xc0400) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240), 0x4) [ 239.360124] IPVS: ftp: loaded support on port[0] = 21 [ 239.705740] chnl_net:caif_netlink_parms(): no params data found [ 239.819574] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.826194] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.834346] device bridge_slave_0 entered promiscuous mode [ 239.852836] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.859336] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.867518] device bridge_slave_1 entered promiscuous mode [ 239.917670] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.929593] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.959251] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.967801] team0: Port device team_slave_0 added [ 239.976036] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.984437] team0: Port device team_slave_1 added [ 239.990644] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.000837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.087728] device hsr_slave_0 entered promiscuous mode [ 240.204053] device hsr_slave_1 entered promiscuous mode [ 240.332970] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 240.340481] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 240.390352] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.396896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.403954] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.410475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.537163] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 240.543508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.579552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.598586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.607672] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.635291] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.656647] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 240.681650] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 240.687791] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.704149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.718383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.726884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.736226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.744538] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.751026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.758649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.767365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.775749] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.782229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.794299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 240.802705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.826475] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 240.833588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.856954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 240.864151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.872933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.897686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 240.905358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.913447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.922341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.937016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 240.949092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 240.956446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.965004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.974035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.982551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.995425] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 241.001790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.043147] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 241.072716] 8021q: adding VLAN 0 to HW filter on device batadv0 12:53:22 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x6, 0x54000) r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x27a) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xb}, 0x7f}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0x6}, &(0x7f0000000140)=0x8) 12:53:22 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:22 executing program 3: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x80000001, 0x3b1, 0x6, 0x868, 0x10}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x5c, "c2f9a72e14e391c2f47057c9a942d01ccd9d2175b9f670abf2dddca5f3600261bb6374e59029640d9838b7ec7ed791c24cb074a0"}, &(0x7f0000000280)=0x3c) r2 = socket$inet6(0xa, 0x5, 0x0) connect(r2, &(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80) setsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000d10ffc)=0x3, 0x5f) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @local, 0x6}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @mcast2}], 0x48) 12:53:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000002a40)=r1) openat$md(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/md0\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f0000001340)=""/107, 0x6b}, {&(0x7f0000000100)=""/16, 0x10}], 0x5, &(0x7f0000001440)=""/216, 0xd8}}, {{&(0x7f0000001540)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f00000015c0)=""/2, 0x2}, {&(0x7f0000001600)=""/70, 0x46}, {&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000001740)=""/128, 0x80}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001840)=""/95, 0x5f}, {&(0x7f00000018c0)=""/72, 0x48}], 0x2}, 0xf9d}, {{&(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001a00)=""/58, 0x3a}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x2, &(0x7f0000002a80)=""/202, 0xca}, 0x6c}, {{&(0x7f00000032c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003340)=""/46, 0x2e}, {&(0x7f0000003380)=""/236, 0xec}, {&(0x7f0000003480)=""/238, 0xee}, {&(0x7f0000003580)=""/130, 0x82}, {&(0x7f0000003980)=""/132, 0x84}], 0x5, &(0x7f0000003780)=""/94, 0x5e}}], 0x5, 0x44000102, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000002bc0)='/dev/vcs#\x00', 0x20000000000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/fuse\x00', 0x2, 0x0) readlinkat(r2, &(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40)=""/48, 0x30) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12:53:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x14013, r0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000080)=0x800) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x80, 0x4) [ 243.652557] kernel msg: ebtables bug: please report to author: Wrong len argument [ 243.690701] kernel msg: ebtables bug: please report to author: Wrong len argument 12:53:22 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:22 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000727000/0x3000)=nil, 0x3000, 0x1000002, r0) rmdir(&(0x7f0000000140)='./file0\x00') futex(&(0x7f00000000c0), 0x400000086, 0x0, 0x0, 0x0, 0x0) [ 243.704257] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:53:22 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0xd, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a34ba9ac"}, 0x0, 0x0, @fd, 0x4}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 12:53:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000002a40)=r1) openat$md(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/md0\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f0000001340)=""/107, 0x6b}, {&(0x7f0000000100)=""/16, 0x10}], 0x5, &(0x7f0000001440)=""/216, 0xd8}}, {{&(0x7f0000001540)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f00000015c0)=""/2, 0x2}, {&(0x7f0000001600)=""/70, 0x46}, {&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000001740)=""/128, 0x80}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001840)=""/95, 0x5f}, {&(0x7f00000018c0)=""/72, 0x48}], 0x2}, 0xf9d}, {{&(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001a00)=""/58, 0x3a}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x2, &(0x7f0000002a80)=""/202, 0xca}, 0x6c}, {{&(0x7f00000032c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003340)=""/46, 0x2e}, {&(0x7f0000003380)=""/236, 0xec}, {&(0x7f0000003480)=""/238, 0xee}, {&(0x7f0000003580)=""/130, 0x82}, {&(0x7f0000003980)=""/132, 0x84}], 0x5, &(0x7f0000003780)=""/94, 0x5e}}], 0x5, 0x44000102, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000002bc0)='/dev/vcs#\x00', 0x20000000000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/fuse\x00', 0x2, 0x0) readlinkat(r2, &(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40)=""/48, 0x30) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12:53:23 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x100) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x0, {0x9, 0xfffffffffffffffa, 0xffffffffffffff7f, 0x7}}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0xffffffff, 0x0, 0xff, 0xffffffffffff8000}}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6e2a}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb463}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffffc0}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2020}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bind$rds(r0, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) prctl$PR_SET_FP_MODE(0x2d, 0x3) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000003c0)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000400)={[0x9, 0x200, 0x40, 0xc398, 0x0, 0x2, 0x7, 0x3ff, 0x1, 0x4, 0x2e5, 0x100, 0xd1b, 0x3, 0x5, 0xffff], 0x2, 0x1000}) r2 = fcntl$getown(r0, 0x9) sched_getaffinity(r2, 0x8, &(0x7f00000004c0)) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x470, 0x140, 0x140, 0x270, 0x388, 0x388, 0x388, 0x4, &(0x7f0000000500), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @multicast1, 0x0, 0x1}}}, {{@arp={@rand_addr=0x80000001, @multicast1, 0xffffff00, 0xff000000, @mac, {[0xff, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x5, 0x4072, 0x3, 0x1000, 0x0, 0x60c3, 'ifb0\x00', 'vlan0\x00', {0xff}, {}, 0x0, 0x210}, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0xffff, 0x40}}}, {{@uncond, 0xf0, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000a40)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @empty}, 0x200, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a00)='syz_tun\x00', 0x9, 0x56cf}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000ac0)={0x48000000000000, 0x0, 0x1, 