[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 73.725051] audit: type=1800 audit(1550055501.797:25): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 73.744152] audit: type=1800 audit(1550055501.797:26): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 73.763545] audit: type=1800 audit(1550055501.797:27): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. 2019/02/13 10:58:37 fuzzer started 2019/02/13 10:58:43 dialing manager at 10.128.0.26:34507 syzkaller login: [ 95.508786] ld (9963) used greatest stack depth: 53632 bytes left 2019/02/13 10:58:43 syscalls: 1 2019/02/13 10:58:43 code coverage: enabled 2019/02/13 10:58:43 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/13 10:58:43 extra coverage: extra coverage is not supported by the kernel 2019/02/13 10:58:43 setuid sandbox: enabled 2019/02/13 10:58:43 namespace sandbox: enabled 2019/02/13 10:58:43 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/13 10:58:43 fault injection: enabled 2019/02/13 10:58:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/13 10:58:43 net packet injection: enabled 2019/02/13 10:58:43 net device setup: enabled 11:00:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="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", 0xf8d}], 0x1) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 225.259784] IPVS: ftp: loaded support on port[0] = 21 [ 225.394556] chnl_net:caif_netlink_parms(): no params data found [ 225.456235] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.462802] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.470865] device bridge_slave_0 entered promiscuous mode [ 225.479197] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.485749] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.493835] device bridge_slave_1 entered promiscuous mode [ 225.523401] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.534453] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.562139] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 225.570491] team0: Port device team_slave_0 added [ 225.576876] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 225.585165] team0: Port device team_slave_1 added [ 225.591156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.599441] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.696377] device hsr_slave_0 entered promiscuous mode [ 225.782845] device hsr_slave_1 entered promiscuous mode [ 225.932958] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 225.940443] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 225.966635] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.973166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.980194] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.986753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.064261] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 226.070395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.083197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 226.096757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.112659] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.121421] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.131347] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 226.150318] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 226.156567] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.173138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.181699] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.188140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.227337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.235951] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.242490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.252047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.264446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.277290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.294402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.323553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.345386] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 226.351476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.380011] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 226.400520] 8021q: adding VLAN 0 to HW filter on device batadv0 11:00:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000040)={0x0, 0x0, 0x0}) 11:00:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 226.862815] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 11:00:55 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) 11:00:55 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000fd1c00000000000000"], 0x10}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x326, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}], 0x22b, 0x0) 11:00:55 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000fd1c00000000000000"], 0x10}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x326, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}], 0x22b, 0x0) 11:00:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:00:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:00:56 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x1000, "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"}, &(0x7f0000001080)=0x1008) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000010c0)={r1, 0x2, 0x3, 0x4}, &(0x7f0000001100)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001140)={0x0, r0, 0x6, 0x100000001, 0x800}) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000001180)) bind$pptp(r0, &(0x7f00000011c0)={0x18, 0x2, {0x2, @remote}}, 0x1e) r2 = openat$cgroup_type(r0, &(0x7f0000001200)='cgroup.type\x00', 0x2, 0x0) ftruncate(r2, 0x100) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000001240)={'filter\x00'}, &(0x7f00000012c0)=0x78) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001300)=0x0) sched_getaffinity(r3, 0x8, &(0x7f0000001340)) r4 = inotify_add_watch(r0, &(0x7f0000001380)='./file0\x00', 0x40000000) inotify_rm_watch(r0, r4) iopl(0x1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000013c0), &(0x7f0000001400)=0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001540)={&(0x7f0000001440), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x30, r5, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x100000000, 0x1000, 0xa7}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4040000) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000001680)) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000016c0)={{0xf000, 0x7000, 0xe, 0x3, 0x8, 0x4, 0x80000001, 0x70000000000, 0x8, 0x2ec0000000000, 0x20, 0xc14}, {0x10000, 0xd000, 0x8, 0x20, 0x7f, 0x3, 0xfffffffffffffffd, 0xe792, 0x8, 0x4, 0x100000001, 0x7fff}, {0x1001, 0x2, 0xf, 0x1000, 0xdb, 0x10000, 0x3, 0x100000000, 0xd8, 0xb5d, 0x510c, 0xf23c}, {0xd001, 0x10000, 0x8, 0x101, 0x3, 0x2, 0x8, 0x1b, 0x1, 0x7fffffff, 0x619, 0xfffffffffffffe52}, {0xf000, 0x0, 0x0, 0x10000, 0x7fffffff, 0x1, 0x1000, 0x80000000, 0x0, 0xff85, 0x0, 0x5}, {0x5000, 0xd000, 0x1c, 0x10000, 0x1ff, 0x6, 0x4, 0x8001, 0x9, 0x1, 0x3, 0xd4}, {0x7005, 0x1000, 0x0, 0x0, 0x10000, 0x3ff, 0xb9, 0xffffffffc6ab2cf4, 0x6, 0x62, 0x1, 0x1}, {0xf000, 0x100002, 0xf, 0x5, 0x35, 0x8, 0xffffffff, 0x8, 0x7fff, 0x9, 0x4, 0x2}, {0x0, 0x1}, {0x1000, 0x2}, 0x10000, 0x0, 0x3006, 0x200, 0x7, 0x400, 0x1f005, [0x1ff, 0x0, 0x8001, 0x7]}) openat$userio(0xffffffffffffff9c, &(0x7f0000001800)='/dev/userio\x00', 0x40000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000001840)={0x1, 'nr0\x00', 0x2}, 0x18) ioctl$NBD_DO_IT(r0, 0xab03) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000018c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r6, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001a00)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000001ac0)={&(0x7f00000019c0), 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, r7, 0x2, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001b00)={'filter\x00'}, &(0x7f0000001b80)=0x54) [ 228.630282] IPVS: ftp: loaded support on port[0] = 21 [ 228.767871] chnl_net:caif_netlink_parms(): no params data found [ 228.827888] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.834464] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.842674] device bridge_slave_0 entered promiscuous mode [ 228.851203] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.857875] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.866090] device bridge_slave_1 entered promiscuous mode [ 228.898567] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 228.909772] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 228.938079] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 228.946441] team0: Port device team_slave_0 added [ 228.952847] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 228.961235] team0: Port device team_slave_1 added [ 228.967443] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.975973] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 11:00:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 229.055917] device hsr_slave_0 entered promiscuous mode [ 229.103324] device hsr_slave_1 entered promiscuous mode [ 229.253061] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 229.260651] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 229.289777] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.296334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.303576] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.310244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.385286] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 229.391419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.406005] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.419728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.429778] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.438871] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.449747] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 229.469917] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 229.476187] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.492867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.500986] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.507527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.555862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.564209] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.570665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.580143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.589134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.597732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.611271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.619226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.630824] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 229.637067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.658708] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 229.677473] 8021q: adding VLAN 0 to HW filter on device batadv0 11:00:57 executing program 1: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), 0x0, 0x0, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read(r4, &(0x7f0000000240)=""/117, 0x2b3) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x100, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="020400000300600000000000fff55b4202938207d9fb3780", 0x18, 0x0, 0x0, 0x0) 11:00:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 229.992326] protocol 88fb is buggy, dev hsr_slave_0 [ 229.997691] protocol 88fb is buggy, dev hsr_slave_1 [ 230.112328] protocol 88fb is buggy, dev hsr_slave_0 [ 230.117681] protocol 88fb is buggy, dev hsr_slave_1 11:00:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) [ 230.952348] protocol 88fb is buggy, dev hsr_slave_0 [ 230.957796] protocol 88fb is buggy, dev hsr_slave_1 11:00:59 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffff9c, 0x0, 0x7, &(0x7f0000000000)='vxcan1\x00', 0xffffffffffffffff}, 0x30) capset(&(0x7f0000000100)={0x39980732, r1}, &(0x7f0000000140)={0x7, 0x80000000, 0x401, 0x7, 0xfffffffffffffff9}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'vxcan1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="150000000000000000000000000000000000000000000000000000000000000000008ee4c44a39722a8b4b8239abc8d76604f8fe89e855948e24165e8300e8d8fd362dcf686d866ab8add4c276f9401e05d228189456d45e494bf17bc40878c524c4ec347ff0b75d2f1eede293f761a3843c0a7ebb3942d95c24b87daec0197bbad2c5aecdd5c1208cdbfcf5b65cd358bcd7fd9d4c23316a8c6d7ecf23f4f1f379dce789f2fc8908fd4744d1d82cd0efeae7a3f4c67fd1f672cdbed44ffbe6e993d9d3be663c81892c46d4646af549150ee88973e4a892"]}) close(0xffffffffffffffff) 11:00:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') mremap(&(0x7f0000001000/0x1000)=nil, 0x7ffffffff000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) getdents(r0, &(0x7f00000001c0)=""/168, 0xa8) 11:00:59 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) 11:00:59 executing program 1: timer_create(0x3, &(0x7f0000000100)={0x0, 0x28, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000080)}}, &(0x7f0000000140)=0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000080)={{r1, r2+30000000}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000040)) 11:00:59 executing program 1: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x100000001, 0x8, &(0x7f0000000000)=""/115, &(0x7f0000000100)=0x73) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 11:01:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40000, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000b55000)={0x2, 0x2}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x6) sendto$inet(r2, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000340)="2a20f88c6aa90bd71b936bc0a5eb4e9a05326bb3311027e126fc340a31cae548a8abd723543b3e742469177b1c4359ab00d2bb37ac4e51933ebfb0858340a7bde3dd3be576582e9950b8e09e9e1e647bb40b35a7f6e2632dc10991ec129bf8acd6d66f3e2f099f356085736ce8754294856a05fa29fbd54c0462d6f26d95cbe84fcb0054e27520b9690dcbd8a93ecf857dbd0a45ba5640480ca491ddcd70d73b52db2910247c67e05d255d26df7a3c45078f6e717d92ff8894a04bc370b358", 0xbf, 0x0, 0x0, 0x0) [ 231.927210] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 11:01:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7a, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x9, 0xc3, &(0x7f0000000240)=""/195}, 0x48) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x82102, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="963b9aaba04675e3ebb2615c3ed768a704559bb9f74dda24ebdf8b8533d2ad9d5c7f1c8c637ce36ddd48890000000000000000000000000000"], &(0x7f0000000340)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x96, 0x3) creat(&(0x7f0000000400)='./file0\x00', 0x10) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 11:01:00 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x1c8679ae40e732b5, 0x0) perf_event_open(&(0x7f0000000500)={0x2000000005, 0x70, 0xfffffffffffffffc, 