0xd37}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000b00)={0x80, r3}) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000b40)) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/capi/capi20ncci\x00', 0x401, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000bc0)="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") ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000cc0)) recvfrom$rxrpc(r0, &(0x7f0000000d00)=""/69, 0x45, 0x40002020, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000d80)={0x0, 0x10000000, 0x5, [0x10000, 0x0, 0x1, 0x7, 0xc55]}, &(0x7f0000000dc0)=0x12) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000e00)={r5, 0x3b}, &(0x7f0000000e40)=0x8) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000e80)=0x3) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000ec0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000f00)) r6 = add_key(&(0x7f0000001040)='encrypted\x00', &(0x7f0000001080)={'syz', 0x2}, &(0x7f00000010c0)="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", 0x1000, 0x0) keyctl$read(0xb, r6, &(0x7f00000020c0)=""/55, 0x37) ioctl$UI_DEV_CREATE(r4, 0x5501) 12:53:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "a4695c532a8840cd6fab5414a4526f2c79702ae7d3c6501814b0f7c64161e134364c387ed362863f529d0903deef786d215310eaa4c13c41250db8794e3f0bf1be5e5d1aac357c8b6d3f43c2219de07cd2219aa3c3f251252b86ebd758fdaf0e156ad88b2e624d1e405363aebe4aa0f31ce7f0e51706273ea3b7c2cbd7d77d314a4adb25485c5e5bde9b998ae95c0581836fa841e241749ca8b55b9c4705c4a8714bd7165f7d0999adb658a9507fa64c7a41e58fc346dca457710f13e9699b0e175c7523b55aa74a54e6cccfb463a2d6a89451f85ebd962b042418e5cc266abd4f41bad18eb2639379b55aaf6e89d92d01bfd995274711f8e72094b45a4b79b0995e38b28f6633237f105a7ec050896f833de886c1d31e3c14f48ba185043d7f3ee7231fbfd2cbd31ef3454027c26940714dca40c74dda73812edb9d2adc7354ce2633aeeadbc6c14e169d994d7ac1b68043fc1b3727b2f96706da8c3f3b3771d5beba69188fca57852785f46cb373c19a3374d8c041f92ab3820d2a1eb525237cce0f7a99e0c66cf681e7ea950e062cfaf0e8d8d834da0443703ea2b63568d29cd2d7199b6ef6784e0dc8a8979841d4ddea77b998619e8eae45a9ea9bb1464ad2aa2df228e60a65b5e83ad369bc367b69a8207d8f0904b4c389c973ec705b73b666e2f298d10f57f098ed0af810231358dd151ea5bc03675bf1c9fe6ac570ad628152c8a2b8570d849c8a0460b617fabda499cd10aa0e366b8320e14b1bec56c6a96165d23b9806c0c4f86d2d4677a95a6c0e627aae99c235b06bf1432e7c81dd827e43fff9ecd24f7531ca4cfacf478f66ed764fcf53d773f4b9abe8185a661fdc9727a478f422a4bb1a7edeaf68b1e2ffa68e3068a7de077cedc7554de7a90dd2b2483a47814cc7bc85eb1a972246778db8b33bd522ec79aefa3529a000c58b570b940e55c0484386325f4097b13bf337759b0bec9321fe39e521a546a7563eb675a61ce680dee112f368343ca56332c28f44f95024ae1d77b411abe6ed80c645ce69daee65e2505d13b2d0f2f1dfe35ea7c5340c6eb70c4c34350fbcb9945e2ff4759baf55b01db49b1a7d1011eaee4811150e7f5caf7e93b0746efbc52f5733c74e27b8f4631d3852d544eef295eb18a2bf2369679c2bd9a9c5939803c6ea153d9c15dd4112789060da7b1d5b7e41b718a68a10f1d4f3e3298c16c5ab69a6c7187ddc82f2d3e8cd737afb7187dea3076359fac2b40917305d9f831b2ea698051f6560fc3cc6d24dbd148abe8e58f7d8127a9615ba027aa35aafc88debf06dab3ca38e01977102164747b0eb568009887342bbc14e274e1d12729b770887f9aea18d2ad6441849842d51d41907428ab28e36e815103360ef3c121d5a602231413d2825c0bc1a2f04614920b113e871ae1da79eb4f3a8528effc9e738c48eb2ba7843332b85bcc4d4f4cbce5090967fd6e88cd63a3d03f5c79f36ccc45be3941b3b39fb19e51298b8671930a5772ed878b057572b6db8ece6ac3f46a062a8fccd0a3b9133c0573419e3a2d5b7ab5ca40033e35918449d04428ecb9febcabeff937fba5ee21e75707de789432ec0680d3f952927ebb85e5609aebf96e8c84d88056d369493c875ce0f9e8ae5fac48912a7689914f9be71773d3f004306406cdb761c127382e70a77ac6da6aa98d57a575b218b72e2d90a66bcc130600b52765da0b017bab0e3f3e3689cf1220329ea86a03cd2f6d2b54c95364c839ebbc315153dfbc97d6961d7f0e6db56a93fa1d7afeaf479fe47ac35c92a398be921769f3f7c422cfd5ffc372f85ee3f619974b8c627568430c64d84f6aaf69a1276a7cf4cf57c057257181f15e82fd37271278da6235f34891fc702894cca12001e263d74a6e18a45bc0ebd1600987c3237804507a4923f4700ebcca3684ef35f8e4c0a8b9875cf92aec862519f5c0cdcb1d5b90710a88d39bb919c0820f25685085d179bd48ebce21c4ed697a9def3ad887eb4652ac5919ffb2ff34e78d53123e9c1ae9e50447d77560c3702d818ba1e9f848123f31ca6236457daeda138846b55017b426fd8fe0e65b5c1d8d936bda2e7e9f67ec0faaada6ebafb2440071f0c50aac2f0a5059dce32998799524bd6412c13bbee27b891de386bdc7b4a96a3e495300e82ec8d837b95b9af4b1171ea7640a27f27b3befeed4b864b5442f889b769206d6767b5815a74df960824fbcab31ab93281db2b651a838b790e52fb4c2ed29358cfe44c85f5453af706eb96ebc3140697eb914e803f3965614c15ca7fb5f6c632007fe7c56acdbdb0a197341d44f024cbe174244c0acfb1bd29f0d628d037956ad4434aa3a71ecd29556f3a23fbfc3735904c2ce5e84fd53bbc43e924940f307a81706556c45f53630c311aaae9ce4565aed2339d95bbf3107a90a3b8a6e95e8415a2ae7b8841dac758d52b7bb22cbe0ebad79900e9c7c40cca8799cca66b3571fbecf68e3ea2e3880bc2cbed1ad1dabd69593e1a968da410c5d8538fdc8199ee310a3a2b14c642e388e9f1413bb90f876aa478006554a01f6b0d41d2f5c8b7ff20d7cb79afd13f6ab3f1331a8de154a60da33aac5310c174cd54a79985772fce707da4a9ce7c5b7b60e9a9a58cd0aa4343c45d4acca17b04214076800d3ab346142ebe4bdf3c7094e73a552b1929af8c5a5603188cb751b35a98314694ecbf71c05e7997a322eec7a659c44899f7c53c8d3477d3c36f21577620813b41223aabdc72d772a2f60deb3b55bf1b5c1455371f14b0ad57af2cf6cc5b25793935d9d1fe24a2c54b5d1e45b0d69c7f697ba26595bd30e8361adee3e84b2bb08410435ae348947b1c389d5bb5a97b4654241f9b9bc07d968a6d963200e0f4eed7dc80780dadd6b570a2c5a6e9dd93712e6103bce24db15d906ba03085c06d5d963d3452f742a386661b1679f9a2cae3b9debf35c01a82a5e869cc63aabb113f6a37a3454b134108dfec975ac6192be9c699321ef5280e82e13a58d6c6f68d8d3abcde2d2fd047d8e08650c715932bedc0afbadbfad32dab976687c4d7dfc40d95399716f410d75e8d6b4e5ad85562e5604d1e414cecc3941b2e9cfd1aa2a6f31b2d509420dab96d19fe6627420c0c454f48b9263d2af216ab0858590005d57412234755b706da1a7a145fce8e007969695d00bb462270ac95fd1b483686ff6db7ffe576a8df61d80604443452236e27adbb46d4a70f2e7ccbf1735a9e9fce0f56859fa00c011742f5ded1a3631a8addbd1c412f4b404a6c7164b33f378c95395b8ce6185f90c93a9f6b33f905b03c2089554bef2991428d4d2b27e001926e714eef50ba21b7a9c048cbf2d72576a82b1145f40c9e8a2dd79684fd5c3319a8076b5f88632930542348241ee0c0b737c9474a4448d2a7d1ad2d81a5bcd4566520b678aedbb3c54cdc7dd6d03bb60af951eee9dfa5b92ebd2b6e4edf1cae7feee75c901b8fbef195921076aafce7c34732c3c67093587e25860e94028768b98c1980038fce54fb76d2531b9c3f945630ee9ec1afa2acba1e66d2ccc8b966c0470d5528cfc119c0ba14cf84c5c2a2fbcf99657c3c73ab20b32547275bba54d45eaf49e86622467e82d173d8dcaeaf5eba2a24abbdbeb5bcae6ff222d49eff8994c31297ee3f53ed0595ca90aa6315d30cffb5fdf27bd68f78ff547d4e1b443161c130cdb02f38bd0c5fc5eb86dc8a7cd9c3956d8aec7b9f4d342edffef3b819657f0891be01b974409e7a5b2ae63ac68bd7696e1b6ab1da8ee48ee955a3a12d14ce067c9c3c8b752e37c843fa9f5e9f3a1fff75ad6ff6366b34464a397bf6c74a6488912f2bb8fb379d1806a9a635d969b5818eaf11b7cd7377cc684d71f3745082efa2f49f64a057050c5f5c171b93a64dc93bdf89a181a70d38dae0731e5863c62735d7a4b28419abd22126a00fc9a5a75a74691caddc54d5426b81df6448efebc6b5105c4d648dcc23ae4f9ec7611aaef8030ea44d38952dd9cb32ddb484d3cd4e6b0174c58fd7288352f1639f78f2fd2113523462c4999a92e5d9e0ea1541c3ff9b749b5a37687f0499b1a13fb2590f7c76a1573f673ad8503845257c588c3049350e97ed93e24312ff82620d42f7229c4ac1094203e0b2022e9a6173d000e7644f867bfb7a142d4fc2e35a54de4e9e23516cc5cdce027b62ef24fc32cd10890e4f2fcf26a0f7b40039225ff19ff35ba97d9ecdb6e6d2cd211663dcc0dee1d41409f2d8410bf0bc9ceb490d292a3d97cc34ebc647354d8487b21c306e80b45dc57816924fee5e24e30915967e18a952b007da91d270af88fab23dd420fdb102387503280d436f644ced6868a2ab7ab2b1374969db72ea9c612636b858547a9bb187d2639fc30be948760bc634e572718efd0dad2fe4f6aaf44b0c5823e6854726f1d46bf41dd8691e58a77bdcb9afa63f3b0e1fbb0e5cafa7605406769d62a3f7e399e7d6c138adb02de7f4843783b0dc06f4c4539b02d565e79e81eba20609ba8a8914f74899ab42ac92b03580cfb5e457ca5d0b747a69ab9edd278cb59f7e6bd381a483d92dc866e9ccaf780b91a6f6993bab6f73d52593fe2cda79561ffbed677f5742f7844d284cfd9da34cb64b423073a4b3cff07fa6f18eea3a3ef843146870763c766d16c782517acfa89fb3d273e70dc8ba22a56f1d840c5dc87c31e4df33938c0a0dc78ea35872ae89b23290e786baf581ba3bcd995e5bddf22e6a54a6d6ae093278f6fbbd3e514cfea144d6901073e547d143c329ea2a1f97ab9aa766a2c0324890c8cb1aec1b21c88edfbb8f0d814848f31bd4a0370cc3cba4765c50975c8349da805df6fe1b67904b5aa70687e61f6bef1179e30a9b795704d11bdd7aba532bc48528574a3dfadd9f281c0cbfecd991e32c901b8d7cc57744ce5158f2259473f37e025c3f1ddae6c51cf50c2bc10bbdb17d01ac0f4807043cdadb0530283e52b6e82516603a1d7079bb45ae71c15b23a9877bc2ae706da4331b9ac9ab6e1ec8fd4041894ce2c989dc1c95802e3d443ff2cf05ec7e8348df32ae0202420dadbf6e23de917c76ab512426af82adea7a5fd72fdef2801851905ec73b83bfc8c6e63e572616a687851b8afa9e3f6c1ee357b6ffa917eeacd1005c67bced235f61436cb44dd9bf6842c8ea5ba281f77531e1d08a7a09ef0c19d2cac655bfb81ac4b7ad40083d09d9b83e7d56ada5b972cf6ee53ca693af576fe22cfde1796927aa2b54378884a93e80ecc992cf298ba99e4ad5b9d135af6e237f24c519f078b30ab1fa028438976935751d840a6078ad33f1229adf5663b5ba3c8abcff8ff30183446a62aae8a0937f8bb418e0d0c984c441271ccfc3984cdc23793346cfc36809f5ceec330e73e4f13d5a17726526b6e39931a8de1fb1d998680747f01724b117710759b9d29bf68fda8529473eaeb28182e502220a6bf5cdca4c118d2edaefe1ffac007bdb8f246407dba1f7ae277298b765e448b501e1c57e5f9e620fb6a894506d7e81fa92bd5571b32edaa3fbeb1a84e9dbd2d2e61d31bfface3ad615837f3fa95f2ed37c9e96cc045baedb79ad9c7ff37bd96798e6cce6a8d2fc8453c3a44865e1fae5e5fb551126038ef2ed4f6f7b6e186072aec9d62b8670f972eabdf12f13a1d3be51d037b25ee0552772c1fcfecccfa2bb445a34daeb79d4a1bcfbf70e718091dd72ca46069731c38775136d7256e445b58419ea845dd0f65a8a1daf88c750731a0092297c4c964005bc9cf9ec215f07c18a395b350cab70658bbb", 0xfffffffffffffdd1}, 0xfffffe48) sendfile(r0, r2, 0x0, 0x20020102000007) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:getty_etc_t:s0\x00', 0x21, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0x4, 0x0, 0x0, 0x0) 12:53:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:23 executing program 4: r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd4}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:53:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{}]}) 12:53:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) getpid() 12:53:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000140)='\n\x00\x00\x00\x00\x00\x00') setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) close(r0) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f3190c070e90000000000000000f3e9e84083d052a31fc7b49d97420394cccdd0ef05a0515872468e18072bddf72e2ad8f7e5d5b810997681caba38a639c6524a3895e3ff5a77d29f572d80fdf54e8e030c365d07b589e3f426ab854335fe1e3c9cec11784d45983db73a9ce2423c1eab640ff0d418835503c0706ee77cc9603c02446815") r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r2, 0x1) 12:53:23 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000140)='\n\x00\x00\x00\x00\x00\x00') setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) close(r0) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f3190c070e90000000000000000f3e9e84083d052a31fc7b49d97420394cccdd0ef05a0515872468e18072bddf72e2ad8f7e5d5b810997681caba38a639c6524a3895e3ff5a77d29f572d80fdf54e8e030c365d07b589e3f426ab854335fe1e3c9cec11784d45983db73a9ce2423c1eab640ff0d418835503c0706ee77cc9603c02446815") r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r2, 0x1) [ 244.614339] binder: 10560:10562 ioctl c0306201 0 returned -14 [ 244.663685] binder: 10560:10561 transaction failed 29189/-22, size 24-8 line 2896 [ 244.742274] binder: 10560:10570 ioctl c0306201 0 returned -14 12:53:23 executing program 4: mkdir(0x0, 0x2) r0 = inotify_init1(0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0xfffffffffffffed5) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001e40)) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) fstat(0xffffffffffffffff, &(0x7f00000047c0)) sendmmsg$unix(r2, &(0x7f0000004880)=[{&(0x7f0000002040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002280)="e5c017d93dae44cdd6e82d20302814c88a92ca04eeb77781d13cf9bb55931351f7444552ac26522170badc6daca8f5fecddeb24a9b53b046f624ce81afd2bfa275d6ca9ca94d9870997641", 0x4b}], 0x1, 0x0, 0x0, 0x81}, {&(0x7f00000023c0)=@abs={0x1}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x2, 0x1) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0xfffffffffffffe3c) fcntl$setown(r0, 0x8, 0xffffffffffffffff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) write(r0, &(0x7f0000000400), 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) clone(0x20000000, &(0x7f0000000400), 0x0, 0x0, 0x0) inotify_init1(0x80000) socket(0x2, 0x80801, 0xea) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ptrace(0x4207, r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4013}) ptrace$setregset(0x4209, r4, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) getrandom(0x0, 0x0, 0x3) [ 244.993659] IPVS: ftp: loaded support on port[0] = 21 [ 245.101918] ptrace attach of "/root/syz-executor.4"[10478] was attempted by "/root/syz-executor.4"[10585] [ 245.161876] chnl_net:caif_netlink_parms(): no params data found [ 245.238159] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.244782] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.252823] device bridge_slave_0 entered promiscuous mode [ 245.273116] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.279704] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.287822] device bridge_slave_1 entered promiscuous mode [ 245.316253] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 245.327848] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 245.353501] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 245.362055] team0: Port device team_slave_0 added [ 245.368340] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 245.377036] team0: Port device team_slave_1 added [ 245.383292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.391738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.456207] device hsr_slave_0 entered promiscuous mode [ 245.492523] device hsr_slave_1 entered promiscuous mode [ 245.534073] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 245.541809] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 245.565142] ptrace attach of "/root/syz-executor.4"[10478] was attempted by "/root/syz-executor.4"[10592] [ 245.607531] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 245.715007] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 245.721188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.745221] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 245.757272] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 245.763820] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 245.776787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.784288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.795373] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 245.801466] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.811836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 245.818941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.827390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.835570] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.842106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.850070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.860597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 245.867954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.876450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.884618] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.891057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.901469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 245.909025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.922034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 245.928926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.954912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.963449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.971287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.979218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.987692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.997691] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 246.003888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.023648] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 246.037961] 8021q: adding VLAN 0 to HW filter on device batadv0 12:53:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000140)='\n\x00\x00\x00\x00\x00\x00') setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) close(r0) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f3190c070e90000000000000000f3e9e84083d052a31fc7b49d97420394cccdd0ef05a0515872468e18072bddf72e2ad8f7e5d5b810997681caba38a639c6524a3895e3ff5a77d29f572d80fdf54e8e030c365d07b589e3f426ab854335fe1e3c9cec11784d45983db73a9ce2423c1eab640ff0d418835503c0706ee77cc9603c02446815") r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r2, 0x1) 12:53:25 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000100)) 12:53:25 executing program 1: fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:25 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="91", 0x1}], 0x1, 0x0) 12:53:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)) 12:53:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000140)='\n\x00\x00\x00\x00\x00\x00') setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) close(r0) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f3190c070e90000000000000000f3e9e84083d052a31fc7b49d97420394cccdd0ef05a0515872468e18072bddf72e2ad8f7e5d5b810997681caba38a639c6524a3895e3ff5a77d29f572d80fdf54e8e030c365d07b589e3f426ab854335fe1e3c9cec11784d45983db73a9ce2423c1eab640ff0d418835503c0706ee77cc9603c02446815") r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r2, 0x1) 12:53:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:25 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:25 executing program 4: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:25 executing program 1: syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x880) 12:53:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:25 executing program 5: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:25 executing program 1: r0 = socket$kcm(0x10, 0x800000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) 12:53:26 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) open(&(0x7f0000000300)='./bus\x00', 0x400141042, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:26 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1) 12:53:26 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:26 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x1}, 0x6e) 12:53:26 executing program 4: r0 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$packet(0x11, 0x1, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, &(0x7f0000000600)=@known='security.apparmor\x00') read(r1, &(0x7f0000000200)=""/250, 0xfffffffffffffe25) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = open(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0xfffffffffffffff7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x45) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x34) getgid() r6 = getpgid(0xffffffffffffffff) r7 = getpgid(r6) mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1000002, 0x1010, 0xffffffffffffffff, 0x0) recvfrom$inet6(r4, &(0x7f0000000540)=""/163, 0xa3, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xf3f, @loopback, 0x92}, 0x1c) ioctl$TUNATTACHFILTER(r5, 0x400854d5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x2, 0x7, 0x5, 0x1}]}) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000340), &(0x7f0000000380)=0x4) geteuid() getgroups(0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xee01]) sched_setparam(r7, &(0x7f0000000300)=0x966e) 12:53:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x9b5) 12:53:26 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x80000001) 12:53:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 247.612295] protocol 88fb is buggy, dev hsr_slave_0 [ 247.617833] protocol 88fb is buggy, dev hsr_slave_1 12:53:26 executing program 1: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpgid(0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[], 0x0, 0x2}) 12:53:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:27 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1) 12:53:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xfedb) [ 248.182605] protocol 88fb is buggy, dev hsr_slave_0 [ 248.188113] protocol 88fb is buggy, dev hsr_slave_1 12:53:27 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) [ 248.332222] protocol 88fb is buggy, dev hsr_slave_0 [ 248.337887] protocol 88fb is buggy, dev hsr_slave_1 12:53:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000005800)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0xc, 0x18c}], 0xc}}], 0x1, 0x0) 12:53:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f00000000c0)=""/1, 0x1) 12:53:28 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000000002) 12:53:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000005800)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0xc}], 0xc}}], 0x1, 0x0) 12:53:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:28 