0x4000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x40, 0x4000000, 0x80000000}, 0x0, 0x1, r0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xff, 0x2000000000000005) 11:01:00 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40200, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xc003, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000080)={0x39, @broadcast}) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x5}, [{0x2, 0x7, r2}, {0x2, 0x7, r4}, {0x2, 0x2, r5}, {0x2, 0x4, r6}], {0x4, 0x5}, [{0x8, 0x2, r7}, {0x8, 0x5, r8}, {0x8, 0x7, r9}], {0x10, 0x3}, {0x20, 0x2}}, 0x5c, 0x3) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000580)) setsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000980)="c11f609fae54ce2508cdb7e3866ad4344d1e3ca21b8b34eec0b10ea596acb93cae3a3efb096baf42de2a0b966ded24ebe1464a5af7f800f63439a1de9c68b01f0409fe7d64935cdc0624ac06da5e4e9f11e8a6f306a662af5fb91d1dc92f919a7d9ee709be09a3ece5681f3f688a1825c920baf28c5fa2d7f22c54972acee1fdf23ca959267088fce3c874804e003192520fc9e96cf45b4926da5dad99c1ba68f128949a3d7c3ce5e21dabcea14a4e653387b91c9a9b330e9319bef45b607181d597acab0781060c1ce8f5", 0xcb) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000a80)) r10 = syz_open_dev$audion(&(0x7f0000000ac0)='/dev/audio#\x00', 0x2, 0x400000) epoll_pwait(r10, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000b80)={0x1}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000bc0)={0xde, 0xfff, 0x8, 'queue0\x00', 0x2}) bind$rxrpc(r10, &(0x7f0000000c80)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xcc, @empty, 0x8}}, 0x24) sendmmsg$inet_sctp(r1, &(0x7f0000001280)=[{&(0x7f0000000cc0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000d00)="8ad21f41ee5849397838fb8ae6b5cb0b3ab71b7b634b2343f5a644da25fb50aea841cf8ec524703df022efd75707094f6120b9ab7123ae1f842c545d9b40a8514b912274420036574cb297b723a0db1a0b1a4e589b036062a0a4658bc162fd55ed44c3b2763d44a6ca36df8b6ea2b1ab62afd61b67a7db507098b6bc08d046c5be06dd4ab81ed726a70be030af64fd127921cf5761805e6e4bad1bd315f3bef2d2d949da3c", 0xa5}, {&(0x7f0000000dc0)="92da1419990502acf84d69807c709c978b6e8cccf9c21a1696c37a3d73cb93769d17ec47ea0805248f1193b21058b71a783d8633f9fa44c83348cbbf0ff9cb1974ef3e3fd65711cf850804222fe0fc93834e7ffbc71fa762ee4e482b88f19317e1f6ad287ee3441e105e076c602bfb64c4ac26bb3bf45b61b7f3f4cab5a1472caea5e823043092bd9ccd2db0d4107f6735f0182410f8e6a5b7113fbdb56fa012b3e1095a81484682af9a30345de8f33dfdaf61f67141bda449", 0xb9}, {&(0x7f0000000e80)="f6830d1e6c44914af4e1a266e0066a8cd23130d0056c0dd1b7c23adb7944adc857100101c0f89499847c5195c5ef992f598207431a0354070a0c1196d4348ac07ff51a9cea8893fdf1c1c1603c213e7d62f5552955c5e8a73257fa5d0d6ace3f17281ca419917ba8b4ee674d5ffc319d9b9290bcb029948e7eae871e1c6ee993493289eeb89e3a46f5f2904b57be7301dc38311d570433a1bff51df00cc052c538051c79788925eeccea2225a64d3104d1479cde49d3ab3adf1294f533cb044be86f01909c0c34e1358b1d6d", 0xcc}, {&(0x7f0000000f80)="0a419e3947d9fe68747894f0fe42111215f18f4806370f83ba175b8cc321217ad0b11efcc89ad29235bc19", 0x2b}, {&(0x7f0000000fc0)="cedc1f8ca6226b75f83a47ac3c4df85b651818181ac603c5b11eb64544904ba7af942fb1426f21f2f54465d9c0129cfb32ef1eeb0530862d155630da2dce9d26e864db308fda54f5b2bb78a7e5261db1228c25c4e0", 0x55}, {&(0x7f0000001040)="50145560ee16afa5ffd3b5bba79b1f5f3451564ae3025c0de38535e6f2798c3dd04e8379fbb325543c47eabb72b837c7915944f27bc00140ecc54a13a7a1d59c", 0x40}, {&(0x7f0000001080)="39b4e56224a199af3a6bf2c3f76b1dcca7c1a2163d7640ce36d59da7e805551fb0e601b8e8218ba4d065bd39f5351a9543e4372306c67e15a4a08a79cd223f2edc7a5451b5a1db3a030db8ae36173d3e", 0x50}, {&(0x7f0000001100)="7606463342f6ed22cb55b60a4bdabebe7a116a4d03c24536ddbe48fb10180037fe2f5d3b3c4a870ae7189cb3763b079e04eb502fcdb9604674a8add523e6d7022c19d560694030aaa5110b1a555ebf66c9ad3bf0a48d8c17e3673670d87821b07e37571c", 0x64}, {&(0x7f0000001180)="ccd70457a92cb9648a70ba66ef83a9d2ffc5ffd19a08370354f6b50f8ca6e7eb78a18c", 0x23}], 0x9, 0x0, 0x0, 0x800}], 0x1, 0x95305aa0ec284fa6) bind$inet(r1, &(0x7f00000012c0)={0x2, 0x4e23, @multicast2}, 0x10) epoll_pwait(r10, &(0x7f0000001300)=[{}], 0x1, 0x10001, &(0x7f0000001340)={0xd1f}, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000001380)={0x7f, {{0xa, 0x4e23, 0x9fc0000000000000, @mcast1, 0x2}}}, 0x88) r11 = syz_open_dev$vcsa(&(0x7f0000001440)='/dev/vcsa#\x00', 0xcbc9, 0x840) ioctl$VIDIOC_ENUM_FREQ_BANDS(r10, 0xc0405665, &(0x7f0000001480)={0x8, 0x5, 0xffffffffffff82d1, 0x100, 0x100000000, 0x0, 0xa}) ioctl$VIDIOC_PREPARE_BUF(r10, 0xc058565d, &(0x7f00000014c0)={0x5, 0xa, 0x4, 0x400000, {0x0, 0x2710}, {0x5, 0xd, 0x4, 0x1, 0x80000000, 0x0, "8954b2b6"}, 0x9, 0x3, @userptr=0x3, 0x4}) sendmsg$nl_route_sched(r11, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)=@newtclass={0xa8, 0x28, 0x12, 0x70bd2c, 0x25dfdbfb, {0x0, r3, {0xfff3, 0x6}, {0x13, 0xb}, {0xfff3, 0xf}}, [@tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x7c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r11}, @TCA_ATM_HDR={0x2c, 0x3, "b0f37bda365d3326fe2c9306429c4b71dfb78787e62606c13d899dfc057999ef97e8ffbcce"}, @TCA_ATM_HDR={0x8, 0x3, 'D@V:'}, @TCA_ATM_HDR={0x34, 0x3, "2b178b58a2e805cee94daad7dd2265f8227ad13660bed6ffb8e777274241e5ba4fa0aa9a55bd37b5cd8653e73e8308"}, @TCA_ATM_FD={0x8, 0x1, r11}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f00000016c0)={0x0, 0x5, 0x6}, &(0x7f0000001700)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000001740)=@sack_info={r12, 0x7fffffff, 0x2}, &(0x7f0000001780)=0xc) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r10, 0x111, 0x3, 0x1, 0x4) 11:01:00 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x4, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "63759c16"}, 0x0, 0x0, @offset, 0x4}) write(r0, &(0x7f0000000000)="65386307d1ca41013a99e70d76fee395e99f400e084d9a42dfa26fb30ff6ea0834baf0f713a154c490943b31c10634aba6dd7b84eeb47c1039423c91d542b71116c71798b387283d1c99300ba6d02b5b5ad2f0023d7af4f566de9fbbbc8820e1e57544f4ad01b648b6a6c4e9b82987e1fb25c3f21c01f11f6ebb91366110856bbf71cd0802192098c6b30f8a338577b009ec8171deb3b1c7d602de0cf0ede7fe9a3cfafde8b3", 0xa6) 11:01:00 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a4"], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x5, 0x4) ioctl$int_in(r0, 0xc0045005, &(0x7f00000004c0)=0x4040000) 11:01:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) [ 232.895780] IPVS: ftp: loaded support on port[0] = 21 [ 233.038365] chnl_net:caif_netlink_parms(): no params data found [ 233.100514] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.107107] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.116828] device bridge_slave_0 entered promiscuous mode [ 233.126571] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.133109] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.141579] device bridge_slave_1 entered promiscuous mode [ 233.175085] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.187885] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:01:01 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x4}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1d, 0x3, 0xfffffffffffffff7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x100}}, 0x2, 0x3ff}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x4, @local, 0x5}}, 0x1, 0x5, 0x80000000000, 0x2, 0x6}, &(0x7f0000000100)=0x98) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00\x00\x00\x04\x00', @ifru_flags}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) [ 233.219011] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.227483] team0: Port device team_slave_0 added [ 233.235933] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.244387] team0: Port device team_slave_1 added [ 233.250602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.261526] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.406372] device hsr_slave_0 entered promiscuous mode 11:01:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) tkill(r2, 0x1000000000013) [ 233.612593] device hsr_slave_1 entered promiscuous mode [ 233.664401] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 233.672047] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 11:01:01 executing program 1: capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000180)={0x458}) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="bbf2f9de53b8790824c41a2fbaf65bedd6243d7a414f5598e55efcb644e273af1ed4bc346068fcc045036aa33af1d3fbe8e8fe87ecf1e718e04c8c3699aeaf2312", 0x41, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="1fa9f01bd97c5bb916d826113be2bc888fb18ded606b21c24296a8e69eb4f715477b0c5f199ebb51ab9c02d86edfa31686c1b3d36e70719cc3db5b5288f4d83512dc5b16d341a25c51b053cb098f36", 0x4f, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000300)=@chain={'key_or_keyring:', r1, ':chain\x00'}) [ 233.725089] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.731698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.738755] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.745261] bridge0: port 1(bridge_slave_0) entered forwarding state 11:01:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet(0x2, 0x6, 0x3f) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 233.909212] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 233.916104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.957315] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.989203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.000104] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.036553] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.065468] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 234.086006] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 234.092372] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.119241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.126742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.136417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.144700] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.151157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.168074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 234.186424] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 234.209003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.217797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.225954] bridge0: port 2(bridge_slave_1) entered blocking state 11:01:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000c0, 0x84) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0x3, 0x1, 0x3f, 0x1, 0xfac}, 0x38000, 0x4ea}) keyctl$set_reqkey_keyring(0xe, 0x5) keyctl$instantiate(0xc, r0, &(0x7f00000000c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'syz'}, 0x19, r0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)='\x00', 0x0) [ 234.232456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.241441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.254853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 234.277456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.304345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.322864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.332099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.346017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.364277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.371384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.380309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.394049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 234.422099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.430477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.443886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 234.453570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.464915] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 234.471026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.479142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.487615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.501077] IPVS: ftp: loaded support on port[0] = 21 [ 234.507174] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 234.527677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.630704] IPVS: ftp: loaded support on port[0] = 21 11:01:02 executing program 2: socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_map={0x9, 0x1, 0xffff, 0xffff, 0x8, 0x400}}}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0)=0x4, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000440)={0x0, {{0xa, 0x800000000000000, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r3 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x6, 0x200000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x10000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000002c0)={r4, 0xfff}, &(0x7f0000000300)=0x8) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000340)={0xfff, 0x6, 0x3ff, 0xa9eb46e836311d54, 0xf2af}) 11:01:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @rand_addr=0xfffffffffffffffb}}, [0xfffffffffffffffe, 0x6, 0x6, 0x9, 0x6, 0x0, 0x8, 0x7fff, 0x1, 0x5, 0x101, 0x8001, 0x200, 0x3c5e7970, 0x2]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x4}, 0x8) setsockopt$inet_int(r0, 0x0, 0x40000000000d3, &(0x7f0000000080), 0x4) 11:01:03 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000300)='/dev/capi20\x00', 0x400000000000802, 0x0) rt_sigaction(0x2e, &(0x7f00000000c0)={&(0x7f0000000000)="660f139c2e000000008b7d74f526660f5ea602000000c4a20db866b247d07ce7943eed2eefc422859e074078ad", {0x8001}, 0x0, &(0x7f0000000040)="8f282097290ec4c37960bf86ab000008c482eda89d006044b466440fe3950007af94d213c44359698d655666664a46def0c46239934ca10b400f0fd51dc4a22545ed"}, &(0x7f00000001c0)={&(0x7f0000000100)="c4636d5fa80010000000c4a235a7a4b699899999c4c1f82fdb420f380a48e8c462c0f2b6a1000000f3a6c4a3e50a8af600000060c4e1e1fab700000000650f7e570026f042839e7e14664b73", {}, 0x0, &(0x7f0000000180)="d92c86f2f20fb6302e6442fbc481fdd8590f67660f1ad0f686d70f0000f1c4a10d6bb1000000006666400fb2606540868c2781000000c4822196d2"}, 0x8, &(0x7f0000000240)) flock(r0, 0x2) r1 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x8, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000002c0)={0x0, 0x31367d4f, 0x401, 0x6, 0x2, @discrete={0x20, 0x1}}) eventfd2(0x200, 0x801) ioctl$UI_SET_PROPBIT(r0, 0x80024321, 0xfdfdffff) 11:01:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) mq_unlink(&(0x7f0000000080)='\x00') ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)) 11:01:03 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 11:01:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000020c0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@remote}}, &(0x7f00000021c0)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002280)={{{@in6=@loopback, @in=@local, 0x4e23, 0x2, 0x4e20, 0x3, 0xa, 0x20, 0x20, 0xff, r1, r2}, {0x8, 0xfffffffffffffffb, 0x3, 0x6, 0x401, 0x7f, 0xffffffffffffffff}, {0x9, 0x3ff, 0x2, 0xc74a}, 0x40, 0x6e6bb9, 0x2, 0x0, 0x1, 0x3}, {{@in=@remote, 