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) close(r0) 12:53:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_SECUREBITS(0x1b) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) fallocate(r2, 0x1, 0x0, 0x10000101) write$P9_RMKDIR(r1, &(0x7f0000001280)={0x14, 0x49, 0x1, {0x10, 0x1, 0x5}}, 0x14) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000080)={0x100000000, 0x0, 0x1}) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={r3}) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000012c0)={@initdev, @initdev}, &(0x7f0000001300)=0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001340)='/dev/null\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, 0x8) 12:53:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) 12:53:28 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00', 0x20000015001}) prctl$PR_SET_DUMPABLE(0x4, 0x0) getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 12:53:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:28 executing program 5: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) [ 249.598790] binder_alloc: binder_alloc_mmap_handler: 10777 20001000-20004000 already mapped failed -16 12:53:28 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 12:53:28 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:28 executing program 0: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/4096) 12:53:28 executing program 4: msgget(0x3, 0x30) 12:53:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='attr\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000001440)) 12:53:28 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0605345, &(0x7f0000000440)={0x0, 0x0, 'client0\x00', 0x0, "05148374c65c3e72", "145221e04f0b9ddfe922a911901c2676dfe6c199456a15f0eb8257486a04418b"}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 12:53:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000007c0)=[0x0, 0x2, 0x4, 0x1]) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x01k\x00'}) 12:53:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x80000000, 0x0, 'client1\x00', 0x0, "444b7cda537a7217", "b4fb325ef304d7c2fd4014267af08e16da88c770998b05397099965c281b8e2d"}) 12:53:29 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 12:53:29 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) [ 250.204613] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.211842] bridge0: port 1(bridge_slave_0) entered disabled state 12:53:29 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000240)={0x1}) 12:53:29 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) [ 250.745271] hrtimer: interrupt took 41683 ns 12:53:29 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) 12:53:29 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:29 executing program 4: socket$inet6(0xa, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000001340)='/dev/vcsa#\x00', 0x1, 0x1) write$binfmt_misc(r0, &(0x7f0000001240)=ANY=[@ANYBLOB='s'], 0x1) 12:53:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0605345, &(0x7f0000000440)={0x0, 0x0, 'client0\x00', 0x0, "05148374c65c3e72", "145221e04f0b9ddfe922a911901c2676dfe6c199456a15f0eb8257486a04418b"}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 12:53:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0605345, &(0x7f0000000440)={0x0, 0x0, 'client0\x00', 0x0, "05148374c65c3e72", "145221e04f0b9ddfe922a911901c2676dfe6c199456a15f0eb8257486a04418b"}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 12:53:30 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:30 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:30 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xf0d741) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x1f, 0x7}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 12:53:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:53:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x16f) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40a85323, &(0x7f0000000440)={0x0, 0x0, 'client0\x00', 0x0, "05148374c65c3e72", "145221e04f0b9ddfe922a911901c2676dfe6c199456a15f0eb8257486a04418b"}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 12:53:30 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(0x0, 0x0, 0x13) 12:53:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:30 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc08c5334, &(0x7f0000000440)={0x0, 0x0, 'client0\x00', 0x0, "05148374c65c3e72", "145221e04f0b9ddfe922a911901c2676dfe6c199456a15f0eb8257486a04418b"}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 12:53:31 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 12:53:31 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:31 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000001540)=""/4096, 0x1000) setxattr(&(0x7f0000001480)='./file2\x00', &(0x7f00000014c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000001500)='/dev/vcsa#\x00', 0xb, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x20, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000340)) unlink(&(0x7f00000013c0)='./file1\x00') getgid() arch_prctl$ARCH_SET_GS(0x1001, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_open_pts(r3, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000180)={0x5, 0x6, 0x1}) pselect6(0x40, &(0x7f0000000100)={0xfff}, 0x0, 0x0, 0x0, 0x0) 12:53:31 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x17, 0x4, 0x7, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000380), 0x0}, 0x20) 12:53:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x8a0a}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000280)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) [ 252.448849] : renamed from eql 12:53:31 executing program 4: clone(0x3102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2000000000023) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 12:53:31 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000001540)=""/4096, 0x1000) setxattr(&(0x7f0000001480)='./file2\x00', &(0x7f00000014c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000001500)='/dev/vcsa#\x00', 0xb, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x20, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000340)) unlink(&(0x7f00000013c0)='./file1\x00') getgid() arch_prctl$ARCH_SET_GS(0x1001, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_open_pts(r3, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000180)={0x5, 0x6, 0x1}) pselect6(0x40, &(0x7f0000000100)={0xfff}, 0x0, 0x0, 0x0, 0x0) 12:53:31 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(0x0, 0x0, 0x13) 12:53:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) rt_sigsuspend(&(0x7f0000000080), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:53:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x8a0a}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000280)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 12:53:31 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='pipefs\x00', 0x0, 0x0) [ 252.907797] : renamed from eql 12:53:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x7300}}, &(0x7f0000f6bffb)='GPL\x1d', 0x80, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:53:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:32 executing program 5: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x130, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000e07f0000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000019000000fcffffff0025b87230000000000000000000000006006272696467655f736c6176655f3100000000001000000000080000000000000069703667720900000030000001000000aaaaaaaaaaaa0000000000000789e456a36800000000000000007000000070000000a00000006172707265706c790000000000000000000000000000000000000000000000000c000000aaaaaaaaaaaa000000000000"]}, 0x1a8) 12:53:32 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = creat(0x0, 0x4) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) getsockopt$packet_int(r7, 0x107, 0xfffffffffffffffc, 0x0, &(0x7f0000000280)=0x9d73) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) getgroups(0x0, &(0x7f0000001cc0)) r8 = getpid() ioctl$RTC_EPOCH_READ(r2, 0x8004700d, 0x0) geteuid() request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000200)={0x2}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f00000002c0)) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_open_dev$rtc(0x0, 0x401, 0x0) ptrace(0xffffffffffffffff, r8) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 253.126028] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask 12:53:32 executing program 5: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x130, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) 12:53:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x7300}}, &(0x7f0000f6bffb)='GPL\x1d', 0x80, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:53:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) [ 253.327795] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask 12:53:32 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(0x0, 0x0, 0x13) 12:53:32 executing program 5: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x130, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) [ 253.462207] protocol 88fb is buggy, dev hsr_slave_0 [ 253.467748] protocol 88fb is buggy, dev hsr_slave_1 12:53:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, 0x0) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000000680)=""/219) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r5, 0x1000000) getpid() fcntl$getownex(r2, 0x10, 0x0) r6 = getpgid(0xffffffffffffffff) r7 = getpgrp(r6) sched_setscheduler(r7, 0x1, &(0x7f0000000440)=0x1) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000100)={@dev, @multicast2}, &(0x7f0000000500)=0x8) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000480)={@rand_addr, @multicast1}, &(0x7f00000004c0)=0x8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x5, 0x6, @link_local}, 