0x4d4}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3504, 0x3, 0x0, 0x9f, 0x141, 0x0, 0xee90}}, 0xe8) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x800000008912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x0, @empty, 0x401}], 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @local}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @local}], 0x10) 11:01:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="f000000010000100000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000000000000000000008000000000999a44b9041291c60355652238fe6b09279c5a5256f8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000007efdffffffffffff00000000000000000000000000000000000000000000001f00000000000000000000000000000000000000bea1000000000000000000000000000002000000000000000000"], 0xf0}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @local}, 0x100000000}], 0x1c) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x440040, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x10000000, 0x4}, 'port0\x00', 0x4, 0x40, 0x40, 0xa260, 0x7, 0x2, 0x7, 0x0, 0x1, 0x7}) 11:01:03 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) fdatasync(r0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, 0x38, &(0x7f0000ffb000/0x3000)=nil}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x6, 0x10000, 0x5, 0x4, 0x19, 0x0, 0xdb, 0x7, 0x10001, 0x4}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) ioctl(r1, 0xffffffffffff0000, &(0x7f0000000000)) 11:01:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) tkill(r2, 0x1000000000013) 11:01:04 executing program 2: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xfffffffffffffff9, 0x280000) fcntl$setsig(r0, 0xa, 0x1a) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x13}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f00001000000000080000000000000800170000000100000000000000000006130000030004000000000000000200e00040010000000000000000000000000000ada8008085c504cc86eef0b00000030006000000000002000080ac14ffbbf00000000000000003000500d5be18360200423b1e632bd7b8200000002691ab"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8400, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002440)={0x53, 0xffffffffffffffff, 0xbe, 0x1, @scatter={0x3, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/4096, 0x1000}]}, &(0x7f0000001380)="b02897be85af293ad722dd0d9ec7e901b49cbdb690592c67bdba302b99c90041b40f3b080ed3e84899a306cb71a1986833d92af5e87973f30d8fe93c39b6fe5cd2014b9defbc618fc0126283a67b9f2a31b0dffd258afc0d0157ed82f6628408382c11b9067c45a7ac91f3e47ff249504d690a404aba4875f4c27f175ba9b15928d65573b880a07a55c9bf64e8942bff72d0e23ea4361cbc771858fa77fb6d190c22e642791b3d51928fd06e9d8da526e17dfc798be1d87c622ae09be289", &(0x7f0000001440)=""/4096, 0x2e, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}) socket(0x0, 0xe, 0x80) 11:01:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000180)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'nlmon0\x00'}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)={r5}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x3c, 0x0, 0x0) 11:01:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x6, 0x10c8, [0x0, 0x20000cc0, 0x20000e10, 0x200019d8], 0x0, &(0x7f0000000080), &(0x7f0000000cc0)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x3, 0x9, 0xa01, '\x00', 'gre0\x00', 'bridge_slave_1\x00', 'veth0_to_hsr\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[], 0x25}, [0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0xe8, 0x120, [@statistic={'statistic\x00', 0x18, {{0x0, 0x0, 0x4bc5, 0x9, 0x7}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffc}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[], 0x1a}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{{{0x1f, 0x18, 0x1c, 'vlan0\x00', 'veth1_to_team\x00', 'veth1_to_bond\x00', 'lo\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0x73107edc420e52bd, 0xff, 0xff, 0xff, 0xff], 0x888, 0x9b8, 0xa08, [@u32={'u32\x00', 0x7c0, {{[{[{0x6, 0x3}, {0x8000}, {0x4, 0x3}, {0x9b, 0x3}, {0x7, 0x3}, {0x40, 0x3}, {0xf6, 0x2}, {0x33, 0x3}, {0x9, 0x1}, {0x1, 0x1}, {0x800, 0x2}], [{0x2, 0x7f}, {0x1, 0x69}, {0x4, 0x5}, {0x3, 0x7}, {0x7ff, 0x5}, {0xc3, 0x6}, {0x7, 0x81}, {0xe5, 0x3390}, {0x2, 0x9}, {0x6, 0x2}, {0x7fff, 0x4}], 0x5, 0xa}, {[{0x9}, {0x0, 0x2}, {0x4ce, 0x3}, {0xbc, 0x3}, {0x5}, {0x2, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x8001, 0x3}, {0x0, 0x1}, {0x6, 0x2}], [{0x1ff, 0x3}, {0x0, 0x100}, {0x5a1c, 0x8000}, {0x1000, 0x1}, {0x3fdd, 0x800}, {0x0, 0x35}, {0xfff}, {0x20, 0x183}, {0x7ff, 0x100000000}, {0x10000, 0x1}, {0x1, 0x7ff}], 0x8, 0x3}, {[{0x1bd}, {0x0, 0x2}, {0xfffffffffffffffd, 0x3}, {0x800, 0x3}, {0x1}, {0x8, 0x3}, {0x2, 0x3}, {0x72ed, 0x3}, {0x7, 0x1}, {0x7fffffff}, {0x200, 0x3}], [{0x100000001, 0xc96}, {0x4, 0x8}, {0x800, 0x7}, {0x10001, 0x401}, {0x100000001, 0x7}, {0x40}, {0x7, 0x9}, {0x7fff, 0x6}, {0x401, 0x3}, {0x7, 0x401}, {0x9, 0x7}], 0x8, 0x4}, {[{0xffffffffffffffff, 0x3}, {0x6, 0x2}, {0x4495e1f, 0x3}, {0x7ff}, {0x0, 0x3}, {0xc00e}, {0x5, 0x1}, {0x1, 0x3}, {0x5}, {0x5}, {0x0, 0x2}], [{0xfffffffffffff801, 0x5}, {0x9, 0x7}, {0x100000001, 0x10000}, {0xfffffffffffff001, 0x4}, {0x7ff, 0x7}, {0x8, 0x9}, {0x2}, {0x4, 0x100000001}, {0x10001, 0x5}, {0x10000, 0x4}, {0x2, 0x8}], 0x2, 0x3}, {[{0x3, 0x3}, {0x1f, 0x3429edc06e1e6677}, {0xffff, 0x1}, {0x7, 0x1}, {0x7fffffff, 0x2}, {0x4}, {0x20, 0x3}, {0x7}, {0x4}, {0x101, 0x1}, {0xfffffffffffffff9, 0x3}], [{0x8001, 0x7fff}, {0x8000, 0x1}, {0x3, 0xb41}, {0x5, 0x4}, {0x83b9, 0x70e4d1b8}, {0xfff, 0x8001}, {0x7, 0x5}, {0x535e, 0x7}, {0x8000, 0x995}, {0x91, 0x10001}, {0x1}], 0x7, 0x1}, {[{0x3, 0x2}, {0x926b, 0x3}, {0x80000000, 0x3}, {0xffffffffffffff36, 0x1}, {0x5}, {0x6, 0x3}, {0x1bc}, {0x20, 0x1}, {0x9, 0x3}, {0x8001, 0x3}, {0x7, 0x1}], [{0xfffffffffffffffe}, {0x5, 0xc}, {0x40, 0x3ff}, {0x20, 0xc338}, {0x14000000, 0x3f}, {0x1, 0x4}, {0x5, 0x8}, {0x3f, 0x6}, {0x6, 0x8}, {0x6116, 0x101}], 0x4, 0xb}, {[{0x0, 0x1}, {0x81, 0x3}, {0x100000000, 0x3}, {0x3, 0x3}, {0x7, 0x3}, {0x4, 0x3}, {0x8, 0x2}, {0x31a4, 0x3}, {0x3, 0x2}, {0xd5e4, 0x3}, {0x6, 0x3}], [{0xfff, 0x7fff}, {0xff, 0x5}, {0x3ff, 0x10000}, {0x1ff, 0x100000000}, {0x5, 0x8}, {0x4, 0x4}, {0x3ff, 0x1}, {0x7, 0x800000000000}, {0x3, 0x4}, {0xdbd, 0x3}, {0x5aa9}], 0x2, 0x9}, {[{0xfffffffffffff000, 0x1}, {0x8001, 0x3}, {0x7, 0x3}, {0x6}, {0x1, 0x1}, {0xfffffffffffffff9, 0x3}, {0x101, 0x3}, {0x3}, {0x7, 0x3}, {0x4, 0x3}, {0x40}], [{0xfc7d, 0x6}, {0x7ff, 0xb8}, {0x9, 0x2}, {0xff, 0x800}, {0x6, 0x6}, {0x3, 0xd0b}, {0x9, 0x100000001}, {0x20, 0xc}, {0x7f, 0x4}, {0x0, 0x3bc000}, {0x9, 0x9}], 0x1, 0x6}, {[{0x7, 0x1}, {0x7fff, 0x1}, {0x384000, 0x3}, {0x5}, {0x100000001, 0x2}, {0x1f, 0x3}, {0x56f, 0x2}, {0xfffffffffffffffd, 0x3}, {0xcd, 0x1}, {0x3, 0x2}, {0x8878, 0x3}], [{0x4, 0xfffffffffffffffa}, {0x1, 0x6186}, {0xffffffffffffff5b, 0xa84}, {0x362, 0x7}, {0x4, 0x81}, {0x595, 0x8}, {0x3ff, 0x80000000}, {0x6, 0x8}, {0x2, 0x6874}, {0x6, 0x9}, {0x6, 0x9}], 0x2, 0xa}, {[{0x9, 0x2}, {0xffffffffffffffff, 0x3}, {0x5, 0x3}, {0x9}, {0x2, 0x1}, {0x101, 0x2}, {0x3f}, {0xfffffffffffffff8, 0x3}, {0x6, 0x2}, {0x3800000000000, 0x3}, {0x7fffffff, 0x1}], [{0x1ff, 0x63}, {0x1, 0x8}, {0x1000, 0x6e}, {0x5, 0x9}, {0x1, 0x8000}, {0x401, 0x7}, {0xb50a, 0x2}, {0xfffffffffffffffd, 0x5d}, {0xfffffffffffff001, 0x4045}, {0x2, 0x1000}, {0xff, 0x3}], 0x1, 0x6}, {[{0x5964, 0x3}, {0x100000000, 0x2}, {0x2, 0x1}, {0x20, 0x1}, {0x4}, {0x1}, {0x7, 0x3}, {0x6, 0x3}, {0x5}, {0x7}, {0x4, 0x3}], [{0x48b, 0x8}, {0x4, 0x2}, {0x358, 0x100}, {0x0, 0x7f}, {0x2, 0x3}, {0x1ff, 0x200}, {0x15, 0x10001}, {0x0, 0x7fffffff}, {0x1, 0x40}, {0x0, 0x6}, {0x7, 0x3d}], 0x5, 0xb}], 0xa, 0x1}}}, @connlabel={'connlabel\x00', 0x8, {{0x398, 0x3}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x2a78, 'system_u:object_r:agp_device_t:s0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2f19, 'syz0\x00', 0xfffffffffffffff8}}}}, {{{0x11, 0x20, 0xe92f, 'veth0\x00', 'bridge_slave_0\x00', 'veth1_to_team\x00', 'batadv0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0xff], 0xd0, 0x158, 0x190, [@state={'state\x00', 0x8, {{0x200}}}, @vlan={'vlan\x00', 0x8, {{0x3, 0x7, 0x0, 0x1, 0x4}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xffffffff, 0x79a8}}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0}}}]}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0xf, 0x40, 0xfbff, 'veth0_to_bond\x00', 'veth0\x00', 'irlan0\x00', 'bond_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x70, 0xd0, 0x100}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7fff}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000001}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{{{0x3, 0x20, 0x0, 'bridge0\x00', 'ifb0\x00', 'bridge_slave_1\x00', 'eql\x00', @broadcast, [0x0, 0xff, 0x6c1a7e269449e4d7, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xe0, 0x118, 0x168, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0xffffffffffffffff, 0x1}}}, @cpu={'cpu\x00', 0x8, {{0x7}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}]}, @common=@log={'log\x00', 0x28, {{0x1000, "1a1f13b507e8737a508817348e891d53cd9c64605c3ff6ac5ea54d09c9cd", 0x4}}}}, {{{0x13, 0x0, 0xe88d, 'veth1_to_bond\x00', 'ip6gretap0\x00', 'gretap0\x00', 'ip6tnl0\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x70, 0xb8, 0xe8}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xf4, 0x9cba, 0x2}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}}]}]}, 0x1140) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0xfffffffffffffffc}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)) 11:01:05 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000600)="7685427801bf9010063037780953c84a646631712cda943146fb570115931dd1992f8043b788d24c1551cefcb5153d20b4e632697c97193502df6deae7b4c921955fb6086244113182b8f313593c4f226eb613cd2f6ca4a388a9782d215e5884f52b2d7774001bd238965172bacf8582f5b4ed470000e28d20a189b63316035911bcc91665ae6e37b5246b01389448912f207cafed83929be5e93185db493494ad2ba500000096567028a29b82d3d427d6627d8ef9cf5356dc654cf07bd936bae49c512edbfb56bd627ac095bed9fe8bd4", 0xd1, 0xfffffffffffffffd) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1, 0x4, 0x2, 0x8, r2}) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000440)) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300), 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000000c0)=0x7fffffff, 0x4) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_channels={0x2a}}) 11:01:05 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x3, 0x100) r2 = socket$inet6(0xa, 0x5, 0x6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000003c0)=0x4, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000380)={0x0, 0x974e, 0xa3, 0x96c, 0x9, 0x93, 0x3000000000000, 0x0, 0x3, 0x7fff, 0x4, 0xe9}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000340)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x200, 0x0, 0x6, 0x0}, &(0x7f0000000180)=0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000002c0)={0x0, @aes128, 0x0, "43abfa5cc73284dc"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2e68a524, 0x0}}}, 0x7, 0x17}, &(0x7f0000000280)=0x90) 11:01:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) close(r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000080)=0x4) 11:01:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) close(r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000080)=0x4) 11:01:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008915, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002480)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000100)=0x32) close(r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000080)=0x4) 11:01:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x608400, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000000c0)=""/98) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) accept4$packet(r1, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 11:01:05 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x3, 0x401, 0x8002, 0x1, 0x8, 0x3, 0x80000001, 0x400, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x3, 0x1, 0x9}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005280)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="612269a26b8c4b582ce84856c85a8862770ac6e1f5fd3c6e09617c88141d5c61", 0x20}], 0x1}], 0x1, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000d80)=""/4096, 0x20001d80}], 0x1) 11:01:05 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040), 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000dffc0c00000000000000000000005b65da62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700912dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce568a166b5"], 0x81}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100), 0xc, &(0x7f00000000c0)={&(0x7f000023f000)=ANY=[]}}, 0x80000000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) seccomp(0x1, 0x1, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x5, 0x9, 0x2, 0x100}, {0x20, 0x9, 0x5}, {0x1, 0x7a82, 0x7, 0xfffffffffffffffc}, {0x8, 0x100000001, 0x10001, 0x2}, {0x1, 0x4, 0x7, 0x7ff}, {0x8001, 0x2d, 0x1fae8868, 0x3}, {0x4, 0x6, 0x1, 0x40}, {0xff, 0xd4, 0x60d7, 0x1}]}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0), 0x1) 11:01:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) tkill(r2, 0x1000000000013) 11:01:07 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffff, 0x8000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x32, 0x0, 0x2, 0x100000001}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f00000000c0)={0x1000, r1}) r2 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x800000002009) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0x20123}) 11:01:07 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) rt_sigqueueinfo(r0, 0x31, &(0x7f0000000040)={0x2b, 0xfd1b, 0x2}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000140)=""/53) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', &(0x7f0000000200)='/dev/vfio/vfio\x00', 0xf, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000380)={0x2, &(0x7f0000000240)=[{}, {}]}) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f00000003c0)={0x1c, 0x1, 0x72c, 0x1}) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0xffffffff) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000440)={0x8f82, 0xafd4, 0xfffffffffffffffe, 0x7fffffff, 0x1, 0x400, 0x9bb, 0x3}, &(0x7f0000000480)={0x4, 0xa0, 0xae8, 0x2, 0x4, 0x6, 0x8, 0x9}, &(0x7f00000004c0)={0x40, 0xe52, 0xfffffffffffffffb, 0x401, 0x80, 0x8, 0x20, 0x6}, &(0x7f0000000540)={r2, r3+10000000}, &(0x7f00000005c0)={&(0x7f0000000580)={0x7}, 0x8}) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000600)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000640)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000006c0)=0x1, &(0x7f0000000700)=0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000740)=0x682) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000780)={0xec, 0x8, 0x1, 0x401, "15d11c0bbd575ac08626de96f5f5df9c3e8b8b8438793f03cec7b6f89bd7680b"}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e22, 0xc850000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1c6}}, 0xfffffffffffffffe, 0x52f0}, &(0x7f0000000880)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000008c0)={r4, 0x20}, &(0x7f0000000900)=0x8) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000940)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000980)={0x7ff, 0x4}) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f00000009c0)=0x9) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000a40)=[{{r6, r7/1000+30000}, 0x17, 0x46, 0xa717}, {{0x0, 0x7530}, 0x1f, 0x9, 0x4}, {{0x0, 0x7530}, 0x17, 0x7afb5ff9, 0x6}, {{0x0, 0x2710}, 0x17, 0x9fe5, 0xfffffffffffffffd}, {{0x77359400}, 0x3, 0x7fffffff, 0x273c}, {{0x77359400}, 0x0, 0x14000000000, 0x6}, {{0x0, 0x2710}, 0x1f, 0x9, 0xfffffffffffffffe}, {{0x0, 0x2710}, 0x17, 0x8, 0xdee9}, {{0x0, 0x2710}, 0x0, 0xfffffffffffffffc, 0x2}], 0xd8) getxattr(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=@random={'system.', '/dev/btrfs-control\x00'}, &(0x7f0000000bc0)=""/4096, 0x1000) write$P9_RREADDIR(r1, &(0x7f0000001bc0)={0x147, 0x29, 0x1, {0x5, [{{0x80, 0x3, 0x6}, 0x6, 0x3, 0x7, './file0'}, {{0x6b, 0x1, 0x5}, 0x1, 0x2, 0xd, './file0/file0'}, {{0x40, 0x3, 0x2}, 0x4, 0xcfa9, 0x7, './file0'}, {{0x42, 0x2, 0x8}, 0x5, 0x7, 0x7, './file0'}, {{0xa0, 0x2, 0x5}, 0x4, 0x10001, 0x7, './file0'}, {{0x40, 0x1, 0x1}, 0x4, 0x3c, 0x7, './file0'}, {{0x84, 0x1, 0x8}, 0x5a3d, 0x9, 0x7, './file0'}, {{0x4, 0x3, 0x2}, 0x3f, 0xfffffffffffffc00, 0x7, './file1'}, {{0x8, 0x4, 0x5}, 0xa, 0xfffffffffffffffc, 0x7, './file0'}, {{0x11, 0x2, 0x6}, 0x100000000, 0xffffffffffffff00, 0x7, './file0'}]}}, 0x147) msgget(0x0, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000001d40)={0x1, [0x4]}) r8 = add_key(&(0x7f0000001d80)='trusted\x00', &(0x7f0000001dc0)={'syz', 0x0}, &(0x7f0000001e00)="fb726db4f7af92508e65ab6f1ced564f6fe6205e87f3984540a2689952fca515dda8b3c103fe422bce37fff429eb5847625bb88c521b137694584aca1fba89d30b30afdaa443466997bd99645212a5555c13ab0ebd949050807fcc4085943b13c6bc78a8bc701c0e807dac99beb84c4dced992bf2579867bcf2337510ef6e28fef553acdfa31aed2fe8261ae9c69f316f41faebe5ece721e267371c0a801e3c19c5ee665b83a920cf6c94243bc2a3232a077bdbdb4d40cada1cda1f49b7440b9490791d9938de32aba2bcd3803490dd9fc97f48a3236eb5d4d3836da0677ccf7f91fb5cfb93f1957b76cc11f37859ed5d765968c", 0xf4, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001f00)={r8, 0x0, 0x6}, &(0x7f0000001f40)={'enc=', 'pkcs1', ' hash=', {'sha512-avx2\x00'}}, &(0x7f0000001fc0)="193a92d3ac716ef28ddc848ff5ff8a67a84fe189376485c0b5ceef5f1de578702a73c85dc4ba965c7527b7c49139be23668e3379245509419ff205", &(0x7f0000002000)="18c0c57b80270efbff77cdeeeca7915dd514a6f6c72790082889c4db974db4e03ec73fa173a3f92f5dd923c8ea032b69b8818941a22ccaab807ed916d6be4abddf8d8891e1704ffad282898704358608b2026f80edf0acfc7b3614e756a7ba66f02da43877d7c82ff75ec3c3a84b6173e8f5bfaee7fa5e208637d8fae752fb8e74dd010925e2516cd7614beeadd6edcf0b21b7") ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000002280)={0x2, 0xbae, &(0x7f00000020c0)="207ea5e252f608c47a4b6d080c660e0363850a90098a03784b3544e076f98f1411b593ff28e1e1be69db75f2e1e95694781d651c44fd9aaa7c00af37d0a9d8e8c0fc7d15ea2f67e02a1f612f58358295a04b273608b9f0907a7af2e3f8819e763091e071cc4d35c1820e83c19535b402f671e482e69c39e1ec3abf1612b57edf780ea922638be5fa20e0", &(0x7f0000002180)="6f490e0c058ce4cbe9465638f0807e6b8d85120edc366668f1d1c05238d852b09bfa23050331632c477bf09f6f9bd3d3009602588ee122a4eb380ae770fae5bd0b12dbf6b4d76b7f19686ff465a2596c9f47acee5fc9982060d9765e981452181cc5e05c2c9c19e8df85c0ce8d8365b2ab22dfb84ce9865300b2e86738ab8018bac51b277e640a9a8d8814ba438db1c5379940a3db43c744dd97b01919d6387beb3a495e19476c92b5c50b7995a8adf62bf62f901012f04e7ae9f8f7b537893e4776d0e1dfb24dcf2948bf9797e08066ded4576d06e1b3fcb84d2a37817e61c586e454a9bdf5c71dffad02fc9b49169542a722", 0x8a, 0xf3}) 11:01:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000effffffffffff91003e0081003800001100fe3f3120e90df77597a1c11d0b9f5d4059e07b4f7246e922a447058ec6ffdad191c266e6c95cefcc16cedbb322b83252cf673c3d1021634205d6dcbc85a121d286e493e72b5b5e99a3d787b4f7e2b787e90ca9e4cf9263cb2bba53721bd59fc605f49c75a0b23eb28f7f007a4b"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000}) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3f, 0x400) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000180)={0x6, 'syz1\x00'}) 11:01:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x100, 0x0) bind$vsock_dgram(r2, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x20100) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000140)=""/137, &(0x7f0000000080)=0x89) r4 = dup2(r1, r1) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020200000500002700000000000000000300070000a0000000000000000000000000000000000000"], 0x28}}, 0x0) [ 239.813141] vhci_hcd: invalid port number 0 11:01:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x100000000000000d, 0x6, 0x4, 0x1, 0x10, r0}, 0x2c) pipe(&(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x18) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x40, 0x30, r0, 0x3}, 0x2c) 11:01:08 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c74657243aa00000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000996d3307b915d0f836548a5e842d89348a93535dd276389cf0f8628149fbcc517c785277620e82fe269e8afcd271a273bb220a8ca792b3d530049d0c81a4fdbe"], 0x1) 11:01:08 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x2) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x50035, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={r1}) 11:01:08 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1020040}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x1}, 0x38) 11:01:08 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0xa002, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000180)={0xfa, &(0x7f0000000480)=""/250}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x400000) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x800, 0x44040) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000cc0)=0x0) sendmsg$nl_generic(r2, &(0x7f0000001f80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="d501e18da73ca85d7821aa70d4ca34debb8954b52810675af4251d401523245e897ff33dd6ffd5880185bd555439b705322beb26ca8a6b4c41455a0bffcf2e08d0b6563c7be105ba1b2dc13011daeefba8c7b217bc4619b721e4c78f928316649f06917f2734271e352ff2fa08000400ee00000040005d002cf77da3c0861d074410476e9f4bea45e32dd90300000000000000e8f5a535797023ee4a788a17dfed61621a6cc42e0c0031000101000000000000000c009400010000000000000028015a0008009300", @ANYRES32=r1, @ANYBLOB="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"], 0x1204}, 0x1, 0x0, 0x0, 0x80}, 0x8001) read$FUSE(r1, &(0x7f00000020c0), 0x1000) write$FUSE_OPEN(r1, &(0x7f0000000140)={0x20, 0x0, 0x2, {0x7}}, 0x20) statfs(&(0x7f00000001c0)='./file0/file0\x00', 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x38d8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000030c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000c805000068020000580100005c01000058e07195137455d85ab0718afd6b7a0c010000c0040000f8040000f8040000f8040000f804000005000000acce769a8d1d324592a9b3021db47961b13c4e6fbeed013d999555e6aecba18cf060226f6f967bd5f9de9f2e4d7da0ed4d8e38cce835d062d5274feac07ddbb27e108537841647bb46708de726c32233b76e707964fcf580e006fb00926b2bcc4b9036a40528da9c55fafdba5108a14ca893692da90b552dc46f8c96c6efba3346ef00e06bc087ac94d7acc91838f0381e9d922d7cfa9d98e9a24d054cba4054b6b8a9c035", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="fe8000000000000000000000000000bb997ae1eb150b46b9561687112503a60cffffff00ffffffffff000000ff000000ffffff00ff000000ffffff0000000000627269646765300000000000000000006e6c6d6f6e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000006000200000000000000000000000000000000001001580100000000000000000000000000000000000000000000000048006862680000000000000000000000000000000000000000000000000000008fb800000601050071040700ffff0002f9ff01003f00040001800800040002000000000001000000480052454449524543540000000000000000000000000000000000000000000002000000ff020000000000000000000000000001e00000010000000000000000000000004e23006600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800100100000000000000000000000000000000000000000000000048004e45544d415000000000000000000000000000000000000000000000000010000000ff020000000000000000000000000001e00000010000000000000000000000004e234e2400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100158010000000000000000000000000000000000000000000000004800686268000000000000000000000000000000000000000000000000000000020000000301010004000400ff0700000000fb0000000100070001000200f9ff0100ffff05000d0048004d415351554552414445000000000000000000000000000000000000000008000000ac1e0101000000000000000000000000e00000010000000000000000000000004e214e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000380100000000000000000000000000000000000000000000000028007365740000000000000000000000000000000000000000000000000000010300400600000000480052454449524543540000000000000000000000000000000000000000000005000000ac1414aa000000000000000000000000ac1414aa0000000000000000000000004e2400670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x628) 11:01:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0x4008ae48) [ 240.652183] IPVS: ftp: loaded support on port[0] = 21 11:01:08 executing program 1: ioprio_set$uid(0x0, 0x0, 0x7ed82f6c) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) [ 240.832338] chnl_net:caif_netlink_parms(): no params data found [ 240.919079] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.925758] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.933965] device bridge_slave_0 entered promiscuous mode [ 240.942673] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.949279] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.957488] device bridge_slave_1 entered promiscuous mode [ 240.986898] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.998149] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 241.046011] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.054443] team0: Port device team_slave_0 added [ 241.060886] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.069298] team0: Port device team_slave_1 added [ 241.075598] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.084508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.157906] device hsr_slave_0 entered promiscuous mode [ 241.202471] device hsr_slave_1 entered promiscuous mode [ 241.337610] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 241.347779] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 241.389738] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.396306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.403424] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.409906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.544340] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 241.550480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.565788] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.581059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.591890] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.602856] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.616330] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 241.634296] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 241.640415] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.658679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.667124] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.673663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.717296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.725734] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.732260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.742153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.754926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.763486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.786359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 241.795006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.806642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.825889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 241.835652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.844185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.859632] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 241.866307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.891966] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 241.911530] 8021q: adding VLAN 0 to HW filter on device batadv0 11:01:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={0x7}, &(0x7f0000000080), &(0x7f0000000180)={0x77359400}, 0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCGSID(r2, 0x5429, 0x0) r3 = socket$inet6(0xa, 0x1000000000003, 0x3) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000140)={'bridge0\x00\x0f\x00\x00\x80\x00', &(0x7f0000000100)=@ethtool_cmd={0x12, 0x0, 0x709000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}) 11:01:10 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0xa002, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000180)={0xfa, &(0x7f0000000480)=""/250}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x400000) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x800, 0x44040) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000cc0)=0x0) sendmsg$nl_generic(r2, &(0x7f0000001f80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="d501e18da73ca85d7821aa70d4ca34debb8954b52810675af4251d401523245e897ff33dd6ffd5880185bd555439b705322beb26ca8a6b4c41455a0bffcf2e08d0b6563c7be105ba1b2dc13011daeefba8c7b217bc4619b721e4c78f928316649f06917f2734271e352ff2fa08000400ee00000040005d002cf77da3c0861d074410476e9f4bea45e32dd90300000000000000e8f5a535797023ee4a788a17dfed61621a6cc42e0c0031000101000000000000000c009400010000000000000028015a0008009300", @ANYRES32=r1, @ANYBLOB="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"], 0x1204}, 0x1, 0x0, 0x0, 0x80}, 0x8001) read$FUSE(r1, &(0x7f00000020c0), 0x1000) write$FUSE_OPEN(r1, &(0x7f0000000140)={0x20, 0x0, 0x2, {0x7}}, 0x20) statfs(&(0x7f00000001c0)='./file0/file0\x00', 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x38d8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000030c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x628) 11:01:10 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x8, 0x3f}) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000080)={0x7ab, 0x9}) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000100)={[0x1, 0x0, 0x2000, 0x15005], 0x8, 0x20, 0x5}) r1 = semget$private(0x0, 0x1, 0x408) semop(r1, &(0x7f0000000180)=[{0x2, 0x7fff, 0x800}, {0x3, 0x800, 0x1000}, {0x3, 0x0, 0x1000}, {0x4, 0x9581, 0x1000}, {0x1, 0x1, 0x1800}, {0x2, 0x9, 0x800}, {0x1, 0x100000000, 0x800}, {0x1, 0x6, 