0xfffffffffffffdfa) sendmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001f00)="58526632f80c4337b4e89670ca211905370be7c7d3b1aba7eaaad849bea63331ae2a8560f1c852dd5a0ce963250c3a2b3b244ddbba15eb4e96bc597dc9a646a165c70737eb2cd677c301363b5f58346130980f9b2b0a8bab73e8a4b6b05028828a8f8d7955c2a12bbefce68383b44884a7fd2e8c71c5bd807424a5f4cee57a3d3c0136f5e8395d7074addffbb05c99864c84de1377f6e0e0e572b33bd659724dc3d5201987e53b0f6c4b1dbf946bc558647abe779a7aa8d41e08991f55699e80a877ca3c611fca91da585d04b6e3aa418818219a9528d08cf0fa927aa24fe103dea7595e06ab0aa6b492f7b477dafd1d83ceebeb095efe7ef84f5f5789183fd9abe845159ca464f504a1715c20aae0f53dd2d66df6da382aa8260e2da82ae32659485d90e2db5b4adf313974497cbadd951afb6b773afe930961d46f6eba50fba07d3e47d29a822dfdda68f09f88f12a5f689e6118fae6bcef9e45a44249fb826ae3b3cb169cd4cc5f846f69206cacba02fc1510db8366d41ebcd54b2b0d3e9a668d14c1ce95dcd6d604917e969d2121d3398cff3e262a3df512c926d9ff8588eac97a232433708eb48838102b79c36394c85d0b4474536fe603acdec139f527319e863e7e15a04783646a2957a9536b454c945b1c17050349b63b1d94ae8d025d0eceea792f9ffc6a9df5e1594e37143c1afe189868a0383ec6cae531aca3fe591517ca5ab41d0794e954523c6625d1e1b9e7a231fd58d9f082556e6a2b5cb268b7d199f12e738b0e2b4379732cd1a0299e30e78f2c30d5c8401868e806204c8a3e5c91cd7fe90f9f8cb90cecb0b570b7a22c6af457040a58cece94459ce04a7cc69b976d5c329aa5850f0fc65b4f328d51ab877cc144bf7737cd2e10549e5be4875d06d82d60c1e0071ffb58653879bfb469ced7b9e373932f815a25dd3e87e8db71782c159eee3e2c4e297f0e61b521f965a62dafdee376593fe86054fb4ef32242b2cde5a0116ccd8630930abe9d25602bf7043b96156b2859390ed1e68f6c7c417d9579887ab128b2eb7a2d34d9873c2246e15a10856e1ed8cb3bcb9bfaea5c3486fed3780d845b865f51f7040779188cb14503893c102d08a9bcdbe7ce48abf649c1fb8e33314e870c51146ce5ca8a5167c2c2bb6485a1a6e6c85530b04783fc36939ad2e567c0f49043e523a31b762a65efcbfee15efee342252b8a6159fdb8c80e594c08abc92bef3e25911d1d52339171a686dac0b4b3b739a982a87bebe28d63d80c23f0b1ab16aacb313376dff3d540d7c16922b5768db6a961d8f7fdfb3b6859e6e14dfb2020e216079def873c897212d28d8c83d190737a90cc99d4c47c43027c3e68e6c35f550d0efe4b08321d3534babecd4118b23ed2a4252b3921f98ce0126c19fda7efd630f2bac9f97c80a3bfb77d8d7b4f8cebffb51ea3025f467952e8c50ea62e0445ff2e30c3476779fb51425e1130394799461f36a6ff560ac7e54a0ca07a565f5210462d1add071260c7fed8ea6c6c1bbbdf16c9f39975cb9762be26027b83ff3400696ccb469b959e34d210ab32a5263ce7e37db83240841a0dd392cab35120a94afd6b1a409fe9c567323d8a0138951a9bd7fad5eeec25c0e5319506042d26e30b4aab47abd272b993add463081a931dca17bc71d271c1552ae660f5dbc1633d6b19187b2368f0936d633faf1c9066bdc36183638a1eaae5a5ac77139b9397ecc2ad1e1e455b413e87c1f4753614d3b4f369f386a90e0b4b96f59ac6ed3c7118764b63d99408f9b37053a59c9b58cccd15b7db953a71a99541aef5aadba4ce9a4db5d61809a88df557365f1e4d8e8f58404e225206fa355f9b62ae2c9861cd5157e44496d1f75a465dfbb634fab46531399fb3a95b5a9c8ce842b0019c58e649efb99d0615df5625a7e82c44da46becbcffb54c800cc99691642566c3191f71d41ee5c9545e38687a349e4c0d35c0dfb91184516108a61e4549b648b120e8aa98680a2842656afe77c49b736aceaf67b13bc912e43e1660c8c78149558985d79406e32339b38618d530c455fd91ee68fc7cc731533ec764adf750f09da0bce8c4ee17ed6971c90516c7f6d2bc652cd416e6b280900d2be194aabb2a5214cbf9ee527dfd3797e4fe20c00184f3d7af21a794f4261d5cf71539951a1a1bcbb3be3d4b2a662d2c4e4bb67cf3a797b6b17492b194fabdd85ec8f71959e45e1ade39d673e992a8423306a195a30f0444a9f9ff67c0f7eb7cb833b58ca14b3dcea8a9523f369ac26dcfe5c4366cf2b502843e6ff0e5c9f655c58a90e6cf6d373df8bbefa00be9c3079c8eaab755387a5792a3e3c78955ceb50aa6cd1afea5f1733af1e41be33231e23ea28e32c85d1f72dc969bf50743cf9f1ed12a5a24b32b9ac1ef6e57f88d8cad9809bdf9d24473a7ed5445dbd27647320526e61e6d7f8b0fac8318d33e7b4b41db1de7d1c0011416f256a6449b66dc3bcdc758201857158ed36d98b1ab2d3dc738c52c71f0ebabfb56a8ab6a298b2453bd37ac86df6f411a1b85e3491ca66c9c662deb7d900bd312379fe44581630817daa8968dee2d60d1258d9f6493795061ec37451650bd45ab561d7075bc543388f6fc660b4211d2db56216ea5a56a387b17ef38efe66af0ca8b79f4cfe89a41ecf71400a3910aacf1fc3909cd5266648f351b0df6d8b44610337cc0c1c52c59766d9644d5aa1ebe972cb8222810e67534697086787e4e4137d65e9bef4688f7dbaafd36a932d2229de77b9225d568a1b501695fad2e726787878eef13a4888a4644297de350956d8329c1733b9526c48faa7f6b845a6ab55bef55949d24af83e16010579e1a8121fcb18aceb06cddcc472a459bf3938325c4e6949951d49f6b5437f19cbdcb467531d2eaaf8e8d534eba6c927860ecccf13f831802ba7a7fe5240104254c6e2dac900afc7dfc32fae4d11ce1709d60aa929da54c6451f533867c5380d1f030b2c211a5447fee72f3fc188727bc678045e9820cfdc652dbc2b73f80418442f9f236b478c8c52f3615c68038bd90f45b38c15e668eeaaec8103eb3582c3467eb36df245a19f0ba647d7e8c7d0f2bf7e4be6368912c2ff3100c632d681efd27b3bc0ce9e1288dc27a18e6b7c17f33a39be7e4a6dc576c77ffdbce674f92402f1a55b05043773efb0d678026d4fee0d32bdafd00370d98fc9163ebcf26678a5a3a4bedf05dc36177cf5681b293ee532feb2a040e835d8fd5f43c7cdb2844afb0b6bf1df7b454ec91df513cf36de5eb7f023efe629628b68204d49543d152a0d5e067cc9db29beb3135b5c1b041e8d5f55d8234aef6a13109631f26b2a8750188f4763965fb3dfe1f7f22fabf418ff2c2ebdcbe18ba40bea979a747a95023be8bd6c1500507f036e309486f1d6d7bbf145edd147e446d1e46924e3d9138df3b8f21bc09f6ec05f38e2818822aea9d32952520e23541ca8fad0ea7f67578e30a6e09c799c999ffc1c55d58777b1ca0fed392b4769863d5f8766cbbf5edcbc212d4be38e9d0efd624cede645b03725d9928d36075e3dd1449041756ddfdbd19d49af1ea6229b86925b9d30698453facd008a87b73b44ee9a2b800b7323cbfda9796020dc7eb7a1583554e95f17e4477f1ce332e46a5869378811a59a7811cebc94c146fc2182409645bb8c9543fc33cd6fb4095b3abf347391fd0b99721d0a986f0868f7ef629b561ade72f5650f83468a50c1a4b2ffa949fc2aeda8722a0ee3dbe19511e810369cf4c0cc851b43bc8949b58c7f0d31d0aaab152fe7c701182b82d420b6d1f6ac2694141771f5a82a96c9c29b459bf334057e8b1ae94e5abcc9d6347e7428779c1b8f2a0fac08d9d355a9aa3f34996c75052ad980487f7cca0f3f8d5c968ff5129052e9c234c3e9b5cc67e0d7f97506fca84ecdf1d17a32fb6c5746fa284c00dddcead7195e35afcd901b9496542f345d85c45b6463400543cd493b4a56554dcccbc1cd0e77f03bbe37e338df6b49442d69d83210d0d311094970c13e37e9a2cb58e85f8aa707c7ffdcef51701600915cd05f5bf94988aa74d9701372e86117f64cf0876626c3b0033d9722a8a8e0253b98b55ea540a7ea597f51f642a11ff84e7266f13ebcdf5189c5d3fed07b3a4b9b9ebc410920c3306ecae75031565b36f083bd06714aebe68f78815af86aa53c0abcbcc507839b7cf94225112632a44ed215fd70bbc6de6659e9f794ff6000cc8386b22a9e8a410a15bc1216c03f841870e335be5f721e5637bb552d5ea37bd5c6f7fa77cc9c4750dc6dbf83a177683565358ad0551380240624bea9541e7c69a9d7acd45780b6c3e07471b80e32edcf317adb99e2db150b1531067483b3dc93ad54318d8c6c54ad5deb82c7c67c7947a67956be78c108f9ea9bd7a6c99d75bae65b9a5dcd6983d964488c0df893b28624b76e90c47e9d83777563f8cbad2c4fb121cdfcfb8af1c0597c9db8fe2760827d71ed9fbdbd25ef69766284dbadf9892fd6840c8cb6ceae0e1d861afaf2fe7be1e05949d74d1df7fedd7ef0ac6c1690aa8181c8a0e368f67efe80e952e7cd4192259b2ebb6c921fc38493e7b5d8324e97cf40eb192ef1ec4a35ca8da5e870366977467eafb9cefe935e719f96ce7155c31bf865a626733682ba9075e32f9a27fc5b0b12e8c24571e6a6305bc83c6a9c3be3c0a5b9a36d3ceddd593d1e7c9518843902bc805f5a8a18891fb0eca89f63d45c545be16257df1a55bf620b12a9ee24003df4c15056097ac4cc5ac13c8276f0f447488ff3f3036541e1d2cf159d5296d033b4bc0219506a80dd226128c70f0ce913d2f40483e150c0b0ae4e21fbf91a73eedc73ebc5b0f73db57c24486b8eeb55a4fe7091cf2e39da38a1bcc44fc5e117360eb4937dcd8afd6ff730fb845b4b413c529360f792d06ff1f1d90d840cdd9a08e8ef63936b3315212891330c08da4883416f6257ec9e157ad688d4d080c0fec17fa7f9807ab21d339b09e0340cd426b9509f72ea3cc97aaea3f5f10561d981226ab0910c03af031488df896ca4e4b8211295843e3eb40cb7578e6d8b3db239547c6c970ac726e571599d1e49199f3763a047c26a6f462b9fe0f071c10f470a1ab3cd00b98f9b6f821d0686e86fe61e770a9008a0327739476dd12971e8ab7ac49c5b1017fa2823eb36f04b7e462a43a58a3473c5f9c5dc38eb554ff7f98ae782f5ae090f9913573533622bb4a84e4c007b49c799229c7a047cf99e8f110842131cbf788abaca1081013e317f35217c750378376de216170a678ae281a912b9d200d130e46f073467bd9e065c352eaa960373e124ede8d1ce1f4ff2b58a7ac7e840ff9451c06201995584825d0057440a4d3576a78e9738382e8d085b15ec2e6f909ebc69e81a476b5a100b81afe35a4ac24d18878b022fec676fadcbfeca7fe7dc7f27a301c248f36d2fc0bb230cf3246eaa5d8454fcf07317410e54b290e6b5125a15c1fdceb8ca36ae62c6842a406fc1da41363b492be5664da1ade4cbf13060cdd57987d9a89510aa3cc5adcb6c207e40c84c04d782610ab28664037f2c0026e98ffdde83e58c2493f4b3cc55de43645706e82aeed2ba40450b1ad9a98c40c1cc9fd113e768d5c5b87c147f064f8aa30fb27cf0fbace35016dc841606543031059188d862f3396c8f52f28e92268cc60555123430b7e2b6de9a0076a91d8609ef38911c2a9e4df268ba80a1df1ec558d1cec38a9b9aa25519d3473f178d53bfe1b343328c0630682a", 0xff8}], 0x1}, 0x80}], 0x1, 0x0) [ 253.556913] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask 12:53:32 executing program 5: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x130, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) [ 253.612264] protocol 88fb is buggy, dev hsr_slave_0 [ 253.617864] protocol 88fb is buggy, dev hsr_slave_1 [ 253.732780] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask [ 253.854053] protocol 88fb is buggy, dev hsr_slave_0 [ 253.859544] protocol 88fb is buggy, dev hsr_slave_1 12:53:33 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 12:53:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x3, 0x0, &(0x7f0000006700)) 12:53:33 executing program 4: r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 254.412455] protocol 88fb is buggy, dev hsr_slave_0 [ 254.418087] protocol 88fb is buggy, dev hsr_slave_1 [ 254.572208] protocol 88fb is buggy, dev hsr_slave_0 [ 254.577898] protocol 88fb is buggy, dev hsr_slave_1 12:53:34 executing program 1: 12:53:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:34 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2d1fed740c76f603, 0x31, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="60000000ff0f"]) 12:53:34 executing program 4: 12:53:34 executing program 0: 12:53:34 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:34 executing program 0: 12:53:34 executing program 4: 12:53:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000003c0), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000400)="64ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3193e66430f3a0ce397") clone(0x1a00100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000300)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) 12:53:34 executing program 1: 12:53:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:34 executing program 0: 12:53:34 executing program 4: 12:53:34 executing program 1: 12:53:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:34 executing program 0: 12:53:34 executing program 4: 12:53:35 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:35 executing program 5: 12:53:35 executing program 1: 12:53:35 executing program 4: 12:53:35 executing program 0: 12:53:35 executing program 4: 12:53:35 executing program 1: 12:53:35 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:35 executing program 5: 12:53:35 executing program 0: 12:53:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:35 executing program 1: 12:53:35 executing program 4: 12:53:35 executing program 5: 12:53:35 executing program 1: 12:53:35 executing program 0: 12:53:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:35 executing program 5: 12:53:35 executing program 4: 12:53:36 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:36 executing program 1: 12:53:36 executing program 0: 12:53:36 