0x1000}, {0x3, 0x9, 0x1000}, {0x3, 0x40, 0x1000}], 0xa) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000200)={0x55a, r2}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000240)) getpeername$tipc(r0, &(0x7f0000000640), &(0x7f0000000680)=0x10) ioctl$TCSETS(r0, 0x5402, &(0x7f00000006c0)={0x81, 0x1f, 0x1ff, 0x3, 0xc, 0x5, 0x0, 0x4, 0x0, 0x9, 0x4, 0x1}) semop(r1, &(0x7f0000000700)=[{0x1, 0x8, 0x1000}, {0x0, 0x4, 0x1000}, {0x1, 0x1, 0x1800}, {0x1, 0x17e7, 0x800}, {0x6, 0xc6, 0x1000}, {0x3, 0x0, 0x1800}, {0x4, 0x424, 0x1000}, {0x3, 0x800, 0x1800}], 0x8) r4 = shmget(0x3, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000740)=""/213) fcntl$getownex(r0, 0x10, &(0x7f0000000840)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000880)=r5) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000008c0)={0x0, 0xc5}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000940)=@assoc_id=r6, &(0x7f0000000980)=0x4) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000009c0)=""/46) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000a00)={0x9, 0x0, 0x10003, 0x20}) shmat(r4, &(0x7f0000ffd000/0x3000)=nil, 0x1000) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000a40)={0x3, 0xcb89}) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000a80)=""/64, &(0x7f0000000ac0)=0x40) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000b00)='trusted.overlay.opaque\x00', &(0x7f0000000b40)='y\x00', 0x2, 0x2) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000b80)='\x00', 0x1) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000bc0)={0x7b, 0x0, [0xfffffffffffffff7, 0x6f, 0x100000000]}) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000000c40)=""/65, &(0x7f0000000cc0)=0x41) 11:01:10 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002200)='/dev/cachefiles\x00', 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002240)={{{@in6=@empty, @in6=@empty}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000002340)=0xe8) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="480000001400030000000c04000f006b02027f03fe0500018701546fabca1b4e7d06a6bd7c493872f750375ed0824b2ad6e74703c48f93b82afb9bbc7a461eb886a5e54e8ff53144", 0x48}], 0x1}, 0x0) 11:01:11 executing program 3: socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r1 = accept4(r0, &(0x7f0000000080)=@sco, &(0x7f0000000140)=0x80, 0x800) accept$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) 11:01:11 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x900) vmsplice(r0, 0x0, 0x0, 0x0) 11:01:11 executing program 3: socket$isdn(0x22, 0x3, 0x37) socketpair(0x1, 0x80002, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000040)='%d') getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) r2 = dup(r1) write$FUSE_LSEEK(r2, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x2}, 0x18) [ 243.666289] IPVS: ftp: loaded support on port[0] = 21 11:01:11 executing program 2: lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.evm\x00', &(0x7f00000002c0)=@v2={0x3, 0x0, 0x2, 0x2, 0x3, "c5d88e"}, 0xd, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0xc0080, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x10000, 0x1000, &(0x7f0000000500)="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"}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'\x04+', 0x1}, 0x28, 0x1) sendto(r1, &(0x7f0000000000)="88b9456d043a4101", 0x8, 0x40, &(0x7f0000000080)=@ll={0x11, 0xff, r2, 0x1, 0x1ff}, 0x80) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) 11:01:11 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000007c0)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000600)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x800000006, 0x7d) semctl$GETPID(r3, 0x0, 0xb, &(0x7f0000000300)=""/194) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)=[0x0, 0x1ff]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:01:14 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="8500fbe000000000750000000000002b9f626b5afff684e7fd4be686930e30c198223e5a9b8f2a14d6e15053a7e9c7d6c81ac428969ebd07bd70104f20fbbb0bc98623270985305b6b81d65cf02736d3f65ac601dbaab2d1c02014e6a9f7cacfcb69d5dabb5576b87447287e05cda03409a4edfddf996b0e4133a24e38fffffeffca7f58534f7916fc14a61dca98815bcc2a5e94cdea807723"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 11:01:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1000001, 0x41) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0xc20, 0x21, 0x6}) 11:01:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, {0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = gettid() ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000003c0)={0x8, 0x7, 0x65a3, 'queue0\x00', 0xff}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x25) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 11:01:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x80) setsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000040)="92", 0x1) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0xdef5, @rand_addr="c0d1e0f1797754ef2ef5e7f6559b3238", 0x8}, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x26}, 0x1ff}, 0x6, [0xc3, 0x9, 0x6, 0xffffffff80000000, 0x5, 0x2, 0x4, 0x9]}, 0x5c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) r2 = add_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="3df04dcf41bb85904b79dbde8caef5db4186bc86becade3bc05108bba551ff9786e40e79833fa682231336c6ded3c27b3ff61babe5c9d89645bde8c06a43bf3ae868250cdf54416e24fe8bb28a24128f5481908d9b7f16b7a5dc5bbaccd3da48cd9f08f8049b9bd99c4ceba33f12b8301c15ebdda95ae3210567180564700aaf9923c372f8c85aa9900f01d30bf9131be40ab304669f16a8d24e5e61fce92df6a01f53c63318e79ca28b721a036e1d3d29b7746c06f9ba96b777829074bdfd6a8bb0af16c48f4d69477a03f0bf2fc477524a013a9b6b66f27f22dd74cc8ad99a65e46668346a9afb1cb816435bf6f5131c", 0xf1, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r1, r2) setxattr$security_smack_transmute(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000440)='TRUE', 0x4, 0x1) getpeername(r0, &(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000500)=0x80) r3 = accept$alg(r0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000580)='ns/ipc\x00') ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0xffff, 0x0, 0x17, 0x8, 0x10, "d9a607ec5127735fcd27eae38a5b1c83f527ced0080d844ece27dc8d77aebb081566dd5b6412ea5f822b15c42dfbf749196fbcf8ef62ea4f004a85717dd8b66a", "8aa58514f4ef6828cfe21d83fc30330823fd9907a7ca631c9e86e83e67e4dcac67fb5f0bb7993959eb121299daa1c92f781560ff289ef371ec10f33a586a42ac", "e0851dc15c3b53dd9d8327c45f1356eb207a078f4cdabb0366a310c81cdf1e25", [0x0, 0x2]}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'bcsf0\x00', 0xa02}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000700)={'dummy0\x00', @local}) fstat(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x3}, [{0x2, 0x6, r1}], {0x4, 0x4}, [{0x8, 0x6, r6}], {0x10, 0x4}, {0x20, 0x4}}, 0x34, 0xf08aca280c448808) lsetxattr$security_ima(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='security.ima\x00', &(0x7f0000000900)=@v2={0x5, 0x2, 0x11, 0x4, 0x1000, "14c997a34970f9b56b61333ba20c8fc3f0d1745075696c14a32283170430c74fa60d173cd4af2537956df6bbe009e234dd856baec2c2b6e4e4d84ee4e8794380dd0cd1fc69277561a1f2f445567622c0104018171a26e3120ed4ea03459b3a37e28c43ae0e895cf59cca664cfeb494852eb53e043760bb8efcee468d8fc3e1765176ff69072e12066236cd2fd9a4f40c2edabf07970371548e80ff3459156e6b49a7eae899c3055d5c130d542f67b2b4b28a210577e960f71fb0108892c027a35ba51cbda5c2a2888c9a7853b5b975e7bf7049af7a2e874131a1425a2911bf4e4112b72c295539dd1e4e7ba972b5e11be5096ca2eaf136da16f674a4e93a9be07929f279b8ff5758cd028df3cb964378b4882965ca3354831188e4296270dd97d1741f437852f7e3c35e2b987ee18b2b62916d9967e97352328cb60f2a9c01d297c7d56bf9483333bc9a43a67fc304e805f201c06592f7577f25ef24795f9a205a17e8e37b36c569fb4c3bcfdff1023696ee43dce867756e0836a407162d2daae52dddddf7a94dcb823647b0cf3c95f53432fb1c2a646a65e4ffbaf5f438b84bf84f54c697e4dd2c57f5230ffd76f58c91b98cbdd0235ad609135b4a662421aaf54c36d111ee21bff043f9596618526edd4d5a00cf71886eeec9f4fb6a4d1cc4cd2ca268b966889da66bde9fb152ff6f43178ec15b160e8d28cd6e3b9438dcfe5a51068f669c685b4ed4364ee6d688e53e49dfeec3989687fd8e4393464c7cbc79d1d6cabaaea4f6d94ae0297091fa53f1de90f5f7aea9089a179b56c01a85c56337f80d13adaa1d4a051b45e582196506b8ec0dd46ada8405d6bed2fca65019b29c964a315e4863b8b361913108228bf1cf685d4ce74b688c7e6440ffa641a843ae2b178c0d9f0bdbfef18510f9620b3051dca09fae8d31a4d01a302a13bc7301062e6544a0c50c58d845116b17f9c88b10666eed7af6ec0042f869aa38add718d5679a472c19f6a06f5f59fffba9506033506e32cd7c1dae37d0891c488ea4e5dcb6622fe177eba4bcf9cea05e594a9e8d343a6b2bba171ea5a037b41fbe48172e00288561736ba135229da247ed8f897b577e79c693880c5e5dc90f0d79e38a5a0784b16521222275e2f84dbb343b2cc28050f841f0d5981ba40a3b2fe03c66a90aba4a318cc75615c10e0ca2366acfcfdae2fe4988c114beaa047f8063938ef832a40c2bc2a88792c98968401f05a1db02607e86e259ec9ddcc3010ea0f3001112e1b044cb0ec6b717e2228bd2a33ab1489201ff60d198920e1c2112ccf9d205bdd6e8d2e249cbe7779af32efbc26503c794f73cf7453247fdbf70063754e073f3e2a5b2e4f1383c11d85bad6e44c65cb15002bd9b212d447776862ca58f7d3d1048177f99fe54f6e7a0c5b23dc3d7e1f9e1c699475cea5fb1ed0659a95199f353cb1e4957120c42b49dada9ac5002a3ecd04bdf377d7efc7f88c2c4f2e2dbbf4d696c9b8684cb05b8c3e1627c5630e55ad6f63ad310ec16714c4569800267cf2b3ab781de964076bb565d3a9f2453f56a66d059beb494c4515546e9a190bcd65f407e66a4d6964a0d90da0765a1dc6de7f53da3b3bf37ca2610d6e4fc99d678a6bc0f227cbba3cdc64c54fc6292d191060a90594c6626620ed8fda75135db32be5b40ac1daad7b3d8f39e3b77d2b2bf129140c257e7208aba74414448ae5ffb4df9f240a0b0f893d82ec89391282349d140caf01a71709d7c117f9d56b2f2f1743e5da1c877201eca876fe937d5e15adeaff7a4b03dcf6f2612b382253fc906463e828ca69f3530711c0400223562006141461535575405ac5fd65b81c4256a3d33fd65d5d7ecde557f846b1452162c2d7f36e9b935bb9c8ed40c6f066233e74789b86e2578cce6e411aa9fb31f8f9b0997657199fd3ce0ae70761b82b653541defc744c560e9b662f39d33782a0c1354d80712eeb135f3131c9e53ebf0fbe4f2995b5ec5d5351ac273cc0b20295b56c99efefff715d748d8017b3438c83cdc4b503b1c20a37ce7701a7b34122005b514bda4c86e316981b7577401ce06cbe4631fbd036bde7ae91422b4614ae989615ccc7fd5998c4ed456da3d69869139362b818495ffe12888809e9c514190633b84763dbd72600a2e3aec9a3be20adb9e31c682d9ee7c2546091a41af448b42919a3e7a79d1d8e632f0e2233c5403a856e207f42b076e9466dd070c44a04820d7ba3ff09986021c6354dcac2afb9290267544ffcfe80d2ba33c54864933dd442dc90e23ffca10d87dd3eb6a54f14d12e36728e0bc84a53ff07e5c1a226b84593f2469cefec1445c693f24b8901654e9597cc0748e97bab6edb6f47e1baa1cd656bbe9d42f6eb2eca76608dc4c0d87f887918020dc95388b929e353c1a588cbea6431caafad0b567cd3db7041cc5cff664f69323499f047c7612925fd9a2ab74b3d9a0c271c3a3a9a0faea07b0fa20622f1e6beefc913d591420abd6a0fb58223f40bbdad1fc264337617e46ed871cc22296c5225b674a13e222d927110e94c9ed307189dac10e07dfba4b5e895da387908a8d7e1a2ac96cbe61b875b464774c7997acf70e9c780c10775da562f6933a941517e0b911a721e6ebc4c5e4ffdded6ed66de9af0cb77c52b6f0d6ac88fce48a6b4b9ac99eff41499ad8ec8c89544e7324ae3e1614d8abeb5054b79be691ee967322cea4d6ae23b2e8c390cde22c8117d9b3aa2dc4535645c1c264857ede031de07357faa73a98d1b811a8906b9d23021ef6f2b9d9d1193a021451bed0abe0db960a616f5aba6bcac1dbea7c47d1e24a3dfea612fad4f78f93b1e54bca9e8f664c35fe8847f9bd6c13c6f628da56772bce1c6ae611688632169cdf0f6938356d907bd7fb74780db452ddb2580e8cd2d7df3b8e908dd0cccb3a96daf517d9792d0cee75f4b93bf81b026faca873e605e45c0a6218a7789ec3989f22fc459ead77fb1c42f7f0c5018cae14afe6f35acebe0a53d453191bd55cd28500a8eedb7b1e345946d72c32fe866cf79f1b38cb8e7ec9e6c56ca28432322cbd14408f32aa317a18da4585a83e89f35d9958e40768a8d663bc55a7f212778f94ed8c5f7353f75cd882923af0f79399480c9763c20bcd2c0473220a80b76cbc23669ade7d808b2bffb3765f19c298961c37bd432aeb0545650923b4b724abef796b01d1312b5f0bb18d3dcdb1c1ad8411cd9067a0f54a5021646c3a34a02374f01303afd2dd08abeef9001e9dfb246752b6389c27de788a3a76a8b0dc454b6b56f9772704f1c86b03852d950946df5e99707da18b8c53cdce60389762dbf2050a1fa6c9d51623504b06f455018dbf6e6f401e5568deee32d6ed3f1d34fd630af5023603b67c65832dae3b9e2dfdf835f9970e3db8c8ac8fbd3308e63311b8d1cb81fcbfbf5c180c4800ef360f4393eba17179b8dcac42de722776be91b8b6e698c090eb1e9c7dc0b71dcdfcc9d8fd3c5578ed694ce2296446888f49b742ad8370f49594474d7618c6ce11214cc95244a8b0efee2df1a5396916c74f0b0513ec4eb81d4e32c15e28130adfd1d76a0d6e7f464e2d52480413b5de519024f68370e9974c6e6bbed6bea71b0ca7d30558351d817fa1d3d5fcff9ea8d3d238d7fd39b81187e47d037583ebaad0621ca6072655d340490a4e2ec7111680028c99da9144e53a1c30f2d988cc56a73154ceefb9fb32f9fc4101e440ba31185cdb33a45b4e7ea9568ad66f690ad161b72be84f40bd4d10c3d58e5ca012be3c0c6af9378e10efafe8b7e5d59b05b2ed43de4e13277d74f4e3c4a3b8236f60a868d4d2db330d9eb7176654a75e216a183cbf1e67ca957eb3eab9dda6d1940b36e8d225ab823cfe67c8e56a1682ab1eb4c1483daea5238b2c6022c6165ddd327196537ef50f59e94021995f6cbe13af9b708e94f87086a69c24b6da97c2e468b1d2e34efaa25c0ba6c28049a5dd9547194187b78fcc7c81fa0e7938eada32ca258c5e3fc27c9bb760fc225e00fbb21408ec94d06e1a717555b1cf8348db8d0e5e8887c795809257a472746a5adf544fe331c43a1deb5ed44cdb127b43fbec3991dbd17843e0cdffe2ccda4aacd339bb50b657009af711871ad1350360aadfb2823dfd7653a53a347514b49ef95f263f5345534957d1ff8e903b750ab3a4fb3d494f1fd1541d47243dcaf9e8f3032a63b6a9f693404a732bf31ff654877e4b60884c3922295dcccc816a671e61d480d0a964e6ca5aa41a4a3c1f9192fad4b6b304e8d2010f7a26204becbc3bd25e5dcd6880dae7699781d2a11ccddb3ddfe68a6d2c29447b91301691bbc0349b4fdfb2647baae18b4f1b4975f3a4aaadeb652491d084353b00c01216425cf051b1a843eb7256b1846b2c8ba68deec79869117a6413f1a7bdbcd28ec487722eab5ce56de035f3943615c7e084f6ba797d0fbea6df072747aa0782ab42b899e83aeb16f8e064e12aae60624ca1b5a2d6494b7c0d8d888e553a5308986b98d5aa874c54b0159ee4049da9797b7d8063e3650a76a642e0de2dda9bb73aaac12d4e937ffaa36e9e1e0f8b504f41217fcbdd29ae3542bf92dc9aee8fc91d817ef565be9150ad18b3348963e6abdd9057f8c3bf7393bcdc145d1e596b94c932f304662dff86a3f6e337e6298dee1a030f90755f41bf06363d52b51b773639ea087175395f49fec72c4b900f1110e3004a9867062f5a169a36a05564c74e82125a5eba2d59091ae6d90e33da5f8ced733908734d2fe41ada3ff04cc1de546cad3fed5a85ac18aceaf2a7ea1843636fb37b620af090c4973fc484ed3692216da2054060571356d7e867bfb71327887dbabcf083c26cb53c853fa4a3a64918c249c314a2d1fc6084f92258fc6fabc95d4a3b1b1d85145bb3399c667a852f001dedf2eabdc2ba5a59d7061afc1939700315bc3d71497fb88c7f401761ef584f310efbc978b1626a85f9179377910016e4eeb782560f9e44d2eb152a872f9d1b20f244f5f123e5b3e701305db5f058f92504a7feb80a283dd0f316b58b0371b12ce5fcf8837989a475af2cd093008ea22959e05cf8f385bfd14a014f74eedcde914d6869f93c8600047a8101fbfa7e128aa2a3ec588fe30c0e03b8da1dad007fd7da3074dad2abfc4c9ab4275ae343b1f6897b1b2a3a6c3786d91336237b4859f42b74affd59d0422912e9a50f3d51dc966046b0ee4bbc38e8a86c9dfbb7d43a9ebf16ad42356bb0a0aedbf0290ed3d5be50378aac0ce376c497ebca15b9423a8de4bc6ac6796b813be82c319c8f4d0f8514a76b68cd81603961ff4dc5049ce4b3bbaea5775c607899f1606ac5c252a5f0e7b0d113c32d6ff70d876dceca9a98827cc46109a2634e5971cf1ac730a81898a156285bfc998cf5c7e05d3850a792a4e632f6913705ccac6e112540db53b2d2abb0da2132aecb64078bc6bf23caab24a84f461a8a4332d8857f8ab25a99b96ee9462c296ccf42dd18d7a05a668f47447ea70a1a58168702f13a9f04ab9b1b82e76aa5d41b91b2328aed6a42d1197c9bfefaf0558a846afeb224a446348b2c5a3fc3dcb62cb4e6dd60b23f09d68bd4eff1bf01dd4755d71ec2b6a0775b44c2add7c789fb7119858ae09f27b108633f82fe3d921059258f60b63fd6e2591cb2ee0947c65a563e02c0ff6d1a672fb0bab28b5408c27b235848a121b661ed8d199f6fac3268e4119cfdd89604110edb14eeb4fb53a31023b1691a6684dc7994f7e3bd97e1e71efd1788f6d74aa0f631c5058a8b13"}, 0x100a, 0x2) fcntl$setown(r0, 0x8, r4) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x4e24, 0x9, @rand_addr="a555b8ce161eedaf06b94f75b9acb3de", 0x1}, 0x1c) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000001980)={0xc1f, 0x0, 0x3007, 0x0, 0x9, 0x0, 0x9, 0x1}) futex(&(0x7f00000019c0)=0x2, 0x4, 0x2, &(0x7f0000001a00)={0x0, 0x1c9c380}, &(0x7f0000001a40), 0x2) accept4$vsock_stream(r0, &(0x7f0000001a80)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x4, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001ac0)={'TPROXY\x00'}, &(0x7f0000001b00)=0x1e) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000001b40)={{0xfffffffffffffd33, 0x9}, 0x0, 0x8, 0x4, {0xffffffff, 0x3}, 0x7ff, 0x1ff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001bc0), &(0x7f0000001c00)=0x4) syz_open_dev$vivid(&(0x7f0000001c40)='/dev/video#\x00', 0x3, 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001dc0)={0x3, 0x0, [{0x2000, 0x58, &(0x7f0000001c80)=""/88}, {0x0, 0x48, &(0x7f0000001d00)=""/72}, {0x10000, 0x8, &(0x7f0000001d80)=""/8}]}) 11:01:14 executing program 2: gettid() r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001780)={{{@in=@remote, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'ip6tnl0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'team0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b00)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001b40)={{{@in=@remote, @in6}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001c40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001c80)={'bpq0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000001cc0)={@local, @initdev}, &(0x7f0000001d00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001d40)={{{@in=@local, @in=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000001e40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f00000024c0)={@mcast1}, &(0x7f0000002500)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002540)={0x0, @rand_addr, @empty}, &(0x7f0000002580)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000025c0)={{{@in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000026c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000027c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002800)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000002840)={@multicast1, @initdev}, &(0x7f0000002880)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000028c0)={@rand_addr, @broadcast}, &(0x7f0000002900)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000029c0)={{{@in6=@empty, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000002ac0)=0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 246.103879] vhci_hcd: invalid port number 33 [ 246.108803] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub 11:01:14 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getrusage(0xffffffffffffffff, &(0x7f0000000000)) 11:01:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000100)={0x9, 0x20000000001, '\v'}, 0x0) [ 246.293945] binder: 10371:10373 transaction failed 29189/-22, size 24-8 line 2896 [ 246.341555] binder: 10371:10379 transaction failed 29189/-22, size 24-8 line 2896 [ 246.368347] binder: 10371:10381 unknown command 0 [ 246.373571] binder: 10371:10381 ioctl c0306201 200002c0 returned -22 [ 246.384737] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.394054] binder: undelivered TRANSACTION_ERROR: 29189 11:01:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 11:01:14 executing program 1: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) 11:01:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) [ 246.900978] IPVS: ftp: loaded support on port[0] = 21 [ 246.987415] chnl_net:caif_netlink_parms(): no params data found [ 247.027912] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.034482] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.042508] device bridge_slave_0 entered promiscuous mode [ 247.051221] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.058036] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.065900] device bridge_slave_1 entered promiscuous mode [ 247.088443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 247.099549] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.123638] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 247.131359] team0: Port device team_slave_0 added [ 247.138739] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 247.146807] team0: Port device team_slave_1 added [ 247.152965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 247.160729] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 247.215478] device hsr_slave_0 entered promiscuous mode [ 247.252492] device hsr_slave_1 entered promiscuous mode [ 247.323607] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 247.332060] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 247.354282] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.360742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.367775] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.374246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.426729] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 247.433377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.444386] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.455463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.463310] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.470545] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.479224] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 247.492280] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 247.498375] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.509263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.517825] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.524375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.542733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.550634] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.557200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.576830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.585968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.600774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.623586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.631355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.643387] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 247.649485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.670570] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 247.685475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.759335] mmap: syz-executor.5 (10403) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 11:01:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2276, 0x0) 11:01:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2282, &(0x7f00000000c0)) 11:01:17 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x3, 0x3}, 0x22) 11:01:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0xd, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x38d}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000006031409200443a00fe800000000000000000000000e2fffffe0200000000000000000000000000010000907800000000fe800000000000000000000000000000215c7cddf521ccb1b30ffc51c3176f157e8eff169814531ee4"], 0x1) 11:01:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x2, 0x8, 0xff}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x2, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x7fff, 0x8, 0x9}}, @init={0x18, 0x84, 0x0, {0xfffffffffffffff8, 0x4c, 0x4, 0xa712}}, @sndrcv={0x30, 0x84, 0x1, {0xff, 0x5, 0x0, 0x2f0, 0xfff, 0x9, 0x3f, 0x6}}], 0xa8, 0x20008000}], 0x1, 0x0) [ 249.132433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.139412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:01:17 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000001e0007081dfffd946f610500020000001f00000000000800030006000400ff7e", 0x24}], 0x1}, 0x0) 11:01:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/current\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x41}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640), 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000159, 0x3718) [ 249.222977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 11:01:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 249.327710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.345877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.363021] hrtimer: interrupt took 31558 ns 11:01:17 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x3, 0x3}, 0x22) [ 249.418973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 11:01:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2272, &(0x7f00000000c0)) 11:01:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfdfdffff00000000}}], 0x0, 0x0, 0x0}) 11:01:17 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) [ 249.755446] binder: 10447:10449 transaction failed 29189/-22, size 0-0 line 2896 [ 249.841332] binder: undelivered TRANSACTION_ERROR: 29189 11:01:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 11:01:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) 11:01:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f00000002c0)}) 11:01:20 executing program 5: gettid() r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001780)={{{@in=@remote, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'ip6tnl0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'team0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b00)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001b40)={{{@in=@remote, @in6}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001c40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001c80)={'bpq0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000001cc0)={@local, @initdev}, &(0x7f0000001d00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001d40)={{{@in=@local, @in=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000001e40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f00000024c0)={@mcast1}, &(0x7f0000002500)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002540)={0x0, @rand_addr, @empty}, &(0x7f0000002580)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000025c0)={{{@in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000026c0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000027c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002800)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000002840)={@multicast1, @initdev}, &(0x7f0000002880)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000028c0)={@rand_addr, @broadcast}, &(0x7f0000002900)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000029c0)={{{@in6=@empty, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000002ac0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b00)={0x0, @local, @loopback}, &(0x7f0000002b40)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 11:01:20 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0) socket$inet(0x2, 0x0, 0x0) lsetxattr$security_ima(0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 11:01:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2270, &(0x7f00000000c0)) [ 252.283112] binder: 10458:10466 transaction failed 29189/-22, size 24-8 line 2896 [ 252.286138] binder: 10461:10462 transaction failed 29189/-22, size 0-10 line 2896 11:01:20 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x0) [ 252.332667] binder: 10458:10475 transaction failed 29189/-22, size 24-8 line 2896 [ 252.343883] binder: 10458:10466 unknown command 0 [ 252.348729] binder: 10461:10472 transaction failed 29189/-22, size 0-10 line 2896 [ 252.348912] binder: 10458:10466 ioctl c0306201 200002c0 returned -22 [ 252.372808] binder: undelivered TRANSACTION_ERROR: 29189 11:01:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe78, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f00000002c0)}) [ 252.382874] binder: undelivered TRANSACTION_ERROR: 29189 [ 252.425556] binder: undelivered TRANSACTION_ERROR: 29189 [ 252.437458] binder: undelivered TRANSACTION_ERROR: 29189 11:01:20 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x0, 0x0, 0xffffffffffffffe7}}) 11:01:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1000000}) [ 252.554082] binder: 10483:10486 transaction failed 29189/-22, size 0-3704 line 2896 11:01:20 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(r0) set_tid_address(0x0) 11:01:20 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000500)='./file0\x00') r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r1 = getpgid(0x0) write$cgroup_pid(r0, &(0x7f00000001c0)=r1, 0x12) [ 252.737981] binder: undelivered TRANSACTION_ERROR: 29189 11:01:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 11:01:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001e00090126d70000000000000000000000000c0000000800000000000000"], 0x1}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 11:01:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x2}) 11:01:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000ff100000000000009500000000000000"], 0x0, 0x2, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 11:01:21 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000700)=0x7, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x110005, 0x0) 11:01:21 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x200031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000), 0x8) 11:01:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:21 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0x0) close(r1) 11:01:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) syz_execute_func(&(0x7f0000002780)="3666440f50f564ff0941c3c4c27d794e000b7265ccc33e0f111066450f38df9bd62f6f45d319c4839122704d76") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) shutdown(r1, 0x0) 11:01:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r1) recvmmsg(r3, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010021, &(0x7f0000007180)={0x77359400}) 11:01:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 11:01:22 executing program 3: syz_open_procfs(0x0, &(0x7f0000004640)='net/raw\x00') 11:01:22 executing program 5: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffd82, &(0x7f0000000180)={0x0}}, 0x0) 11:01:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrusage(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x151) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000440), 0x4) 11:01:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 