executing program 5: 12:53:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:36 executing program 4: 12:53:36 executing program 1: 12:53:36 executing program 5: 12:53:36 executing program 4: 12:53:36 executing program 0: 12:53:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:36 executing program 5: 12:53:37 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x4000005) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x13) 12:53:37 executing program 4: 12:53:37 executing program 0: 12:53:37 executing program 1: 12:53:37 executing program 5: 12:53:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 12:53:37 executing program 0: 12:53:37 executing program 5: 12:53:37 executing program 4: 12:53:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 12:53:37 executing program 1: 12:53:37 executing program 5: 12:53:38 executing program 1: 12:53:38 executing program 2: creat(&(0x7f0000000700)='./bus\x00', 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:38 executing program 0: 12:53:38 executing program 4: 12:53:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 12:53:38 executing program 5: 12:53:38 executing program 4: 12:53:38 executing program 1: 12:53:38 executing program 5: 12:53:38 executing program 0: 12:53:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)) 12:53:38 executing program 4: 12:53:38 executing program 1: 12:53:38 executing program 2: creat(&(0x7f0000000700)='./bus\x00', 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:38 executing program 0: 12:53:38 executing program 5: 12:53:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)) 12:53:38 executing program 1: 12:53:38 executing program 4: 12:53:39 executing program 5: 12:53:39 executing program 4: 12:53:39 executing program 0: 12:53:39 executing program 1: 12:53:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)) 12:53:39 executing program 0: 12:53:39 executing program 2: creat(&(0x7f0000000700)='./bus\x00', 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:39 executing program 1: 12:53:39 executing program 4: 12:53:39 executing program 5: 12:53:39 executing program 0: 12:53:39 executing program 3: 12:53:40 executing program 4: 12:53:40 executing program 0: 12:53:40 executing program 5: 12:53:40 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x280, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) clone(0x4800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000180), 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000500)) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) r3 = getgid() fchownat(0xffffffffffffffff, 0x0, 0x0, r3, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) get_robust_list(0x0, &(0x7f00000003c0)=0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = dup2(r0, r0) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0xfffffebd) 12:53:40 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:40 executing program 1: 12:53:40 executing program 1: 12:53:40 executing program 0: 12:53:40 executing program 4: 12:53:40 executing program 5: 12:53:40 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:40 executing program 0: 12:53:40 executing program 4: 12:53:40 executing program 1: 12:53:40 executing program 5: 12:53:41 executing program 3: 12:53:41 executing program 0: 12:53:41 executing program 4: 12:53:41 executing program 1: 12:53:41 executing program 5: 12:53:41 executing program 1: 12:53:41 executing program 4: 12:53:41 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:41 executing program 5: 12:53:41 executing program 3: 12:53:41 executing program 0: 12:53:41 executing program 4: 12:53:41 executing program 1: 12:53:41 executing program 5: 12:53:41 executing program 3: 12:53:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xffffffff, 0x6) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7}, 0x7) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x8001, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000100)) read(r0, &(0x7f0000000380)=""/198, 0x174) 12:53:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000300)={0x0, 0x0, 'client0\x00', 0x0, "5833f358574ad313", "a80830fb126b1165d3c5279fbb22b02efc23002241440d34c25e98b525fc6903"}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 12:53:41 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfff}, 0x0, 0x0, 0x0, 0x0) 12:53:41 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfff}, 0x0, 0x0, 0x0, 0x0) 12:53:42 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:42 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) syz_open_pts(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfff}, 0x0, 0x0, 0x0, 0x0) 12:53:42 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x80, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) readlink(0x0, &(0x7f0000001540)=""/4096, 0x1000) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) syz_open_dev$sndtimer(0x0, 0x0, 0x2) syz_open_pts(r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0xfff}, 0x0, 0x0, 0x0, 0x0) 12:53:42 executing program 5: 12:53:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x8a0a}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000280)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) [ 263.437900] : renamed from eql 12:53:42 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 12:53:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 12:53:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{}, 'port1\x00'}) [ 263.624363] binder: 11396:11397 ioctl c018620b 0 returned -14 12:53:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000300)={0x0, 0x0, 'client0\x00', 0x0, "5833f358574ad313", "a80830fb126b1165d3c5279fbb22b02efc23002241440d34c25e98b525fc6903"}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 12:53:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x232}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) [ 263.702756] binder: 11396:11407 transaction failed 29189/-22, size 0-0 line 2896 12:53:42 executing program 0: 12:53:42 executing program 3: 12:53:43 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:43 executing program 4: 12:53:43 executing program 3: 12:53:43 executing program 0: [ 264.374162] binder: 11396:11407 ioctl c018620b 0 returned -14 12:53:43 executing program 3: [ 264.420831] binder: 11396:11407 transaction failed 29189/-22, size 0-0 line 2896 [ 264.423430] binder: undelivered TRANSACTION_ERROR: 29189 [ 264.462476] binder: undelivered TRANSACTION_ERROR: 29189 12:53:43 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:43 executing program 5: 12:53:43 executing program 0: 12:53:43 executing program 1: 12:53:43 executing program 0: 12:53:43 executing program 5: 12:53:43 executing program 3: 12:53:43 executing program 4: 12:53:43 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:43 executing program 0: 12:53:43 executing program 3: 12:53:43 executing program 5: 12:53:44 executing program 4: 12:53:44 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:44 executing program 1: 12:53:44 executing program 0: 12:53:44 executing program 3: 12:53:44 executing program 0: 12:53:44 executing program 4: 12:53:44 executing program 5: 12:53:44 executing program 1: [ 265.266362] cgroup: fork rejected by pids controller in /syz2 12:53:44 executing program 3: 12:53:44 executing program 0: 12:53:44 executing program 5: 12:53:44 executing program 1: 12:53:44 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:44 executing program 4: 12:53:44 executing program 3: 12:53:44 executing program 0: 12:53:44 executing program 4: 12:53:44 executing program 5: 12:53:44 executing program 1: 12:53:44 executing program 3: 12:53:44 executing program 0: 12:53:45 executing program 5: 12:53:45 executing program 4: 12:53:45 executing program 1: 12:53:45 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:45 executing program 3: 12:53:45 executing program 0: 12:53:45 executing program 5: 12:53:45 executing program 4: 12:53:45 executing program 1: 12:53:45 executing program 1: 12:53:45 executing program 4: 12:53:45 executing program 5: 12:53:45 executing program 0: 12:53:45 executing program 3: 12:53:45 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:45 executing program 4: 12:53:46 executing program 1: 12:53:46 executing program 5: 12:53:46 executing program 3: 12:53:46 executing program 0: 12:53:46 executing program 4: 12:53:46 executing program 1: 12:53:46 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:46 executing program 3: 12:53:46 executing program 5: 12:53:46 executing program 4: 12:53:46 executing program 0: 12:53:46 executing program 1: 12:53:46 executing program 3: 12:53:46 executing program 5: 12:53:46 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:46 executing program 1: 12:53:46 executing program 0: 12:53:46 executing program 4: 12:53:46 executing program 3: 12:53:46 executing program 0: 12:53:46 executing program 4: 12:53:46 executing program 0: 12:53:46 executing program 1: 12:53:46 executing program 5: 12:53:46 executing program 3: 12:53:47 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000), &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:47 executing program 3: 12:53:47 executing program 4: 12:53:47 executing program 0: 12:53:47 executing program 5: 12:53:47 executing program 1: 12:53:47 executing program 4: 12:53:47 executing program 3: 12:53:47 executing program 0: 12:53:47 executing program 5: 12:53:47 executing program 4: 12:53:47 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000), &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:47 executing program 1: 12:53:47 executing program 5: 12:53:47 executing program 0: 12:53:47 executing program 3: 12:53:47 executing program 4: 12:53:47 executing program 5: 12:53:47 executing program 1: 12:53:47 executing program 4: clock_adjtime(0x0, &(0x7f00000004c0)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) 12:53:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0xf000, 0x80, 0xc2, 0x4000000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 12:53:47 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f"], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x940, 0x0) 12:53:48 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa24a830020200a000900010001e700000000a3a20404ff", 0x24}], 0x1}, 0x0) [ 269.046332] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 12:53:48 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000), &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:48 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socket$inet6(0xa, 