11:01:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x4557434d) sendfile(r0, r3, &(0x7f0000000100)=0x15, 0x20000000006) 11:01:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0x5) fcntl$addseals(r3, 0x409, 0x8) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) dup3(r2, r3, 0x0) 11:01:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1b) 11:01:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12}, &(0x7f0000000000)) pause() timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:23 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000140)=""/254) 11:01:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup2(r0, r1) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 11:01:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:23 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 11:01:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000130a0508ff0280fffdfffe2e0a0000000c0005002f006a007d0a00010c000200570022ff02f1d271"], 0x2c}}, 0x0) 11:01:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:23 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:24 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:24 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc04c6100, &(0x7f0000000000)) 11:01:24 executing program 2: r0 = socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) 11:01:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:01:24 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 256.164986] binder: 10662:10670 transaction failed 29189/-22, size 0-0 line 2896 11:01:24 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000005c0)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x6a) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, 0x0) 11:01:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 256.232154] protocol 88fb is buggy, dev hsr_slave_0 [ 256.237666] protocol 88fb is buggy, dev hsr_slave_1 11:01:24 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 256.394208] protocol 88fb is buggy, dev hsr_slave_0 [ 256.399808] protocol 88fb is buggy, dev hsr_slave_1 11:01:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 11:01:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 256.482601] binder: undelivered TRANSACTION_ERROR: 29189 11:01:25 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:25 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x0) 11:01:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x4c, 0x1, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x18) 11:01:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0003000000a4000000c910d46d2e05c81efac72f000000db71ff01000100010708000000000000000000000000"], 0x1) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = dup(r0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000200)) write(r1, 0x0, 0x0) 11:01:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:25 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:25 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 11:01:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:25 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0xfdfdffff}) 11:01:25 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)) 11:01:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11:01:25 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:25 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000001080)={0x0, 0x0}) 11:01:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) 11:01:26 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:26 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$revoke(0x3, 0x0) 11:01:26 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) tkill(r0, 0x15) 11:01:26 executing program 2: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000924d0e7540a2f03a7986ddb532976a330000a2540c66fe78817c00008491593db50500039113e567568e9582758fda2a371a88a1dd"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:01:26 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044327, &(0x7f0000001080)={0x0, 0x0}) 11:01:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) dup2(r0, r1) 11:01:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:26 executing program 2: socketpair$unix(0x1, 0x2000200000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x8000000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="ff"], 0x1) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000001c0), 0x4) read$FUSE(r2, &(0x7f0000000480), 0x1000) 11:01:26 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='sched\x00') sendfile(r0, r2, &(0x7f0000000040)=0x100000, 0x8001) 11:01:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) dup3(r1, r0, 0x0) 11:01:27 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000180)={0xfffffffffffe}) 11:01:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:27 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) 11:01:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:27 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0xfdfdffff, 0x0, 0xfdfdffff}) 11:01:27 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20005f) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600800000000000000000000002000600ca3f8bca0000000038000000000000f7ffffffffffff1f000200000000000800000000000100000000000000000008000000000100000400000000000000f3eed945a333c96b7285c1b0000c085355be8830f56282c62c95720000000000000000000000"], 0x78) close(r0) mlockall(0x6) uselib(&(0x7f00000000c0)='./file0\x00') mlockall(0x4) 11:01:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:27 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0x0, 0x0) 11:01:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x79) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) 11:01:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:27 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) socketpair$unix(0x1, 0x40000000000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 11:01:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11:01:28 executing program 4: r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00\x0f\xff\xff\xfd\xfd\x03\x00', 0xb7}) 11:01:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="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", 0x590}], 0x1) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000140)=""/47, 0x2f}], 0x1}}], 0x1, 0x0, 0x0) 11:01:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memt\x00\x8a\x11>\xe2\xf5bYQ\xf6\xf2\x8cro\xf8&\xbdL\x18\xbb\xfa`\xa8<\x9f\xb5\x03/\xb4\x93\xd0\xa5\xa0\nf\x18\xfd-b\xc2s\xccV\x0e3', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x1f}) write$cgroup_int(r1, &(0x7f0000000080), 0xffffff19) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000340)={0x0, 0xffffffff000}) 11:01:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000847000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 11:01:28 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f023c123f3188a070") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0xfffffffffffffffd) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 11:01:28 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc0386106, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101}) 11:01:28 executing program 5: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 11:01:29 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:29 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104307, &(0x7f0000001080)={0x2, 0x0}) [ 260.966843] binder_alloc: binder_alloc_mmap_handler: 10925 20001000-20004000 already mapped failed -16 11:01:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:29 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x0, 0x300}}) 11:01:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 11:01:29 executing program 4: 11:01:29 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0x100007, 0x0) 11:01:29 executing program 1: 11:01:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:29 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001480), 0x1000) 11:01:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="f2"], 0x0, 0x0, 0x0}) 11:01:29 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 262.074705] binder: 10973:10974 unknown command 242 [ 262.079878] binder: 10973:10974 ioctl c0306201 20000400 returned -22 11:01:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) connect$caif(r2, &(0x7f0000000040)=@dgm, 0x18) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'veth0_to_bridge\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0) getuid() getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000480)) syz_genetlink_get_family_id$fou(0x0) ioctl$int_in(r0, 0x5421, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x4, @ipv4={[], [], @multicast1}, 0x5}, @in={0x2, 0x4e21, @multicast2}], 0x2c) 11:01:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:30 executing program 5: 11:01:30 executing program 4: 11:01:30 executing program 4: 11:01:30 executing program 5: 11:01:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:30 executing program 4: 11:01:30 executing program 5: 11:01:31 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:31 executing program 4: 11:01:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:31 executing program 5: 11:01:31 executing program 2: 11:01:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:31 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:32 executing program 5: 11:01:32 executing program 4: 11:01:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:33 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:33 executing program 4: 11:01:33 executing program 5: 11:01:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:33 executing program 2: 11:01:33 executing program 5: 11:01:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:33 executing program 2: 11:01:33 executing program 4: 11:01:33 executing program 0: read(0xffffffffffffffff, &(0x7f0000000040)=""/28, 0x7575) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:33 executing program 5: 11:01:34 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:34 executing program 4: 11:01:34 executing program 2: 11:01:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:34 executing program 0: read(0xffffffffffffffff, &(0x7f0000000040)=""/28, 0x7575) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:34 executing program 5: 11:01:34 executing program 4: 11:01:34 executing program 5: 11:01:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:34 executing program 2: 11:01:34 executing program 0: read(0xffffffffffffffff, &(0x7f0000000040)=""/28, 0x7575) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:34 executing program 4: 11:01:35 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) 11:01:35 executing program 5: 11:01:35 executing program 0: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:35 executing program 2: 11:01:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:35 executing program 4: 11:01:35 executing program 4: 11:01:35 executing program 5: 11:01:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:35 executing program 2: 11:01:35 executing program 0: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:35 executing program 5: 11:01:36 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) 11:01:36 executing program 4: 11:01:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:36 executing program 5: 11:01:36 executing program 2: 11:01:36 executing program 0: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:36 executing program 5: 11:01:36 executing program 2: 11:01:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:36 executing program 4: 11:01:36 executing program 5: 11:01:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:37 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) 11:01:37 executing program 4: 11:01:37 executing program 2: 11:01:37 executing program 5: 11:01:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:37 executing program 4: 11:01:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:37 executing program 2: 11:01:37 executing program 5: 11:01:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:37 executing program 4: 11:01:37 executing program 2: 11:01:38 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:38 executing program 5: 11:01:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:38 executing program 2: 11:01:38 executing program 4: 11:01:38 executing program 5: 11:01:38 executing program 2: 11:01:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:38 executing program 4: 11:01:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:38 executing program 5: 11:01:39 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:39 executing program 2: 11:01:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:39 executing program 4: 11:01:39 executing program 5: 11:01:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:39 executing program 2: 11:01:39 executing program 5: 11:01:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:39 executing program 4: 11:01:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11:01:39 executing program 2: 11:01:39 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 11:01:39 executing program 5: 11:01:39 executing program 4: 11:01:39 executing program 2: 11:01:40 executing program 2: 11:01:40 executing program 4: 11:01:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$TCFLSH(r0, 0x8910, 0x709000) 11:01:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 11:01:40 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40202000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) capset(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000000) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5f, &(0x7f0000000340)={@local, @random="e1d39280e50f", [], {@llc_tr={0x11, {@llc={0xef, 0xe, '$', "3d7fdbdc177469b4ff0c20c193e0e82e775057862211cd3c668bd07eb1b15688ac0f66b5028a514ee921c021dc136a3018b4cb90919654f3521e99d17e55af6fc21af9c24640bf9f7c830b27f27e"}}}}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x4c00007e, &(0x7f00000013c0)={&(0x7f0000000100)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80008801}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r3, 0x120, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040c0) inotify_init() ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee61, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:01:40 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001f76, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0x2e828903, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) 11:01:40 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:40 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8001) 11:01:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 11:01:40 executing program 2: 11:01:40 executing program 4: 11:01:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) dup3(r1, r0, 0x0) 11:01:41 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0) socket$inet(0x2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 