0x2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) getsockopt$packet_int(r5, 0x107, 0xfffffffffffffffc, 0x0, &(0x7f0000000280)=0x9d73) getgroups(0x0, &(0x7f0000001cc0)) r6 = getpid() request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000200)={0x2, r6}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000002c0)={'\x00', 0x69}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_open_dev$rtc(0x0, 0x401, 0x0) ptrace(0xffffffffffffffff, r6) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:53:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d905631912080003003b000000120001000300000040d819a9060015000000", 0x2e}], 0x1}, 0x0) 12:53:48 executing program 0: r0 = inotify_init() readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/6, 0x8}], 0x1000000000000015) creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x27) creat(&(0x7f0000000180)='./file0\x00', 0x0) 12:53:48 executing program 5: r0 = open(&(0x7f0000000080)='./file0\x00', 0x2000000000040c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) readahead(r1, 0x5, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="27f51f023c193f3188a070") sendfile(r0, r1, 0x0, 0x10000) [ 269.236017] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 269.253825] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 269.292207] net_ratelimit: 2 callbacks suppressed [ 269.292221] protocol 88fb is buggy, dev hsr_slave_0 [ 269.302708] protocol 88fb is buggy, dev hsr_slave_1 12:53:48 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000000002) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) chown(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x0) 12:53:48 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f00000006c0)='user\x00', &(0x7f0000000700)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x9) 12:53:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000300)=""/4096, 0x0, 0x1000}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000040)={'gretap0\x00', @random="01003a1e2410"}) 12:53:48 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) dup3(r2, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 12:53:48 executing program 0: 12:53:49 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f"], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x940, 0x0) 12:53:49 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 12:53:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 12:53:49 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bd120000000000008500000006000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) 12:53:49 executing program 4: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x130, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) 12:53:49 executing program 5: write(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f00000006c0)='user\x00', &(0x7f0000000700)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, r0) [ 270.352271] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask 12:53:49 executing program 0: [ 270.424927] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask 12:53:49 executing program 5: 12:53:49 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:49 executing program 4: 12:53:49 executing program 0: 12:53:50 executing program 4: 12:53:50 executing program 5: 12:53:50 executing program 1: 12:53:50 executing program 0: 12:53:50 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f"], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x940, 0x0) 12:53:50 executing program 4: 12:53:50 executing program 5: 12:53:50 executing program 1: 12:53:50 executing program 0: [ 273.792499] device bridge_slave_1 left promiscuous mode [ 273.798224] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.953388] device bridge_slave_0 left promiscuous mode [ 273.959151] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.995810] IPVS: ftp: loaded support on port[0] = 21 [ 276.523656] device hsr_slave_1 left promiscuous mode [ 276.565456] device hsr_slave_0 left promiscuous mode [ 276.605452] team0 (unregistering): Port device team_slave_1 removed [ 276.617195] team0 (unregistering): Port device team_slave_0 removed [ 276.627537] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 276.675959] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 276.744334] bond0 (unregistering): Released all slaves [ 276.905617] chnl_net:caif_netlink_parms(): no params data found [ 276.944274] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.950689] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.958383] device bridge_slave_0 entered promiscuous mode [ 276.966133] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.972905] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.980629] device bridge_slave_1 entered promiscuous mode [ 277.003639] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 277.014854] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 277.036524] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 277.044178] team0: Port device team_slave_0 added [ 277.049837] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 277.057845] team0: Port device team_slave_1 added [ 277.064037] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 277.071888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 277.114169] device hsr_slave_0 entered promiscuous mode [ 277.161997] device hsr_slave_1 entered promiscuous mode [ 277.202619] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 277.210180] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 277.272393] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.278802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.285826] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.292351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.339948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.350207] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 277.364645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.376283] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.384560] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.406431] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 277.412721] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.429504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.438093] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.444616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.498433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.506713] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.513244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.523851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.532849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.541168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.557869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.565947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.577682] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 277.584142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.605969] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 277.625490] 8021q: adding VLAN 0 to HW filter on device batadv0 12:53:57 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) 12:53:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0xfffffe9f) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) munmap(&(0x7f0000022000/0x3000)=nil, 0x3000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:53:57 executing program 1: 12:53:57 executing program 0: 12:53:57 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f"], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xe9926194}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x940, 0x0) 12:53:57 executing program 0: 12:53:57 executing program 1: 12:53:57 executing program 4: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 12:53:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) 12:53:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:53:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) [ 279.042237] binder: 12267:12269 ERROR: BC_REGISTER_LOOPER called without request [ 279.049949] binder: 12269 RLIMIT_NICE not set [ 279.126899] input: syz1 as /devices/virtual/input/input5 [ 279.243318] input: syz1 as /devices/virtual/input/input6 12:53:58 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 12:53:58 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ca9ca2322a2479638fd1b21f88f142f31c8d7f68d2360a845e81dfbd87bf9966fc0b9fa594066a9ae877eba555c909c54618ac8ccd9d339fc07041d5f0b46010", "47494a068dcf5affae3f00e15996336d4c908eda7300"}) 12:53:58 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001200)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\xcd\xca\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\xc0\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\x02\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f') 12:53:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) memfd_create(0x0, 0x0) 12:53:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 12:53:58 executing program 0: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, 0x0}) 12:53:58 executing program 3: r0 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x54) [ 279.720997] binder: 12301:12304 got transaction to invalid handle [ 279.727520] binder: 12301:12304 transaction failed 29201/-22, size 0-0 line 2896 [ 279.766665] binder: BINDER_SET_CONTEXT_MGR already set [ 279.772779] binder: 12299:12303 ioctl 40046207 0 returned -16 [ 279.773413] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.780168] binder: 12269 RLIMIT_NICE not set [ 279.789761] binder: 12299:12303 ERROR: BC_REGISTER_LOOPER called without request [ 279.797999] binder: 12303 RLIMIT_NICE not set [ 279.805880] binder_alloc: binder_alloc_mmap_handler: 12267 20001000-20004000 already mapped failed -16 [ 279.817292] binder: BINDER_SET_CONTEXT_MGR already set [ 279.822806] binder: 12267:12310 ioctl 40046207 0 returned -16 [ 279.831011] binder: 12267:12269 ERROR: BC_REGISTER_LOOPER called without request [ 279.845465] binder: release 12267:12269 transaction 19 in, still active [ 279.852913] binder: send failed reply for transaction 19 to 12299:12303 12:53:58 executing program 4: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 12:53:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:53:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = dup2(r2, r1) write$FUSE_IOCTL(r3, 0x0, 0x0) 12:53:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), 0x10) listen(r0, 0x7e) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x200000, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x7530}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) flock(r0, 0xf) write(r1, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000600)="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", 0x1000) sendto$inet6(r2, &(0x7f00000002c0)="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", 0xff, 0x800, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x7, &(0x7f0000000400)={0x0, 0x18, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000480)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0xfffffffffffffffd) lsetxattr$security_capability(0x0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x1000, 0x9}]}, 0xc, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 12:53:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) [ 280.045147] binder: 12317:12319 ERROR: BC_REGISTER_LOOPER called without request [ 280.053096] binder: 12319 RLIMIT_NICE not set 12:53:59 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) 12:53:59 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x267, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) [ 280.234340] kauditd_printk_skb: 3 callbacks suppressed [ 280.234389] audit: type=1326 audit(1550235239.277:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12324 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 280.491693] binder_alloc: binder_alloc_mmap_handler: 12299 20001000-20004000 already mapped failed -16 [ 280.503840] binder: 12319 RLIMIT_NICE not set [ 280.504931] binder: undelivered TRANSACTION_COMPLETE [ 280.513882] binder: undelivered TRANSACTION_ERROR: 29189 [ 280.517247] binder: 12299:12344 ERROR: BC_REGISTER_LOOPER called without request [ 280.527097] binder: 12344 RLIMIT_NICE not set [ 280.535493] binder: release 12299:12344 transaction 21 out, still active [ 280.542793] binder: undelivered TRANSACTION_COMPLETE 12:53:59 executing program 4: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) [ 280.599523] binder: release 12317:12319 transaction 21 in, still active [ 280.606698] binder: send failed reply for transaction 21, target dead 12:53:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) 12:53:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 280.818959] binder: 12346:12349 ERROR: BC_REGISTER_LOOPER called without request [ 280.826711] binder: 12349 RLIMIT_NICE not set [ 280.872063] binder: BINDER_SET_CONTEXT_MGR already set [ 280.877624] binder: 12351:12353 ioctl 40046207 0 returned -16 12:54:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 280.948769] binder: 12349 RLIMIT_NICE not set [ 280.957687] binder: 12351:12360 ERROR: BC_REGISTER_LOOPER called without request [ 280.965498] binder: 12360 RLIMIT_NICE not set [ 281.004067] audit: type=1326 audit(1550235240.057:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12324 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 281.041818] binder: release 12351:12360 transaction 23 out, still active [ 281.045178] binder: BINDER_SET_CONTEXT_MGR already set [ 281.048726] binder: undelivered TRANSACTION_COMPLETE [ 281.059428] binder: 12363:12364 ioctl 40046207 0 returned -16 12:54:00 executing program 4: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 12:54:00 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000180)) 12:54:00 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x13) [ 281.108037] binder: release 12346:12349 transaction 23 in, still active [ 281.115125] binder: send failed reply for transaction 23, target dead [ 281.144058] binder: 12363:12364 transaction failed 29189/-22, size 0-0 line 2896 12:54:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) [ 281.195229] binder: 12363:12368 ERROR: BC_REGISTER_LOOPER called without request [ 281.203020] binder: 12368 RLIMIT_NICE not set [ 281.254621] binder: 12369:12370 ERROR: BC_REGISTER_LOOPER called without request [ 281.288999] binder: undelivered TRANSACTION_ERROR: 29189 12:54:00 executing program 1: r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) [ 281.331788] binder: BINDER_SET_CONTEXT_MGR already set [ 281.337325] binder: 12375:12377 ioctl 40046207 0 returned -16 [ 281.353433] binder: 12375:12377 ERROR: BC_REGISTER_LOOPER called without request [ 281.600875] binder: release 12369:12370 transaction 26 in, still active [ 281.607859] binder: send failed reply for transaction 26 to 12375:12377 12:54:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="a7e682e93058c9c41fcb2f2adde1a836ed4830e89007ebc51943a08ed6b6e1b4e7377dd218cc04b169ee01c04349a37c85373fc52a0f8196b23fbad9ebe8c7da909db1d677b25deedc3ac99c69b583540eb1e14a56cfd1cbbba94f64587550eddd16fdad32c7953f476955718210bf98f4cba3043b428b37259377cb84ebf8e78e58177e13bec4c845da", 0x8a}], 0x1}, 0x20000010) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x807, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac000000000000000000000000", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) 12:54:00 executing program 4: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) 12:54:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x7fffffffff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000240), 0x13f698e4b9e296e3, 0x0, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), 0x14) close(r1) 12:54:00 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)="c1bbf9010003400000881ee4ac141411e0", 0x11}], 0x1}, 0x0) [ 281.739594] ================================================================== [ 281.747013] BUG: KMSAN: uninit-value in ___neigh_create+0x20cc/0x2890 [ 281.753603] CPU: 1 PID: 12389 Comm: syz-executor.1 Not tainted 5.0.0-rc1+ #9 [ 281.761018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.770381] Call Trace: [ 281.772995] dump_stack+0x173/0x1d0 [ 281.776653] kmsan_report+0x12e/0x2a0 [ 281.780498] __msan_warning+0x82/0xf0 [ 281.780909] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.784314] ___neigh_create+0x20cc/0x2890 [ 281.784382] __neigh_create+0xbd/0xd0 [ 281.784411] ip_finish_output2+0xa0f/0x1820 [ 281.784448] ip_finish_output+0xd2b/0xfd0 [ 281.784481] ip_output+0x53f/0x610 [ 281.784511] ? ip_mc_finish_output+0x3b0/0x3b0 [ 281.784528] ? ip_finish_output+0xfd0/0xfd0 [ 281.784546] ip_local_out+0x164/0x1d0 [ 281.784578] iptunnel_xmit+0x8a7/0xde0 [ 281.801198] ? pskb_expand_head+0xf10/0x18f0 [ 281.834085] ip_tunnel_xmit+0x35b9/0x3980 [ 281.838263] ipgre_xmit+0x1098/0x11c0 [ 281.842065] ? ipgre_close+0x230/0x230 [ 281.845947] dev_hard_start_xmit+0x604/0xc40 [ 281.850369] __dev_queue_xmit+0x2e48/0x3b80 [ 281.854721] dev_queue_xmit+0x4b/0x60 [ 281.858513] ? __netdev_pick_tx+0x1260/0x1260 [ 281.863002] packet_sendmsg+0x79bb/0x9760 [ 281.867154] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 281.872605] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 281.877808] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 281.883200] ___sys_sendmsg+0xdb9/0x11b0 [ 281.887258] ? compat_packet_setsockopt+0x360/0x360 [ 281.892285] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 281.897468] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 281.902848] ? __fget_light+0x6e1/0x750 [ 281.906830] __se_sys_sendmsg+0x305/0x460 [ 281.910986] __x64_sys_sendmsg+0x4a/0x70 [ 281.915038] do_syscall_64+0xbc/0xf0 [ 281.918841] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 281.924020] RIP: 0033:0x457e29 [ 281.927214] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.946102] RSP: 002b:00007f6a03b1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.953798] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 281.961052] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 281.968431] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 281.975709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a03b206d4 [ 281.982965] R13: 00000000004c53f7 R14: 00000000004d9208 R15: 00000000ffffffff [ 281.990342] [ 281.991962] Uninit was created at: [ 281.995480] No stack [ 281.997790] ================================================================== [ 282.005133] Disabling lock debugging due to kernel taint [ 282.010570] Kernel panic - not syncing: panic_on_warn set ... [ 282.016445] CPU: 1 PID: 12389 Comm: syz-executor.1 Tainted: G B 5.0.0-rc1+ #9 [ 282.025006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.034348] Call Trace: [ 282.036942] dump_stack+0x173/0x1d0 [ 282.040562] panic+0x3d1/0xb01 [ 282.043769] kmsan_report+0x293/0x2a0 [ 282.047568] __msan_warning+0x82/0xf0 [ 282.051377] ___neigh_create+0x20cc/0x2890 [ 282.055633] __neigh_create+0xbd/0xd0 [ 282.059432] ip_finish_output2+0xa0f/0x1820 [ 282.063761] ip_finish_output+0xd2b/0xfd0 [ 282.068020] ip_output+0x53f/0x610 [ 282.071567] ? ip_mc_finish_output+0x3b0/0x3b0 [ 282.076139] ? ip_finish_output+0xfd0/0xfd0 [ 282.080458] ip_local_out+0x164/0x1d0 [ 282.084270] iptunnel_xmit+0x8a7/0xde0 [ 282.088156] ? pskb_expand_head+0xf10/0x18f0 [ 282.092575] ip_tunnel_xmit+0x35b9/0x3980 [ 282.096744] ipgre_xmit+0x1098/0x11c0 [ 282.100542] ? ipgre_close+0x230/0x230 [ 282.104421] dev_hard_start_xmit+0x604/0xc40 [ 282.108834] __dev_queue_xmit+0x2e48/0x3b80 [ 282.113173] dev_queue_xmit+0x4b/0x60 [ 282.116963] ? __netdev_pick_tx+0x1260/0x1260 [ 282.121450] packet_sendmsg+0x79bb/0x9760 [ 282.125596] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 282.131057] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 282.136243] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 282.141627] ___sys_sendmsg+0xdb9/0x11b0 [ 282.145688] ? compat_packet_setsockopt+0x360/0x360 [ 282.150700] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 282.155886] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 282.161241] ? __fget_light+0x6e1/0x750 [ 282.165219] __se_sys_sendmsg+0x305/0x460 [ 282.169382] __x64_sys_sendmsg+0x4a/0x70 [ 282.173435] do_syscall_64+0xbc/0xf0 [ 282.177145] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 282.182323] RIP: 0033:0x457e29 [ 282.185506] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.204493] RSP: 002b:00007f6a03b1fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.212189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 282.219454] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 282.226728] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 282.233986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a03b206d4 [ 282.241243] R13: 00000000004c53f7 R14: 00000000004d9208 R15: 00000000ffffffff [ 282.249697] Kernel Offset: disabled [ 282.253322] Rebooting in 86400 seconds..