11:01:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0), 0x0, 0x0, 0x0) 11:01:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:01:41 executing program 5: gettid() r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)) syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001780)={{{@in=@remote, @in6=@loopback}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'ip6tnl0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'team0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b00)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001b40)={{{@in=@remote, @in6}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001c40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001c80)={'bpq0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000001cc0)={@local, @initdev}, &(0x7f0000001d00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001d40)={{{@in=@local, @in=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000001e40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f00000024c0)={@mcast1}, &(0x7f0000002500)=0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 11:01:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0), 0x0, 0x0, 0x0) [ 273.359997] binder: 11328:11329 transaction failed 29189/-22, size 24-8 line 2896 11:01:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0) [ 273.407757] binder: 11328:11329 transaction failed 29189/-22, size 24-8 line 2896 [ 273.450638] binder: 11328:11334 unknown command 0 [ 273.456105] binder: 11328:11334 ioctl c0306201 200002c0 returned -22 [ 273.487004] binder: undelivered TRANSACTION_ERROR: 29189 [ 273.507407] binder: undelivered TRANSACTION_ERROR: 29189 11:01:42 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0), 0x0, 0x0, 0x0) 11:01:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2276, &(0x7f00000000c0)) 11:01:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00'}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$netlink(r1, &(0x7f0000000280)=@unspec, 0xc) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") sendmmsg(r0, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 11:01:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:01:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:01:42 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 11:01:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:01:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:01:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227e, &(0x7f00000000c0)) 11:01:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="390040ef7502e2809d6c720dfc18a2a53e8fda4bf7a7ae000048b9e400ffc6d880002f9d24214322ba0b71be7ea100000100f41622e893db4b"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 275.149604] ptrace attach of "/root/syz-executor.4"[11404] was attempted by "/root/syz-executor.4"[11405] 11:01:43 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\xdb\\', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1d, 0x9, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) 11:01:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe78, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f00000002c0)}) 11:01:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)}}], 0x1, 0x0, 0x0) 11:01:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup2(r1, r0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) 11:01:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) [ 275.549009] binder: 11408:11418 transaction failed 29189/-22, size 0-3704 line 2896 [ 275.586608] binder: 11408:11418 transaction failed 29189/-22, size 0-3704 line 2896 11:01:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)}}], 0x1, 0x0, 0x0) 11:01:43 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x401}) [ 275.587098] binder: undelivered TRANSACTION_ERROR: 29189 [ 275.645424] binder: undelivered TRANSACTION_ERROR: 29189 11:01:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\xdb\\', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1d, 0x9, 0x0, 0x0, {0xa, 0x0, 0x0, r1}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) 11:01:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x40002) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0xf4, &(0x7f0000000180)=0x0) dup2(r0, r1) io_cancel(r2, 0x0, &(0x7f00000003c0)) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5eea, 0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) write$P9_RLINK(r3, &(0x7f00000001c0)={0x7}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:01:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)}}], 0x1, 0x0, 0x0) 11:01:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 11:01:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) gettid() 11:01:44 executing program 1: setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:44 executing program 5: timer_create(0x2, 0x0, &(0x7f0000000280)) 11:01:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 11:01:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000100)="0adc1f023c123f3188a070") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:44 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r1, 0x204, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) capset(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000000) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5f, &(0x7f0000000340)={@local, @random="e1d39280e50f", [], {@llc_tr={0x11, {@llc={0xef, 0xe, '$', "3d7fdbdc177469b4ff0c20c193e0e82e775057862211cd3c668bd07eb1b15688ac0f66b5028a514ee921c021dc136a3018b4cb90919654f3521e99d17e55af6fc21af9c24640bf9f7c830b27f27e"}}}}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001400)={0x0, 0x4c00007e, &(0x7f00000013c0)={&(0x7f0000000100)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80008801}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r4, 0x120, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040c0) inotify_init() ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee61, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:01:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 11:01:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x79) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 11:01:44 executing program 5: socketpair$unix(0x1, 0x805, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 11:01:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:01:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1e2ba62e) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:01:45 executing program 1: setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) [ 277.105447] binder: 11487:11490 ioctl 4018620d 20000400 returned -22 11:01:45 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40, 0x0) close(r0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0xfffffe19}], 0x1) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 11:01:45 executing program 1: setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x2}, 0x8) sendmsg$netlink(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000), 0x8) 11:01:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0xe03, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:01:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:45 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:01:45 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:45 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0x8001}) 11:01:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1e2ba62e) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:01:46 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x79) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) 11:01:46 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x0, 0x0, 0x0, 0x300}}) 11:01:46 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:46 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) clone(0x3102001ff2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:01:46 executing program 3: clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xf) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x58}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 11:01:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x7575) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x8}, 'port0\x00', 0x0, 0x0, 0x0, 0x100000000}) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 11:01:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080), 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:01:46 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:46 executing program 5: socketpair$unix(0x1, 0x200000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') sendfile(r0, r1, 0x0, 0x7fffffff) 11:01:46 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="c10900000000000000021fe4ac141417e0", 0x11}], 0x1}, 0x0) [ 278.700705] ================================================================== [ 278.708131] BUG: KMSAN: uninit-value in nf_nat_setup_info+0x700/0x3b00 [ 278.714818] CPU: 1 PID: 11591 Comm: syz-executor.3 Not tainted 5.0.0-rc1+ #9 [ 278.722018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.731377] Call Trace: [ 278.733992] dump_stack+0x173/0x1d0 [ 278.737638] kmsan_report+0x12e/0x2a0 [ 278.741465] __msan_warning+0x82/0xf0 [ 278.745287] nf_nat_setup_info+0x700/0x3b00 [ 278.749630] ? ring_buffer_resize+0x196f/0x1c80 [ 278.754341] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 278.759556] nf_nat_inet_fn+0x106c/0x11f0 [ 278.763732] ? cpu_partial_store+0x60/0x270 [ 278.768152] nf_nat_ipv4_local_fn+0x2bf/0x870 [ 278.772663] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 278.777859] ? nf_nat_ipv4_out+0x790/0x790 [ 278.782102] nf_hook_slow+0x176/0x3d0 [ 278.785926] __ip_local_out+0x6dc/0x800 [ 278.789927] ? __ip_local_out+0x800/0x800 [ 278.794097] ip_local_out+0xa4/0x1d0 [ 278.797831] iptunnel_xmit+0x8a7/0xde0 [ 278.801759] ip_tunnel_xmit+0x35b9/0x3980 [ 278.805958] ipgre_xmit+0x1098/0x11c0 [ 278.809782] ? ipgre_close+0x230/0x230 [ 278.813680] dev_hard_start_xmit+0x604/0xc40 [ 278.818122] __dev_queue_xmit+0x2e48/0x3b80 [ 278.822483] dev_queue_xmit+0x4b/0x60 [ 278.826286] ? __netdev_pick_tx+0x1260/0x1260 [ 278.830800] packet_sendmsg+0x79bb/0x9760 [ 278.834980] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 278.840453] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 278.845660] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 278.851085] ___sys_sendmsg+0xdb9/0x11b0 [ 278.855173] ? compat_packet_setsockopt+0x360/0x360 [ 278.860214] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 278.865411] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 278.870782] ? __fget_light+0x6e1/0x750 [ 278.874787] __se_sys_sendmsg+0x305/0x460 [ 278.878960] __x64_sys_sendmsg+0x4a/0x70 [ 278.883033] do_syscall_64+0xbc/0xf0 [ 278.886768] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 278.891964] RIP: 0033:0x457e39 [ 278.895165] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.914170] RSP: 002b:00007f9bc0322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.921896] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39 [ 278.929172] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 278.936447] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 278.943728] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9bc03236d4 [ 278.951017] R13: 00000000004c5417 R14: 00000000004d9228 R15: 00000000ffffffff [ 278.958305] [ 278.959928] Uninit was created at: [ 278.963466] No stack [ 278.965795] ================================================================== [ 278.973162] Disabling lock debugging due to kernel taint [ 278.978618] Kernel panic - not syncing: panic_on_warn set ... [ 278.984516] CPU: 1 PID: 11591 Comm: syz-executor.3 Tainted: G B 5.0.0-rc1+ #9 [ 278.993105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.002461] Call Trace: [ 279.005079] dump_stack+0x173/0x1d0 [ 279.008729] panic+0x3d1/0xb01 [ 279.011970] kmsan_report+0x293/0x2a0 [ 279.015796] __msan_warning+0x82/0xf0 [ 279.019623] nf_nat_setup_info+0x700/0x3b00 [ 279.023963] ? ring_buffer_resize+0x196f/0x1c80 [ 279.028673] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 279.033881] nf_nat_inet_fn+0x106c/0x11f0 [ 279.038075] ? cpu_partial_store+0x60/0x270 [ 279.042421] nf_nat_ipv4_local_fn+0x2bf/0x870 [ 279.046940] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 279.052148] ? nf_nat_ipv4_out+0x790/0x790 [ 279.056393] nf_hook_slow+0x176/0x3d0 [ 279.060214] __ip_local_out+0x6dc/0x800 [ 279.064213] ? __ip_local_out+0x800/0x800 [ 279.068374] ip_local_out+0xa4/0x1d0 [ 279.072128] iptunnel_xmit+0x8a7/0xde0 [ 279.076057] ip_tunnel_xmit+0x35b9/0x3980 [ 279.080276] ipgre_xmit+0x1098/0x11c0 [ 279.084108] ? ipgre_close+0x230/0x230 [ 279.088015] dev_hard_start_xmit+0x604/0xc40 [ 279.092459] __dev_queue_xmit+0x2e48/0x3b80 [ 279.096826] dev_queue_xmit+0x4b/0x60 [ 279.100641] ? __netdev_pick_tx+0x1260/0x1260 [ 279.105154] packet_sendmsg+0x79bb/0x9760 [ 279.109329] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 279.114799] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 279.120008] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 279.125435] ___sys_sendmsg+0xdb9/0x11b0 [ 279.129528] ? compat_packet_setsockopt+0x360/0x360 [ 279.134582] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 279.139793] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.145173] ? __fget_light+0x6e1/0x750 11:01:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) sendmsg$NBD_CMD_STATUS(r3, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1e2ba62e) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:01:47 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f000093c000/0x1000)=nil], &(0x7f0000000180), 0x0, 0x0) creat(0x0, 0x0) 11:01:47 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000001080)={0x0, &(0x7f0000000080)}) 11:01:47 executing program 5: r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000001000/0x1000)=nil, 0x6000) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) remap_file_pages(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 11:01:47 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) [ 279.149186] __se_sys_sendmsg+0x305/0x460 [ 279.153372] __x64_sys_sendmsg+0x4a/0x70 [ 279.157449] do_syscall_64+0xbc/0xf0 [ 279.161180] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 279.166378] RIP: 0033:0x457e39 [ 279.169586] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.188506] RSP: 002b:00007f9bc0322c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.196230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39 [ 279.203505] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 279.210791] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 279.218099] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9bc03236d4 [ 279.225390] R13: 00000000004c5417 R14: 00000000004d9228 R15: 00000000ffffffff [ 279.233670] Kernel Offset: disabled [ 279.237296] Rebooting in 86400 seconds..